Security Operations Supervisor JR961

ELEKS Information Security Office is looking for a Security Operations Supervisor in Lviv, Ternopil, Kyiv, or Ivano-Frankivsk.

Security Operations Supervisor is responsible for designing, implementing and maintenance of ELEKS Security Operations Center (SOC) and related ISMS processes. Specifically, Security Operations Supervisor objective is to ensure efficient execution of Incident Management, Threat Intelligence, Vulnerability Management and Patch Management activities.

REQUIREMENTS

• Working experience in architecture, design and implementation of security systems and countermeasures (e.g. SIEM, EDR, DLP, UEBA, IDS/IPS, vulnerability scanners, anti-virus and anti-malware, firewalls, encryption)
• Knowledge of Security Operation Center processes, ability to perform supervision of SOC and perform continuous improvement of its operations
• Working experience in planning and conducting of technical security audits.
• Knowledge of Information Security (IS) standards/frameworks (ISO 27001/2, SOC2, Cyber Essentials, PCI DSS, HiTrust), ability to establish IS processes in line with these standards
• Network architecture, security principles, technologies, and tools
• Detailed technical knowledge of Windows and UNIX operating systems
• Virtualization technologies and security
• Identity and access management principles and technologies
• Subnetting, DNS,DHCP, VPNs, VLANs, VoIP and other network routing methods
• Network and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, etc.)
• Solid knowledge of secure coding practices, application security and cryptography technologies, ethical hacking, threat modeling, secure SDLC process
• Solid knowledge of disaster recovery and business continuity planning
• Strong analytical and conceptual skills balanced by broad perspective on how security efforts to support realization of business goals and customer satisfaction
• Proven leadership capabilities and strong communication and interpersonal skills
• English – upper-intermediate or higher

RESPONSIBILITIES

• Develop and maintain short- and long-term goals and objectives for ELEKS Security Operations Center aligned with Information Security goals
• Define activities and projects supporting continuous improvement of ELEKS Security Operations Center, addressing the IS gaps identified and enhancing ELEKS security overall
• Evaluate new technologies and processes that enhance security capabilities. Design, architect, test, analyze, evaluate and implement new security systems and processes
• Perform program and project management activities to ensure successful execution of ISMS projects assigned.
• Coordinate the development and review of ISMS policies relevant to SOC activities and other supporting documents, such as Hardening Baselines, IS standards/procedures
• Effectively inform stakeholders about the status of the ELEKS information security posture. Perform periodic security reporting (both: executive and technical)
• Coordinate handling of the information security incidents, coordinate investigation activities, communicate with clients and, if needed, escalate to ELEKS senior management, and contact authorities (Police, CERT-UA, etc.)
• Plan, control, and perform installation, configuration, technical support and administration of security systems and countermeasures (e.g. SIEM, EDR, DLP, UEBA, IDS/IPS, vulnerability scanners, anti-virus and anti-malware, firewalls, encryption)
• Supervise and perform system hardening, security testing, and vulnerability management
• Prevent, detect, investigate and respond to cyber threats for the organization’s assets
• Build and establish plans and controls to protect digital files and information systems against unauthorized access, modification and/or destruction
• Coordinate configuration, management and running the phishing simulation campaigns
• Plan, manage and optimize the capacity of ELEKS SOC
• Provide leadership, training and technical advice to SOC team. Identify/address training and career development needs, provide feedback and conduct performance assessment of subordinates
• Management of access rights for SOC by participation in approval, review, and removal of access rights (in case of specialist termination, role change and on a regular basis as per Access Control Policy)
• Resolve security incidents within the SOC team and, if necessary, perform disciplinary actions in conjunction with HR team