ResponsibilitiesJob Summary: As a SOC Manager on the Cyber Security team, you'll provide leadership, motivation, mentorship, and oversight to a team that designs, implements, maintains, and monitors resources, security tools and platforms used by the Cyber Fusion Center in near-real time to ensure efficient and effective cybersecurity daily operations. Responsible for hiring, firing, and performance / pay reviews. Makes decisions based on business objectives and allocated resources. Establishes operational objectives and work plans and delegates assignments to the team. Involved in modifying and executing company policies that affect immediate operations and may also have company-wide impact. Supports the function's (Digital) business strategy by implementing new standards and products, processes, and mid-term business plans.
Location: San Antonio, TX (On-site)Key Responsibilities & Essential Functions:
Manages activities of two or more sections or departments. Exercises supervision in terms of costs, methods, and staffing. Leads team / department and undertakes coaching and mentoring responsibilities. A portion of time may be spent performing individual tasks related to the department / team or function.
Impact:
- Assignments are objective oriented. Work is reviewed in terms of meeting departmental objectives and timelines. Failure to achieve objectives will have a short-term impact on cost and on department / team success with a potential impact on the department.
- Works on issues where analysis of situations or data requires an in-depth knowledge of organizational objectives.
- Implements strategic policies when selecting methods, techniques, and evaluation criteria for obtaining results.
- Assures adherence to budgets and establishes schedules, work plans, and performance requirements.
- Looks beyond existing methodologies to resolve complex issues often cross-functional in nature or with significant impact to the business.
- Interacts daily with direct reports, peer leaders, and senior leaders effectively communicating and presenting results and recommendations within their department.
Management:
- Manages Partners in a single functional area, or in multiple or complex functional areas; leads / manages daily coordination of technical staff and vendors.
- Manages production or services of assigned department(s) or area(s)
- Hires / maintains staffing / fires / promotes / demotes / transfers / disciplines /
- approves raises; manages / develops / trains teams to achieve department goals; develops / delegates tasks to complete projects; manages communications with stakeholders.
- Leads / coaches / provides effective feedback; provides day-to-day technical leadership; communicates connection between Partners and impact to operational objectives.
- Recommends changes in alignment with business strategy.
- Provides leadership and expertise; participates in cross-functional initiatives; ensures Partners maintain sufficient technical knowledge; identifies training requirements.
- Ensures area budget, schedule, and performance objectives are met.
- Assists in developing budgets and goals.
- Ensures all technology decisions align with H-E-B direction and focus on total cost of ownership.
- Oversees / ensures quality improvement and consistency of security information analysis; ensures proper direction, implementation, understanding of new policies, programs, tools, and procedures.
The responsibilities and essential functions outlined above describe the general nature and level of work assigned to this position. This is not an exhaustive list of all duties, responsibilities, and skills required. Duties and responsibilities may be modified at any time based on business needs. Employees may be required to perform other job-related tasks as requested by their supervisor, subject to reasonable accommodations.Qualifications & Key Requirements:Work Experience:
- 5+ years of experience in Cybersecurity, including security operations, threat detection, incident response, or security engineering
- 3+ years of experience managing cybersecurity professionals including security analysts, engineers or incident responders
- Experience managing a Security Operations Center (SOC) functions including continuous security monitoring, alert triage, incident escalation and threat investigations.
- Understanding of Security Information and Event Management (SIEM) platforms such as Microsoft Sentinel, Splunk or GoogleSecOps
- Ability to lead security initatives, establish operational priorities and communicate cybersecurity risk to technical and non-techincal stakeholders.
Knowledge/Skills/Abilities:
- Senior management defines / reviews manager objectives to determine success of operation. Has latitude to make decisions in achievement of defined goals. Erroneous decisions will result in critical delay(s) in schedules and / or Department / team operations which may jeopardize overall business activities.
- Strong working knowledge of security information event management (SIEM) and TCP / IP, networking, routing, and switching.
- Working knowledge of strong authentication, end point security, Internet policy enforcement, firewalls, web content filtering, database activity monitoring (DAM), public key infrastructure (PKI), data loss prevention (DLP), identity and access management (IAM) solutions, cloud security / infrastructure, and NIST, PCI, and HIPAA
- Advanced troubleshooting, reasoning, and problem-solving skills
- Strong verbal / written communication skills
- Strong leadership / management skills
Education:
- Bachelor 's degree in a relevant field of education
Licenses/Certifications:
- One or more professional audit or security certifications (e.g., Security+, Pen Test+, CYSA+, CEH, OSCP, CSA, GIAC, Caspi, CISSP)
Physical Demands & Working Conditions:
- Function in a fast-paced environment
- Work extended hours; sit for extended periods.
The work environment characteristics described here are representative of those a Partner encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.JDSECURITY
