Security Operations Manager Position Available In Onondaga, New York

Job Description:

Security Operations Manager Hybrid position located in Syracuse,NY. Apply The Security Operations Manager role is responsible fordeveloping and driving the IT Security Incident Management team,processes and capabilities, the Vulnerability Management processand capabilities, the Cyber & Phishing Security Awareness processand capabilities, and the investigation and forensic documentationof reported IT Security policy violations.

Essential Functions:

Develop, lead, and manage the Security Operations Team. Develop andmaintain information security policies, procedures, standards, andguidelines based on best practices (NIST/CIS), regulatory(PCI/DFS), and legal compliance. Performs quantitative riskanalysis and threat modeling to conduct quantitative cyber riskanalysis. Develops prioritized risk mitigation strategies. ConductsInformation Security audit activities. Remain up to date on trendsand issues in the security industry, including current and emergingtechnologies Assist in enhancing the IT Security Program bymanaging the day-to-day monitoring and alerting of SecurityInformation and Event Management (SIEM) technology. Provideguidance and security policy interpretation to managing risk onWindows/Linux servers and desktops, Active Directory (GroupPolicy), network communications, company data stores, perimeternetworks, virtual private networks, and e-mail communications. Highlevel of expertise in Windows/Linux Servers/Services. Networkmonitoring, log management, and log analysis from a variety ofnetwork sensors to investigate suspect network activity. Work withthe Infrastructure team and third-party solutions to interpretactivity from system logs and network traffic to recognize andreact to anomalies that may indicate vulnerabilities orunauthorized exploitation of resources. Interpreting networktraffic and determining whether activity is legitimate. Utilizetechnical security systems including host and client-basedfirewalls, intrusion detection/prevention systems, cryptographicsystems, endpoint security systems, threat intelligence, andzero-day and anti-virus software to monitor system activity.

Conduct investigations in response to policy violations andsecurity incidents. Develop and manage information securityreporting, metrics, and dashboards. Participate in rotating”on-call” schedule with other members within the InformationSecurity department. Performs other duties as assigned ornecessitated by business, regulatory, or emergencies. ManageProjects/Deployments for Security Initiatives and businessrequirements.

Requirements:

Bachelor’s degree in InformationSecurity, Computer Science, or Engineering or equivalent experiencepreferred Graduate degree in Information Security Experience withNIST, CIS, and ITIL Highly desirable Minimum 10 years experience inInformation Technology Minimum 5 years experience in IT SecurityExperience with Security Incident Management, GRC, IAM, ThreatIntel, SOC, Vulnerability/Penetration testing, Data Security, SDLC,Cloud Security Experience performing security investigationsExperience with Vulnerability Management tools Experience with 3rdparty penetration testing activities is highly preferred.

Certifications:

CISSP, GCFA, GCFE, CEH or GPEN is highly desirable.

GSEC, SSCP, ECSA or CISM is desirable. MCSE, MCSA, CCNA, or CCNP isa plus. Wage Range Wage Range $2880 – $3270 Weekly Please sendresumes to Wendi@engagestaff.com