Contractor Cyber Defense Center

Key Responsibilities:

• Leadership and Management: Lead and manage the 24/7 Cyber Defense Center team, providing guidance, mentorship, and support to ensure effective performance and professional development.
• SIEM and SOAR Operations: Oversee the deployment, configuration, and management of SIEM and SOAR platforms to ensure optimal performance and threat detection capabilities.
• Threat Hunting: Develop and implement threat hunting strategies to proactively identify and mitigate potential security threats.
• Incident Management: Lead daily operations of the Security Incident Response Team and serve as incident commander for major incidents.
• Collaboration: Work closely with other departments, including IT, Risk Management, and Compliance, to ensure a cohesive and comprehensive approach to cybersecurity.
• Continuous Improvement: Stay current with the latest cybersecurity trends, threats, and technologies, and continuously improve the Cyber Defense Center s capabilities and processes.
• Metrics and Reporting: Recommend and produce key metrics, KPIs, and New Initiatives reports for internal review and for Senior Leadership Team.
• Roadmap Development: Lead roadmap development and stay current with program capabilities, suggesting enhancements as needed.
• Thought Leadership: Provide thought leadership for program improvements and new initiatives.

Qualifications:

• Education: Bachelor s degree in computer science, Information Technology, Cybersecurity, or a related field. A master s degree is preferred.
• Experience: Minimum of 7-10 years of experience in cybersecurity, with at least 3-5 years in a leadership role.
• Technical Skills: Proficiency in SIEM, SOAR, threat hunting, and incident response technologies and methodologies.
• Certifications: Relevant certifications such as CISSP, CISM, CEH, or equivalent are highly desirable.
• Leadership Skills: Strong leadership and team management skills, with the ability to motivate and inspire a team.
• Communication Skills: Excellent verbal and written communication skills, with the ability to effectively communicate complex technical concepts to non-technical stakeholders.
• Problem-Solving: Strong analytical and problem-solving skills, with the ability to think strategically and make data-driven decisions.
• Flexibility: Candidate must be flexible to operate during off business hours and weekends to handle the Cyber Incident Response function (only when needed)