Job Description

Lead and manage a team of ITHRA SOC analysts and engineers in detecting, investigating, and responding to security incidents.

Develop and cultivate a proficient ITHRA SOC team with essential competencies to detect, investigate, respond, manage risk, anticipate security threats, and effectively mitigate risks.

Monitor, analyze, and identify security events and incidents.

Evaluate network, system, and security alerts, performing triage to determine scope, urgency, potential impact, and identify specific vulnerabilities.

Actively engage in decision-making with leadership and understand the broader impact of current decisions.

Create, implement, and maintain security policies, procedures, and standards.

Oversee the utilization of security tools and technologies, including SIEM, IDS/IPS, and firewalls.

Collaborate with other teams to develop and implement incident response plans.

Communicate security incidents and remediation efforts to senior management and stakeholders.

Stay current with emerging security threats and technologies and integrate them into the organization's security framework.

Establish and maintain training programs and conduct continuous training for ITHRA SOC staff.

Provide guidance and mentorship to ITHRA SOC team members.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.

• Certification from one of the following organizations: SANS, Offensive Security, or eLearn Security.

• 5 years of experience in information security, with at least two years in a SOC lead or management role.

• Proficient in security operations, intrusion detection, and incident handling.
• Experience with security monitoring using one or more SIEM technologies.
• Knowledge of current and emerging technologies and processes used within a SOC to enhance efficiency and effectiveness.
• Excellent communication, writing, and interpersonal skills; strong leadership abilities with the capacity to prioritize and execute tasks methodically and discipline, as well as manage expectations with stakeholders and team members.
• Comprehensive understanding of security threats and technologies.
• Experience with network and host-based security tools.
• Knowledge of incident response procedures and regulations.
• Strong analytical and problem-solving abilities.
• Excellent communication and leadership capabilities.

• Proven leadership and team management experience.