Manager – Cybersecurity Operations Center – Csoc

Manager – Cybersecurity Operations Center – Csoc

Requirements

• 6 – 8 years of relevant IT experience or equivalent demonstrable knowledge & skill set.
• Ability to think critically to solve problems with minimal guidance.
• Ability to perform comprehensive Incident, root cause analysis and write technical reports.
• The ability to conduct investigations on multiple operating systems such as Linux, iOS, and Windows.
• Experience performing manual log analysis from a variety of host-based and network-based sources.
• The ability to conduct security investigations without the assistance of pre-extracted data or pre-established queries across multiple platforms like a SIEM, OS CLI/Terminal, EDR tool, etc.
• Familiarity with Digital Forensics and Incident Response (DFIR) concepts.
• Experience participating in CIRT/CSIRT investigations.
• Knowledge of exploits, vulnerabilities, malware families and common attack vectors.
• Effective in collaborating with teams in remote offices and multiple cultures across the globe​.

Responsibilities

• Oversee and drive the implementation of security operations, support incident response investigations, and threat mitigation strategies to protect the organization’s critical assets.
• Guide teams in strategy, alignment, analysis, and execution, ensuring security priorities, objectives, and deliverables are met effectively.
• Provide leadership, mentorship, and coaching to the CSOC team, fostering skill development and career growth.
• Partner with security, IT, and business teams to reduce vulnerabilities, manage risk, and improve CSOC response capabilities.
• Stay ahead of the evolving cyber threat landscape by integrating intelligence, hunting for advanced threats, and continuously improving detection methodologies.
• Enhance CSOC workflows, automation, and threat intelligence processes to strengthen security operations.
• Incident coordination by assignment of Work Streams and creation of reports.
• Serve as the technical escalation point for the CSOC team.
• Provide ad-hoc training to team members.
• Perform CSOC maturity projects under the guidance of Cyber Operations Leadership.
• Partner with Security Engineering teams to enhance features and capabilities within current security tooling.
• Create and update written policies and procedures.

Preferred Qualifications

• Intermediate and/or Advanced Security Certifications are a plus – CYSA+, CISSP, CFR, CHFI, GCIH, GCFA, or GNFA, PenTest+, OSCP, etc.

Benefits

No information provided on Benefits.