Sr Manager, Incident Response
ultraviolet cyberSan Jose, CA
$175,000 per year
APPLY (opens in a new tab)Sr Manager, Incident Response
ultraviolet cyberSan Jose, CAManager L7
$175,000 per year
Computer Systems Design ServicesOther Computer Related ServicesComputer Facilities Management Services
APPLY NOW (opens in a new tab)Make a difference here.
UltraViolet Cyber is a leading platform-enabled unified security operations company providing a comprehensive suite of security operations solutions. Founded and operated by security practitioners with decades of experience, the UltraViolet Cyber security-as-code platform combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations by eliminating risks of separate red and blue teams. By creating continuously optimized identification, detection, and resilience from today’s dynamic threat landscape, UltraViolet Cyber provides both managed and custom-tailored unified security operations solutions to the Fortune 500, Federal Government, and Commercial clients. UltraViolet Cyber is headquartered in McLean, Virginia, with global offices across the U.S. and in India. Are you looking for an exciting opportunity to enhance your cyber security leadership skills and experience? We are looking for a dedicated Senior Manager, Incident Response to work with our service delivery teams that provide extensive MSSP services to a large client of ours! As an embedded Cyber Security leader with our customer, you will be responsible for an offshore team of Security Analysts that manage and monitor 2,500+ end points. You will be working day-to-day with the Head of Product Security and the Chief Legal Officer as part of the team that mitigates risk and secures the organization against outside threats. The role will be strategic in leading a SOC team, incident response, detection coverage and tuning, and help with performing security reviews and board-level dashboards. The position is required to be onsite 3 days per week, Tuesday, Wednesday, Thursday.
What You'll Do:
- Lead the Corporate Security Program
- Manage the SOC team
- Develop, publish, maintain, and enforce comprehensive organization-wide information security risk assessment framework, plans, policies, procedures, guidelines and controls that are aligned with the organization’s business needs
- Evangelize and provide SME knowledge on Information security matters
- Establish metrics and regular reporting mechanisms for assessing and measuring security, privacy, compliance and risk across the organization including metrics for the Public Bug Bounty program
- Manage planning, tracking and reporting including risk and issue tracking, developing schedules and managing interdependencies
- Develop process documentation
- Vendor Management (Including procurement related activities) and the 3rd party vendor risk management program
- Lead the incident response process and participate in vulnerability remediation efforts. Maintain the vulnerability management system and ensure compliance on SLAs for security bugs
- Identify and resolve systemic issues impacting IT and aggressively take action to resolve - including reviews, awareness, education and process controls
Improve overall security awareness and instill a culture of secure software development throughout the IT organizations.
Manage the ongoing training program for employees
Manage various security governance, risk and compliance projects
Establish credibility as a trusted advisor to partners including customers, executives, peers, and employees
Maintain strong knowledge of ongoing security threats, remediation and operational standard methodologies
Support and Manage Action Plans including exceptions to closure; including working with Risk owners to develop sustainable action plans that address technology, process and organizational risk areas.
Manage relationships and relevant information sharing with members of the Information Security Team, broader IT Team as well as Lines of Business
Act as an internal consultant within IT and business groups for Information Security Risk Assessments
Help develop an effective Information Security Strategy by aligning Risk Management & Information Security Governance efforts with Information Security Technology Strategy and Information Security Threats
Perform security audits and assessments of internal systems and third parties and recommend actions to mitigate risks through a review of efficiency, effectiveness and compliance of operational and security policies, processes and practices.
Perform technical security assessment of solutions and recommend/review security designs and controls. Oversee and perform operational execution of the third party cyber risk management processes
Act as primary trusted security advisor on projects to ensure that information security risks are managed and risk assessment process is followed including when interacting with 3rd parties
Support periodic audit activities as they relate to the IT cyber security domain (e.g., GDPR, PCI, SOXProvide hands-on security expertise during design, development, implementation and testing of various IT projectsProvide clear direction and mobilize others to take action on priorities
Manage, coach and develop outstanding Information Security talent
What You've Done:
US Citizenship is Required 10+ years experience in Computer Science field
Experience leading SOC or Incident Response teams
Experience collaborating and being a strategic member of a Zero Trust rollout
Experience owning detection engineering via Crowdstrike
Experience reviewing cloud configurations and AWS Security solutions
Experience performing continuous security validations and review of controls
Knowledge of NIST CSF risk register
Experience partnering with Threat Intelligence vendors and providing action around IOC hunts, blocks, detections, etc.
Experience with vulnerability management via Tenable; running scans, remediation cycle with analysts$175,000 - $205,000 a year
UltraViolet Cyber maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect our company's differing products, services, industries and lines of business. Candidates are typically placed into the range based on the preceding factors.
We sincerely thank all applicants in advance for submitting their interest in this position. We know your time is valuable.
UltraViolet Cyber welcomes and encourages diversity in the workplace regardless of race, gender, religion, age, sexual orientation, gender identity, disability, or veteran status.
If you want to make an impact, UltraViolet Cyber is the place for you!
Matching similar jobs
Level
Manager L7
Salary
$175,000 per year
Location
San Jose, CA
Occupation
Information Security Analysts
Industry
Computer Systems Design Services
Posted
yesterday