Manager, Security Operations Center
About the role
The Huntress Security Operations Center is a global team of security analysts dedicated to investigating and responding to incidents on our partners’ networks 24/7, 365 days a year. This role is accountable for defining and streamlining processes, workflows, and playbooks that enable effective day-to-day operations.
Responsibilities
- Design, implement, and enforce internal processes to reduce burnout and increase the productivity of the operations center against a global set of expectations and standards
- Manage and enforce local/global shift coverage to ensure 24/7 operations are maintained 365 days a year
- Meet with analysts in a 1:1 setting weekly to socialize focus initiatives, gather feedback, provide feedback, and enable analysts to progress rapidly in their career
- Contribute to the development and implementation of analyst training programs designed to streamline onboarding and advance analyst skill sets in Digital Forensics, Incident Response, Malware Analysis, Detection Engineering, Threat Hunting, and Automation
- Work with the Product organizations to prioritize the creation of new capabilities designed to augment and force multiple analyst capabilities
- Maintain accountability for routine quality assurance for your designated region
- Engage with our Support organization to create streamlined workflows for partner/customer requests that need Security Operations Center analysis
- Strengthen and mature our existing processes and relationships with our Tactical Response, Threat Hunting, and Detection Engineering teams within the Security organization
- Provide one level of technical leadership for analysts of the Security Operations Center analysts
- Ensure team members fully understand the goals and objectives of Huntress’ mission and how their work fits into the bigger picture
- Develop, track, and report on Objectives and Key Results linked to Security Operations Center focus initiatives
- Help operationalize new technologies and services that Huntress brings to market
- Participate in public speaking engagements in both webinar and in-person formats
Requirements
Experience in leading diverse cybersecurity teams with various skills. These teams work in Security Operations, Digital Forensics, Incident Response, Malware Analysis, Threat Hunting, and Detection Engineering
5+ years of Security Analyst experience working in a global 24x7 security operations center with a focus on Windows forensics
2+ years of team lead or managerial experience in a global operations center or Incident Response role. Preferably within a MSSP, MDR provider, or Incident Response service
Actively engaged in the information security community by attending conferences or contributing to conversations/projects in the public domain
Continually learning and staying up to date on the latest threat actor tradecraft, detection techniques, and security operations concepts
Identify workflows being performed and create detailed process diagrams and operating procedures
Effective communicator of highly technical concepts to stakeholders of varying technical backgrounds
Data-driven approach with experience in Data Science concepts
Qualifications
Experience in leading diverse cybersecurity teams with various skills. These teams work in Security Operations, Digital Forensics, Incident Response, Malware Analysis, Threat Hunting, and Detection Engineering
5+ years of Security Analyst experience working in a global 24x7 security operations center with a focus on Windows forensics
2+ years of team lead or managerial experience in a global operations center or Incident Response role. Preferably within a MSSP, MDR provider, or Incident Response service
Actively engaged in the information security community by attending conferences or contributing to conversations/projects in the public domain
Continually learning and staying up to date on the latest threat actor tradecraft, detection techniques, and security operations concepts
Identify workflows being performed and create detailed process diagrams and operating procedures
Effective communicator of highly technical concepts to stakeholders of varying technical backgrounds
Data-driven approach with experience in Data Science concepts