Sr Manager, Incident Response

Senior Manager, Incident Response role at UltraViolet Cyber, a platform-enabled unified security operations company. The role works with service delivery teams providing MSSP services to a large client. As an embedded Cyber Security leader with the customer, the Senior Manager is responsible for an offshore team of Security Analysts managing and monitoring 2,500+ endpoints, working day-to-day with the Head of Product Security and the Chief Legal Officer. The role is strategic in leading a SOC team, incident response, detection coverage and tuning, security reviews and board-level dashboards. The position is required to be onsite 3 days per week (Tuesday, Wednesday, Thursday).

Responsibilities

Lead the Corporate Security Program; Manage the SOC team; Develop, publish, maintain, and enforce comprehensive organization-wide information security risk assessment framework, plans, policies, procedures, guidelines and controls; Evangelize and provide SME knowledge on Information security matters; Establish metrics and regular reporting mechanisms for assessing and measuring security, privacy, compliance and risk, including metrics for the Public Bug Bounty program; Manage planning, tracking and reporting including risk and issue tracking, developing schedules and managing interdependencies; Develop process documentation; Vendor Management (including procurement related activities) and the 3rd party vendor risk management program; Lead the incident response process and participate in vulnerability remediation efforts; Maintain the vulnerability management system and ensure compliance on SLAs for security bugs; Identify and resolve systemic issues impacting IT; Improve overall security awareness and instill a culture of secure software development throughout the IT organization; Manage the ongoing training program for employees; Manage various security governance, risk and compliance projects; Establish credibility as a trusted advisor to partners including customers, executives, peers, and employees; Maintain strong knowledge of ongoing security threats, remediation and operational standard methodologies; Support and manage action plans including exceptions to closure, working with risk owners; Manage relationships and information sharing with the Information Security Team, broader IT Team and Lines of Business; Act as an internal consultant within IT and business groups for Information Security Risk Assessments; Help develop an effective Information Security Strategy by aligning Risk Management and Information Security Governance efforts with Information Security Technology Strategy and Information Security Threats; Perform security audits and assessments of internal systems and third parties and recommend actions to mitigate risks; Perform technical security assessment of solutions and recommend/review security designs and controls; Oversee and perform operational execution of the third party cyber risk management processes; Act as primary trusted security advisor on projects; Support periodic audit activities related to the IT cyber security domain (e.g., GDPR, PCI, SOX); Provide hands-on security expertise during design, development, implementation and testing of IT projects; Provide clear direction and mobilize others to take action on priorities; Manage, coach and develop Information Security talent

Requirements

US Citizenship is Required; 10+ years experience in Computer Science field; Experience leading SOC or Incident Response teams; Experience collaborating and being a strategic member of a Zero Trust rollout; Experience owning detection engineering via Crowdstrike; Experience reviewing cloud configurations and AWS Security solutions; Experience performing continuous security validations and review of controls; Knowledge of NIST CSF risk register; Experience partnering with Threat Intelligence vendors and providing action around IOC hunts, blocks, detections, etc.; Experience with vulnerability management via Tenable; running scans, remediation cycle with analysts