Manager, Security Operations Center at Huntress in United States of America

Job description

• Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
• Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.
• Huntress now secures more than 5M endpoints and 14M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
• The Huntress Security Operations Center is a global team of security analysts dedicated to investigating and responding to incidents on our partners’ networks 24/7, 365 days a year. Daily activities consist of providing investigation, containment, and response actions across millions of endpoints.
• This role is accountable for defining and streamlining processes, workflows, and playbooks that enable effective day-to-day operations. As Huntress continues to grow, we are laser-focused on scaling our operations and force-multiplying our human analysts by 10X. This position is responsible for enabling analysts to meet our mission and achieve internal Service Level Objectives for response times. The Security Operations Manager will work with their peer regional managers to ensure consistent global operations while providing our analyst team with training opportunities and career growth.

Responsibilities

• Design, implement, and enforce internal processes to reduce burnout and increase the productivity of the operations center against a global set of expectations and standards
• Manage and enforce local/global shift coverage to ensure 24/7 operations are maintained 365 days a year
• Meet with analysts in a 1:1 setting weekly to socialize focus initiatives, gather feedback, provide feedback, and enable analysts to progress rapidly in their career
• Contribute to the development and implementation of analyst training programs designed to streamline onboarding and advance analyst skill sets in Digital Forensics, Incident Response, Malware Analysis, Detection Engineering, Threat Hunting, and Automation
• Work with the Product organizations to prioritize the creation of new capabilities designed to augment and force multiple analyst capabilities
• Maintain accountability for routine quality assurance for your designated region
• Engage with our Support organization to create streamlined workflows for partner/customer requests that need Security Operations Center analysis
• Strengthen and mature our existing processes and relationships with our Tactical Response, Threat Hunting, and Detection Engineering teams within the Security organization
• Provide one level of technical leadership for analysts of the Security Operations Center analysts
• Ensure team members fully understand the goals and objectives of Huntress’ mission and how their work fits into the bigger picture
• Provide key input and guidance to company stakeholders such as Marketing, Sales, Support, and Product
• Develop, track, and report on Objectives and Key Results linked to Security Operations Center focus initiatives
• Help operationalize new technologies and services that Huntress brings to market
• Participate in public speaking engagements in both webinar and in-person formats

Requirements

• Experience in leading diverse cybersecurity teams with various skills. These teams work in Security Operations, Digital Forensics, Incident Response, Malware Analysis, Threat Hunting, and Detection Engineering
• 5+ years of Security Analyst experience working in a global 24x7 security operations center with a focus on Windows forensics
• 2+ year of team lead or managerial experience in a global operations center or Incident Response role. Preferably within a MSSP, MDR provider, or Incident Response service.
• Actively engaged in the information security community by attending conferences or contributing to conversations/projects in the public domain
• Continually learning and staying up to date on the latest threat actor tradecraft, detection techniques, and security operations concepts
• Ability to identify workflows being performed and create detailed process diagrams and operating procedures
• Effective communicator of highly technical concepts to stakeholders of varying technical backgrounds
• Demonstrated experience leading initiatives or projects that required delegation and accountability to achieve success
• Data-driven approach with experience in Data Science concepts

Skills

Required

• Windows forensics

Benefits

• 100% remote work environment - since our founding in 2015
• Generous paid time off policy, including vacation, sick time, and paid holidays
• 12 weeks of paid parental leave
• Highly competitive and comprehensive medical, dental, and vision benefits plans
• 401(k) with a 5% contribution regardless of employee contribution
• Life and Disability insurance plans
• Stock options for all full-time employees
• One-time $500 reimbursement for building/upgrading home office
• Annual allowance for education and professional development assistance
• $75 USD/month digital reimbursement
• Access to the BetterUp platform for coaching, personal, and professional growth