Cyber Security Manager

Job Description

Communication

Provide timely updates and notifications throughout the incident lifecycle on ongoing investigations and security incidents to the InfoSec SOC staff.

Ensure critical information is communicated as needed to facilitate rapid response and decision-making.

• Compliance and Accreditation
  
  

Obtain the necessary accreditations.

Participate in compliance activities to ensure the MSOC adheres to relevant standards and regulations.

• SIEM and EDR Environment Management
  
  

Provide shared management and support for the SIEM and EDR.

Continuous improvement of detection rules and configurations to minimize false positives in SIEM and EDR

Ensure the SIEM and EDR is optimized for efficient detection, monitoring and analysis.

Advise and assist in log management, collection, aggregation, and normalization of security data from various sources.

Assist InfoSec Team in SIEM and EDR functionalities.

Assist in reporting and visualization of security data.

• Performance Metrics and Reporting
  
  

Develop and produce monthly scorecard dashboards, report briefings that can be presented to management.

Highlight the performance and effectiveness of the SOC and identify areas for process improvement.

Aviation requires that the Applicant provide the following reports to the designated staff:

• Incident metric Reports
• Monthly Service Assessment Reports - Provide a detailed summary of the security posture over the month, including incident trends, threat analysis, system vulnerabilities, patch management status, and overall security metrics.
• Quarterly Business Review Reports - Offer a comprehensive review of security activities over the quarter, identifying trends, assessing the effectiveness of security measures, and providing strategic recommendations for improvements.
• Log Source Status metric Reports (weekly)
• Daily metric Reports - Summarize weekly security activities, trends, and key metrics. Include information on any incidents, suspicious activities, and mitigation actions.
• Annual Metric Reports – Provide an in-depth analysis of the yearly security posture, including a summary of incidents, threat landscape changes, risk assessments, compliance status, and long-term security recommendations.
• Cyber Awareness Alerts
• Threat Reports
• Ensure reports includes/displays met dashboard
• Knowledge Management
  
  

Create and maintain a knowledge base of articles, documenting best practices, investigation findings, remediation steps (playbooks) and lessons learned.

• Monthly Briefing Sessions
  
  

Provide staff with monthly briefing sessions to keep them informed about occurrences, trends, key metrics, documentation findings, identified gaps, and recommended improvements to strengthen the security environment.

Prepare and present metrics and documentation to highlight and showcase the security posture of the organization, including insights into what is functioning effectively, areas of concern, and actionable guidance for necessary improvements.

Qualifications:

(d) Applicants must provide proof of the following staff certifications:

i) Certified Information Systems Security Professional (CISSP) ii) Certified Information Security Manager (CISM) iii) Certified Ethical Hacker (CEH) iv) GIAC Certified Incident Handler (GCIH) v) GIAC Security Essentials (GSEC)

Company Description

FutureNET, Inc. (FNI) is an information technology (IT) corporation that provides customized IT solutions for businesses across a broad spectrum of industries. Since 1993, FutureNET has been delivering expert, cutting-edge technical support services to a wide range of satisfied clients.

FutureNET, Inc. offers an exciting work environment with a very strong corporate culture. We encourage all of our consultants to constantly learn new skills and be proactive in developing new ideas and thinking. If you have the right attitude and desire, you'll find FutureNET a very satisfying place to work.

FutureNET, Inc. (FNI) is an information technology (IT) corporation that provides customized IT solutions for businesses across a broad spectrum of industries. Since 1993, FutureNET has been delivering expert, cutting-edge technical support services to a wide range of satisfied clients. FutureNET, Inc. offers an exciting work environment with a very strong corporate culture. We encourage all of our consultants to constantly learn new skills and be proactive in developing new ideas and thinking. If you have the right attitude and desire, you'll find FutureNET a very satisfying place to work.