Security Managed Services specialist

About the Role
This role is focused on enhancing and managing incident response plans while ensuring that cybersecurity policies, processes, and procedures are effectively developed and implemented within a Security Operations Center (SOC). The position entails creating and refining Cyber Security Center processes, working closely with SIEM engineers and other security teams to develop correlation rules, and overseeing incident response tools related to detection, investigation, and response activities.

Key Responsibilities

• Create and develop SOC processes and procedures.
• Collaborate with SIEM engineers and other security teams to develop and refine correlation rules.
• Utilize incident response tools and solutions to analyze security events and provide guidance to team members.
• Produce cyber intelligence reports that communicate technical issues and insights to various audiences, including information security staff, non-technical business representatives, and senior management.
• Lead the cyber team effectively and provide on-call support after business hours.
• Administer and manage Endpoint Detection and Response (EDR) technology:
  • Deploy, upgrade, and maintain EDR agents across Windows, macOS, and Linux platforms.
  • Monitor agent health and troubleshoot issues where agents are not reporting.
  • Develop and manage EDR policies.
  • Integrate EDR with SIEM and other security tools.
• Administer and manage Network Detection and Response (NDR) technology:
  • Develop and manage NDR policies.
  • Integrate NDR with SIEM and other security tools.
  • Create and add custom correlation rules for EDR/NDR.
  • Periodically review existing EDR/NDR configurations and propose enhancements as applicable.
• Manage support tickets with EDR/NDR support as necessary.

Requirements

• Excellent verbal and written communication skills, with the ability to clearly articulate technical and strategic level cyber matters to a variety of audiences.
• Strong analytical and organizational skills.
• Proven leadership skills with experience in leading a cyber team.
• Preferred candidates will hold certifications such as GIAC GCIH, GMON, GCFA, or similar certificates.