Security Operations Center (SOC) Manager

At Armor, we are committed to making a meaningful difference in securing cyberspace. Our vision is to be the trusted protector and de facto standard that cloud-centric customers entrust with their risk. We strive to continuously evolve to be the best partner of choice, breaking norms and tirelessly innovating to stay ahead of evolving cyber threats and reshaping how we deliver customer outcomes. We are passionate about making a positive impact in the world, and we're looking for a highly skilled and experienced Security Operations Center Manager to join our dynamic team.

Summary

The Security Operations Center Manager provides strategic vision and leads service delivery of Armor's Security Operations Center (SOC) organization and will report to Armor's Vice President of Security Operations. This leadership position will be responsible for technical and process direction of the SOC, providing guidance and mentorship to SOC analysts and customers, and collaborating with various engineering teams across the globe while driving security operations to deliver best-in-class SOC services.

The selection criteria shall focus on an individual with:

• Deep technical skills involving:
• Capability of orchestrating a response to major security threats and provide sensible root cause analysis
• Investigative analysis and logical forensics
• Detection evaluation and identify areas of improvement
• Ability to work collaboratively with various teams across:
• Multiple time zones and countries
• Multiple departmental organizations
• This leader shall possess:
• Excellent written and oral presentation skills
• Ability to create and execute on the organization's vision of cybersecurity
• Ability to balance the workload of a team
• Demonstrable ability to successfully work as a trusted advisor to current and future customers involving Incident Response and Information Security best practices

Essential Duties and Responsibilities
(Additional duties may be assigned as required.)

• Hire a world-class team of security analysts to work within the SOC (Security Operations Center)
• Provide mentorship to the SOC to cultivate desired skills and experience
• Provide input and feedback on security processes, issues, and features
• Hold regular 1:1's with SOC team members
• Create a sense of psychological safety and a foundation to grow from within the team
• Be a role model in terms of positive thinking, de-escalating conflict, and taking time off
• Draft and successfully deliver on quarterly OKRs
• Assume the role of Incident Commander during larger security events

REQUIRED SKILLS

• Experience as a member of a Security Operations organization or Incident Response team - either as a seasoned senior individual contributor or as a manager that has contributed to the incident response process, and it is development
• Experience with leading incident response teams and investigations
• Excellent written and oral communication skills
• Willingness to be part of the escalation on-call rotation
• Experience with the role of an Incident Commander
• Experience with a major breach in which intrusion analysis, recovery, remediation, post-mortem reporting, and action items resulted
• First-hand experience with major cloud providers - Azure, AWS, GCP
• Possess a depth of knowledge in relation to security policies based on industry standards and best practices
• Understand the concepts and have worked with EDR and SOAR
• Azure Sentinel knowledge

Experience / Certifications:

• Minimum 5 years' experience managing a Security Operations Center
• Must possess or be able to obtain the following certifications:
• Microsoft 365 Certified: Security Administrator Associate (MS-500)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• AWS Certified Security - Specialty

Work Environment

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. The noise level in the work environment is usually low to moderate. The work environment may be in either an office setting, at the company's data center, at a client location or at an industry trade event.

Equal Opportunity Employer - It is the policy of the company to comply with all employment laws and to afford equal employment opportunity to individuals in all aspects of employment, including in selection for job opportunities, without regard to race, color, religion, sex, national origin, age, disability, genetic information, veteran status, or any other consideration protected by federal, state or local laws.