Post Job Free
Sign in

Cyber Security Manager (2703397)

Company:
Placement Services USA, Inc.
Location:
Framingham, MA
Pay:
Not provided
Posted:
May 13, 2024
Apply

Posted By Premium Recruiter

Description:

Manage a team of SIEM engineers and responsible for training, development and performance management. Work closely with the Security Operations Center, MSSP, and Vulnerability Management Engineering team. Measure log collection coverage and address gaps. Develop and tune content in Splunk Enterprise Security & Splunk Phantom (SOAR). Maintain day-to-day operations of systems supporting SOC Engineering. Identify, document and update security systems and processes for SOC Engineering tools. Participate in developing SOC Engineering roadmap. Identify common attacker techniques using various log sources. Provide Analyst training and workshops on attacker tactics and techniques. Identify and develop security use cases. Develop alerts, dashboards, and reports for security monitoring. Automate incident response activities. Leverage SIEM, SOAR, and UEBA products to enhance incident response process (link removed) Data source onboarding and use case definition. Perform data interpretation, classification, and enrichment. Build data models. Manage knowledge objects (fields, extractions, tags, lookups, workflow actions, aliases, macros, etc.). Configure summary-based reports and data model acceleration. Identify and correct root causes of unplanned work and operational deficiencies. Normalize data sources, tune alerts, and reduce false positives. Perform Splunk patching and upgrades. Position is fixed location based in Framingham, MA office; however, telecommuting from a home office may also be allowed.

40 hours/week, 9:00am-5:00pm.

Seven (7) years of experience in a technical or related occupation.

Five (5) years of experience in the following (experience may be gained concurrently):

• Cyber Security experience

• Supporting Security Operations Center (SOC) Monitoring & Response

• Splunk Cloud and Enterprise Security

• ServiceNow Enterprise Platform & Incident Management

Three (3) years of experience in the following (experience may be gained concurrently):

• Incident Response

• Attacker Modeling Frameworks

• User & Entity Behavioral Analytics (UEBA)

• Scrum Kanban

Bachelor’s degree (or foreign equivalent) in Computer Science, Information and Communications Technology, or a directly related field.

Please copy and paste your resume in the email body do not send attachments, we cannot open them and email them at candidates at placementservicesusa.com with reference #2703397 in the subject line.

Thank you.

Apply