Cyber Operations Enhancements

We are seeking a dedicated professional to provide Operations Enhancement support, focusing on maturing Security Operations Center (SOC) operations and improving SOC capabilities and visibility. The role involves managing security tool policies, automating operational tasks, and enhancing security measures through advanced signature and alert creation.

Responsibilities

Manage and optimize security tool policies for effective threat detection and response; Automate operational tasks and workflows to enhance SOC efficiency; Create and refine advanced security signatures and alerts to improve threat detection; Tune and maintain Intrusion Detection Systems (IDS) and Endpoint Detection and Response (EDR) solutions; Develop, review, and enhance SOC playbooks to ensure best practices in incident response; Research and test new tools and technologies to improve SOC operations and capabilities

Requirements

3 years of experience in a security operations role; Strong understanding of SOC processes and tools, including IDS and EDR platforms; Experience in automating security processes and developing playbooks; Excellent analytical and problem-solving skills; Ability to stay current with emerging security trends and technologies; US Citizenship is required