Manager - Cyber Security Defense

Manager, Cyber Security Defense

SALARY: $175k - $185k

LOCATION: CHICAGO, IL

HYBRID 3 days onsite and 2 days remote

You will manage 4-6 people in incident management, security analysis, security monitoring, SOAR. splunk, symantic/Netskope DLP crowdstrike. Incident response playbook implements automation and AI solutions

This role implements automation and AI solutions to streamline threat detection processes, serves as Tier 3 support for incident response investigations, ensures regulatory compliance, and delivers actionable security metrics to leadership.

Primary Duties and Responsibilities:

Incident Management and Security Analysis:

• Lead cyber security incident responders in response activities including investigation, coordination, review, closure, and reporting.
• Oversee technical analysis of security events while coordinating incident response activities with internal and external teams.

Security Monitoring & Analysis:

• Tier-3 support of alerts and validating tuning requests.
• Alert tuning and reduction.
• Lead Automation/AI efforts to optimize security operations effort.
• Ensure accurate documentation.

Supervisory Responsibilities:

• Lead 4-6 employees and contingent labor professional for the cyber monitoring and analysis function within Cyber Defense.
• Manage team effectively in delivery of incident resolution, project tasks, compliance milestones, and systems implementations.
• Perform talent management functions, including performance reviews, direct feedback, and other administrative functions as required.
• Confer with and advise subordinates on administrative policies and procedures, technical problems, priorities, and methods.
• Promote employee development by conducting career-planning sessions with staff and selecting and scheduling employee training classes, conferences, and seminars
• Review with management, scheduling and training opportunities that fulfill role requirements for team members.

Qualifications:

• Experience in SOAR, Splunk, Symantec/Netskope DLP, CrowdStrike. Ability to create/tune alerts/rules independently.
• Effective and excellent oral and written communication, analytical, judgment and consultation skills.
• Ability to work independently and possess strong project management skills.
• Advance usage of Splunk SIEM, Splunk SOAR, CrowdStrike, Symantec/Netskope DLP.
• Incident Response playbook development managing incident analysis and remediation.
• Security Orchestration and Automated Response tools and concepts.

Some experience:

• Scripting and development activities to appropriately leverage Application Programing Interfaces (APIs) to optimize integrations between disparate security monitoring and analysis devices.
• Knowledge of Generative and Prompt A.I.

Education and/or Experience:

• Minimum five years hands-on security operations experience including interdisciplinary experience with four or more of the following: Cyber Threat Analysis, Digital Computer Forensics, Incident Response, Application Security, Operating Systems Security, Cryptographic Controls, Networking, Programming languages, Incident Response.
• Shift work and working in an on-call response capacity is required including availability for 24 x 7 on-call support responsibilities.