SOC Manager

Boscov's Department Store, LLC•Reading, PA

19d•Remote

About The Position

Boscov's SOC Manager Experienced Security Operations Leaders - bring your experience to work for you where people love to shop! Boscov's is a chain of full service department stores serving the total family needs of our customers. For over 100 years, Boscov's has been known for its great values and famous brands, and for offering a broad selection of quality merchandise in its stores and online. We are looking for a SOC Manager to join our team! The SOC Manager is responsible for leading the 24/7 remote SOC. They are responsible for all incident investigation and response activities. They perform ongoing improvements for all detection and response activities. The SOC Manager shall define and execute a roadmap for the continuous optimization and maturity of the SOC's detection, analysis, and response capabilities.

Requirements

Bachelor's degree in Information Technology or equivalent experience
Possess one industry-recognized project management certification, e.g., Project Management Professional (PMP) and a cybersecurity certification, such as: Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH) Security
Minimum seven (7) years of experience in IT Security
Three (3) years in a senior or management role leading a technical team
Previous experience working in a SOC in an enterprise environment
Strong leadership, problem solving, and critical thinking skills. Ability to prioritize and execute autonomously
Knowledge of emerging technologies and tactics used within a SOC, and how they are applied to improve efficiency and effectiveness
Strong understanding of latest security principles and protocols
Strong understanding of security operations technologies including SIEM and orchestration
Understanding tactics, techniques, and procedures associated with cyber threats
Strong leadership capabilities focused on talent identification, cultivation, and nurturing, capable of encouraging camaraderie and professional growth within the team
Excellent analytical and problem-solving skills
Ability to work independently and as part of a team
Ability to effectively manage, coach, and maintain morale for a distributed, 24/7 virtual team
Highly organized, proactive, and detail-oriented approach to program management and technical operations
Attention to detail
Ability to express thoughts clearly
Ability to communicate effectively with all levels of the organization, both orally and in writing
Ability to collaborate across the organization and operate effectively with multiple teams and solutions towards a shared goal

Nice To Haves

Master's degree in Information Technology or related field

Responsibilities

Lead and manage a 24/7 remote virtual Security Operations Center (SOC)
Direct, execute, and control all elements of provided SOC services ensuring sufficient resource allocation and competence across management, analysis, engineering, and maintenance functions
Manage and resolve personnel, technical, and programmatic issues promptly and effectively to ensure team cohesion and operational continuity in the remote environment
Lead the professional development and mentorship of SOC staff with varying skill levels, designing and implementing continuous training programs that build technical expertise and cybersecurity competencies
Develop and maintain ongoing training programs to ensure all members of Information Security are adequately trained to perform their roles
Maintain and improve monitoring and incident response of the following solutions: Splunk ES SIEM Rapid7 Insight VM Sophos XDR File Integrity Monitoring SOAR
Establish and maintain SOC operations according to security best practices, explicitly leveraging the NIST Cybersecurity Framework (CSF) and the MITRE ATT&CK knowledge base to inform detection and response strategy
Ensure all new technology has appropriate security monitoring integrated
Continuously track and evaluate the SOC program's effectiveness against emerging and real-world threats, ensuring that controls and processes are current and effective
Develop, maintain, and enforce a comprehensive set of documentation including security playbooks, standard operating procedures (SOPs), and checklists, ensuring they are current, tested, and support daily activities across the team
Prepare and deliver high-quality, senior management level reports, detailing program status, completed milestones, key activities, performance metrics, and the plan for the next reporting period
Participate in the development and tracking of key performance indicators (KPIs) related to SOC operations, to benchmark, optimize resources, and further enhance capabilities
Continuously monitor SOC effectiveness through KPIs and ensure optimization of resources
Continuously monitor and assure the SOC's performance against defined Service Level Agreements (SLAs), including program progress, risks, issues, and proposed resolutions
Establish projects to improve and enhance security operations
Coordinate continuous phishing and awareness training to all members of the organization
Possess technical and program management experience to perform all SOC functions