SOC Lead / Cybersecurity Operations Lead

Project Overview

This is an ongoing project with aggressive timelines. A majority of the team is made up of experienced consultants, and we are seeking individuals who are highly productive, very flexible, and can work in an environment where fluidity of duties is common. Each team member is expected to contribute with minimal supervision.

Candidates who enjoy working on complex, change-oriented projects with motivated team members will find this position attractive.

The Office of Cybersecurity is tasked with performing ongoing enterprise cybersecurity threat monitoring and incident response capabilities. This position requires a broad and keen understanding of technology and IT delivery of Security Operation services for on premise and cloud based equipment and critical applications. A strong candidate for this position should possess experience in the following:

Cyber Threat Response and Incident Handling

Cyber Security Operations

Security Service Portfolio Management

Duties/Responsibilities:

The Cybersecurity Operations Lead will be in a unique position to help mature our Security Operations Center capability and will work directly for the CISO to drive innovation and maturation of the Agency Cyber threat detection and response capabilities. We are looking for candidates who are highly organized, can work independently in a fast-paced environment and produce multiple quality deliverables within defined deadlines. Candidates should be self-starters, creative problem solvers and have an eagerness to implement tactics, techniques and procedures which make the most effective use of Agency staff, resources, products and technologies quickly.

Drive innovation and maturation of Security Operations capabilities

Act as an escalation point and provide leadership, mentorship, and guidance to SOC Analyst I, II, and III

Oversee the identification, analysis, and response to security incidents, ensuring rapid containment and resolution

Lead and mentor a team of Security Operations analysts, ensuring they are well-trained and motivated

Assist in staffing Security Operations staff

Perform threat identification and analysis of risks to the Medicaid Enterprise

Assist in the implementation and advancement of Continuous Monitoring and Incident Response processes and procedures

Consistently review and refine Playbooks, Process, and Alert reviews to identify areas of improvement

Assist with advanced threat hunting, looking for attacker presence within the environment

Work with Information Technology, Application Development and Business Teams to advance security efforts of the Medicaid Enterprise

Lead security team projects, and continuous improvement

Collaborate with compliance teams to maintain audit-ready status

Requirements

Benefits