Position Title : Lead – Security Operations
Experience : 8+ years
Relevant Experience : Minimum 6 years of Security Operations and at least 1 year as Security Lead
Educational Qualification: Full time Bachelor's/Master’s Degree in any stream (engineering background preferred) with excellent academic track record.
Function : Lead the team to perform daily operational security services we offer our customers. Manage new rollout of security tools and process and manage upgrade projects
Company Overview:
Stratogent does IT and Cybersecurity operations.
We build and operate complex infrastructure – across on-premises, data centers, and clouds. We wrap any compute-storage-network platform with monitoring, automation, and security services so customers can sleep while we cure failures and block threats.
If Google's mission is to "organize the world's information", ours is to "operate the world's infrastructure". We aren't quite there yet, so we focus on being the best at knowing and doing operations for mid-size, high-touch and high change IT environments. Our customer base is made up of progressive companies who are flag bearers of new technology adoption and are risk-takers. We have participated in successful (and failed) projects and bring that accumulated experience to each of our clients.
Since 2008, we have acted as an extension of internal IT and Security teams and along the way achieved a community of highly satisfied clients who rave about our "no-fluff just stuff" style.
Job description:
• The primary responsibility is to run the security operational processes within the team and be the point person for interaction with other domain teams
• Acts as primary accountable for the SecOps quality of work and deliverables
• Interact with customers over email, and over conference calls, regarding security operations • Monitor security blogs, articles, and reports and remain current on related laws, regulations, and industry standards to keep up to date on the latest security risks, threats, and technology trends, and where relevant notify leadership to incorporate information into processes, procedures, and audit preparedness activities. • Assist managers with security related tasks and questions
• Manage the communications with security tool vendors across customer deployments
Key Responsibilities:
• Manage and guide a team of senior and junior Security engineers who perform operational and project tasks during work shifts. During the shift, you extract best out of the available team
• Utilize staff strengths, mentor staff in weak areas and identify areas for improvements and trainings • Track staff performance and work with managers for the improvement. Review the team members performance
• Assist in the security incident response process and work closely with internal to manage security incidents. • Understand the security policy requirements, gather customers’ requirements, and transform them into workable process
• Notify stakeholders of potential or existing threats and lead the development of risk-mitigating strategies of assigned items.
• Monitoring the operation of the vulnerability management tools, ensuring the tools and supporting processes are working effectively to identify and report vulnerabilities
• Daily Shift reports review and escalation
• Go over frequent and persistent alerts and bring up observations and action items to discuss with seniors and Peers for further actions
• Assist service delivery manager in customer onboarding, meeting SLAs and customer satisfaction • Track, report and improvise quality of deliverables (incident/problem solution, requests and project deliverables. Introduce innovative ideas to make it repeatable and sustainable practice for the team • Introduce innovative ideas for quality improvements
Must-have Skills:
• Must have worked in SOC operations, Incident response, Threats and Vulnerability Management • Must know common security policy frameworks and possess knowledge of how security programs are run at mid to large scale companies
Good-to-have-skills
• Security certifications like CISSP, CISM, CEH, Vulnerability Management
• Prior Working Knowledge
o Knowledge of SIEM and vulnerability management tools is added advantage
o Background in infrastructure management with different operating system, virtualization technologies and networking are added advantage
o ITIL process knowledge
o Prior employment at MSSP/Managed Services/IT Services company is preferred, and a background in dealing with global teams and remote teams will be a strong plus