Security Operations Center Lead (Onsite Role)

O'Reilly Auto Parts•Headquarters, KY

1d•Onsite

About The Position

The Security Operations Center Lead oversees daily security operations and the organization’s security tools to support effective detection, response, and mitigation of cyber threats. The role leads a team of analysts, coordinates incident response, and develops strategies to strengthen the organization’s security posture. This is an onsite position in Springfield, Missouri; remote work is not an option. The lead serves as an escalation point for complex security events, improves detection capabilities through tuning and rule development, collaborates with IT, network, and application teams to enhance threat visibility, and leads incident response playbooks and post-incident reviews. The role also contributes to security policies and procedures, supports compliance, helps develop team capabilities through training and coaching, analyzes trends and business intelligence, supports digital strategy, and delivers small- or medium-scale projects within an established program management plan. O’Reilly Auto Parts describes a promote-from-within philosophy and offers opportunities for career growth. The company is an equal opportunity employer and states that reasonable accommodation may be available to qualified individuals with disabilities.

Requirements

Bachelor’s degree or equivalent level.
3 to 6 years of experience as a practitioner, able to handle most situations and advise others.
1 to 3 years of managerial experience supervising and directing team members and using resources to achieve specific results within limited timeframes.
Ability to monitor, interpret, and understand policies and procedures and ensure alignment with organizational strategies and work objectives.
Ability to maintain systems, services, and information security, integrity, compliance, and continuity.
Knowledge of confidentiality procedures and secure handling and sharing of restricted information.
Ability to interpret and apply relevant laws, regulations, and policies.
Ability to control access to servers, systems, and computers.
Ability to analyze collected data and identify trends to support reports and decision-making.
Ability to conduct gap analysis between current and future states to identify elements of a change strategy.
Ability to plan, organize, prioritize, and oversee activities efficiently.
Ability to communicate potential resolutions or strategies clearly and persuasively, tailored to specific challenges or organizational needs.

Nice To Haves

Ability to create and review reports for different audiences in a clear and effective manner.
Demonstrates a change mindset and can plan, execute, and monitor activities during periods of change while maintaining performance.
Knowledge of and ability to use standard office equipment and software packages.
Clear and effective verbal communication skills for expressing ideas, requesting action, and formulating plans and policies.
Ability to use and engage with digital technology and information, create and share digital content, and consider safety, privacy, and ethical issues.
Ability to assess the facts and circumstances of a situation and adapt thinking and work habits appropriately.

Responsibilities

Lead the detection and analysis of security incidents, attacks, breaches, and identified vulnerabilities, and remediate security gaps in accordance with the security incident management procedure.
Serve as the escalation point for complex security events and coordinate with internal teams and external partners.
Improve detection capabilities through tuning and rule development.
Collaborate with IT, network, and application teams to enhance threat visibility.
Lead the development and execution of incident response playbooks and conduct post-incident reviews as needed.
Research external developments and emerging issues and evaluate their potential impact or usefulness to the organization.
Contribute to drafting policies, procedures, and guidelines to meet defined principles and external requirements.
Maintain knowledge of organizational policies, procedures, regulatory codes, and codes of conduct; follow required standards and address or escalate patterns of noncompliance.
Communicate the local action plan, explain how it aligns with functional and organizational strategy, and motivate team members to achieve local business goals.
Document current and future processes and describe changes required to transition to the future capability.
Support digital strategy formulation by identifying how information technology in the information security domain can help the organization respond to customer needs and changing business requirements.
Identify team members’ development needs and plan and implement capability-building actions; provide training or coaching in the area of expertise.
Research and select relevant information to analyze key themes and trends using primary data sources and business intelligence tools.
Deliver small- or medium-scale projects within an established program management plan.
Plan, organize, prioritize, and oversee activities to meet objectives efficiently.
Maintain information security, integrity, compliance, and continuity; protect the confidentiality, integrity, and availability of information.
Follow confidentiality procedures and use approved secure communication methods when sharing restricted information.
Control access to servers, systems, and computers.
Analyze data trends and conduct gap analysis between current and future states to inform reporting and change strategy.
Communicate potential resolutions and strategies clearly and appropriately to address challenges and organizational needs.