Cyber Security Operations Center Manager

2 days onsite each week, must be local to Austin

Need valid LinkedIn with picture

Need DL copy

Candidates need to fill a reference form where they need to put 3 professional references

The Consultant on this project will be responsible for initiatives that are related to Management of the Cybersecurity Operations Team and Tools while ensuring real-time data, metrics, and incident reporting.

Qualifications/Requirements:

• Bachelor’s degree in Computer Science or a related discipline
• CISSP or other Security Certifications preferred
• 8-10 years of technical supervisory experience
• Strong experience with administration and deployment and configuration of Network Security monitoring and incident response tools (EDR, Scanners, SIEM, Netflow, etc)
• Experience with intrusion detection and incident response activities
• Background with the CISCO security suite of tools
• Previous experience working with Microsoft EDR, Sentinel and Tenable
• Previous experience in a government agency environment is highly desirable
  
  

General Duties:

• Responsible for supervising and managing the Cybersecurity Operations Team
• Responsible for administration, maintenance, and resilience of Cybersecurity tools
• Ensure real-time data, metrics, and correlated incidents are reviewed along with daily monitoring
• Support of daily operations and incident response activities
• Ensure strong monthly and annual reporting requirements regarding current tools
• Provide recommendations for improvements in daily operations, resilience, and Cybersecurity operational maturity
• Provide input on Custom Managed Scanning Services
• Provide guidance on Custom Managed Endpoint Protection
• Assist team with managed CISCO Secure Network Analytics Service
• Ensure proper Security Information and Event Management (SIEM) administration
  
  

WORKER SKILLS AND QUALIFICATIONS (Required)

Minimum (Required): insert specific minimum skills for this Contract Position)

Years Skills/Experience

8 Technical supervisory experience

8 Deployment and configuration of Network Security monitoring and incident response tools (EDR, Scanners, SIEM, Netflow, etc)

8 Administration of Network Security monitoring and incident response tools (EDR, Scanners, SIEM

Netflow, etc)

8 Participation and experience in intrusion detection and incident response activities

8 Effective, professional business communication and reporting

Preferred (Optional): insert specific preferred skills for this Contract Position)

Years Skills/Experience

8 Experience with the CISCO security suite of tools

8 Experience with Microsoft EDR tools

8 Experience with Microsoft Sentinel

8 Experience with the Tenable suite of tools