Security Operations Lead

Directly Reports To

Lead Security Operations Engineer

Main Area Of Responsibility

Lead the investigation and management of security incidents, as well as monitoring and analyzing security alerts to identify potential threats. Additionally, this role involves conducting threat intelligence, vulnerability assessments and penetration testing, and enhancing security infrastructure and processes.

Tasks

• Lead the investigation and resolution of security incidents, ensuring timely and effective response to minimize impact.
• Develop and implement security monitoring and incident response procedures and workflows.
• Collaborate with IT and other departments to enhance security measures, implement security best practices, and ensure compliance with security policies and standards.
• Conduct regular vulnerability assessments and coordinate penetration testing activities to identify and address security weaknesses.
• Perform cyber threat intelligence activities.
• Develop and maintain documentation related to security incidents, investigations, and response activities.
• Stay abreast of the latest cybersecurity trends, threats, and technologies, and recommend enhancements to the security infrastructure and processes.
• Assist team members in carrying out their responsibilities.
• Lead and assist team members in the implementation of new security technologies to improve security posture.
• Other tasks delegated by the Lead Security Operations Engineer and CTO.
  
  

• A bachelor's degree in information systems or equivalent work experience.
• Working knowledge of ISO 27001, Cloud Security, and other security baselines, standards, and applicable regulations.
• 5+ years of information security experience including experience in one or more of the following security disciplines: network monitoring, incident response, vulnerability management, penetration testing, disaster recovery or cyber threat intelligence.
• A strong understanding of the business impact of security tools and technologies.
• Professional security certifications (CISSP, GCIH, etc.) are preferred but not required.