Security Operations Supervisor JR961

ELEKS Information Security Office is looking for a Security Operations Supervisor in Lviv, Ternopil, Kyiv, or Ivano-Frankivsk.
Security Operations Supervisor is responsible for designing, implementing and maintenance of ELEKS Security Operations Center (SOC) and related ISMS processes. Specifically, Security Operations Supervisor objective is to ensure efficient execution of Incident Management, Threat Intelligence, Vulnerability Management and Patch Management activities.
REQUIREMENTS

Working experience in architecture, design and implementation of security systems and countermeasures (e.g. SIEM, EDR, DLP, UEBA, IDS/IPS, vulnerability scanners, anti-virus and anti-malware, firewalls, encryption)

Knowledge of Security Operation Center processes, ability to perform supervision of SOC and perform continuous improvement of its operations

Working experience in planning and conducting of technical security audits.

Knowledge of Information Security (IS) standards/frameworks (ISO 27001/2, SOC2, Cyber Essentials, PCI DSS, HiTrust), ability to establish IS processes in line with these standards

Network architecture, security principles, technologies, and tools

Detailed technical knowledge of Windows and UNIX operating systems

Virtualization technologies and security

Identity and access management principles and technologies

Subnetting, DNS,DHCP, VPNs, VLANs, VoIP and other network routing methods

Network and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, etc.)

Solid knowledge of secure coding practices, application security and cryptography technologies, ethical hacking, threat modeling, secure SDLC process

Solid knowledge of disaster recovery and business continuity planning

Strong analytical and conceptual skills balanced by broad perspective on how security efforts to support realization of business goals and customer satisfaction

Proven leadership capabilities and strong communication and interpersonal skills

English – upper-intermediate or higher

RESPONSIBILITIES

Develop and maintain short- and long-term goals and objectives for ELEKS Security Operations Center aligned with Information Security goals

Define activities and projects supporting continuous improvement of ELEKS Security Operations Center, addressing the IS gaps identified and enhancing ELEKS security overall

Evaluate new technologies and processes that enhance security capabilities. Design, architect, test, analyze, evaluate and implement new security systems and processes

Perform program and project management activities to ensure successful execution of ISMS projects assigned.

Coordinate the development and review of ISMS policies relevant to SOC activities and other supporting documents, such as Hardening Baselines, IS standards/procedures

Effectively inform stakeholders about the status of the ELEKS information security posture. Perform periodic security reporting (both: executive and technical)

Coordinate handling of the information security incidents, coordinate investigation activities, communicate with clients and, if needed, escalate to ELEKS senior management, and contact authorities (Police, CERT-UA, etc.)

Plan, control, and perform installation, configuration, technical support and administration of security systems and countermeasures (e.g. SIEM, EDR, DLP, UEBA, IDS/IPS, vulnerability scanners, anti-virus and anti-malware, firewalls, encryption)

Supervise and perform system hardening, security testing, and vulnerability management

Prevent, detect, investigate and respond to cyber threats for the organization’s assets

Build and establish plans and controls to protect digital files and information systems against unauthorized access, modification and/or destruction

Coordinate configuration, management and running the phishing simulation campaigns

Plan, manage and optimize the capacity of ELEKS SOC

Provide leadership, training and technical advice to SOC team. Identify/address training and career development needs, provide feedback and conduct performance assessment of subordinates

Management of access rights for SOC by participation in approval, review, and removal of access rights (in case of specialist termination, role change and on a regular basis as per Access Control Policy)

Resolve security incidents within the SOC team and, if necessary, perform disciplinary actions in conjunction with HR team

Originally posted on Himalayas