Manager, Threat Defense Services

About the role

Fortified Health Security is seeking a Manager, Threat Defense Services to help lead the delivery and continued evolution of our Security Operations Center (SOC). This role requires a unique combination of personality, technical expertise, people leadership, operational ownership, and strong client-facing skills. The Manager will be expected to develop deep expertise across the technologies that support our managed security services, quickly learn and become proficient in new technologies as our capabilities evolve, and help analysts build the same technical depth and investigative mindset. Equally important, this individual must be a high-energy, engaged, and approachable leader who takes ownership, communicates effectively, coaches and mentors others, and fosters a culture of curiosity, accountability, urgency, continuous improvement, and exceptional client service.

Responsibilities

• Management of the Threat Defense personnel and promoting their individual growth.
• Interfacing with clients to review environments, solve CSAT issues, & build relationships.
• Partner with Implementations to ensure smooth transition of services from inception to operations.
• Mature and develop the processes, procedures, and services of the Threat Defense.
• Create, maintain, and mature Standard Operating Procedures (SOPs) and training documentation.
• Perform advanced incident investigation.
• Ability to take the lead on incident research when appropriate.
• Exercise multitasking skills by managing multiple projects concurrently.
• Audit analyst investigations and escalations to highlight great work and coaching opportunities to add additional value to clients.
• Create advanced rules based on the latest security threats and events.
• Act as the SME for all technology used in service delivery.
• Present alerts, metrics, and remediation tasks to customers via approved communication plans.
• Communicate effectively and clearly with clients on high-level security concepts and requirements.

Qualifications

• Bachelor's Degree in Computer Science, Management Information Systems, or other relevant combination of training and experience preferred.
• 5+ years of proven work experience in a technical Cybersecurity role.
• 2+ years of management or leadership experience.
• Advanced systems administration experience.
• Healthcare industry experience preferred.

Skills

• Deep knowledge of security operations and threat detection, including incident response, alert investigation and triage, escalation management, SIEM operations, log and network traffic analysis, detection engineering, correlation logic, detection and suppression rule management, playbook development, and malware investigation and remediation.
• Broad knowledge of modern security technologies and controls, including SIEM, endpoint detection and response (EDR/XDR), firewalls, intrusion detection and prevention, identity and user security, data loss prevention, vulnerability management, cloud security, and other technologies commonly used within enterprise security programs.
• Strong technical aptitude and curiosity, with the ability to quickly learn new security platforms and technologies, develop subject matter expertise, troubleshoot complex issues, and guide analysts in developing their own technical proficiency.
• Strong understanding of security architecture and defense-in-depth principles across endpoint, identity, network, cloud, user, and data security, including how telemetry and controls from these environments contribute to effective detection and response.
• Strong understanding of Windows operating systems, security events, logging, and common attack techniques, as well as adversary frameworks such as MITRE ATT&CK.
• Strong troubleshooting and root cause analysis skills, with the ability to identify patterns, understand complex technical issues, and translate findings into improvements to detections, processes, technologies, and service delivery.
• Working knowledge of scripting and automation, including