Security Operations Supervisor

ELEKS Information Security Office is looking for a Security Operations Supervisor in Lviv, Ternopil, Kyiv, or Ivano-Frankivsk.

Security Operations Supervisor is responsible for designing, implementing and maintenance of ELEKS Security Operations Center (SOC) and related ISMS processes. Specifically, Security Operations Supervisor objective is to ensure efficient execution of Incident Management, Threat Intelligence, Vulnerability Management and Patch Management activities.

REQUIREMENTS

Working experience in architecture, design and implementation of security systems and countermeasures (e.g. SIEM, EDR, DLP, UEBA, IDS/IPS, vulnerability scanners, anti-virus and anti-malware, firewalls, encryption)
Knowledge of Security Operation Center processes, ability to perform supervision of SOC and perform continuous improvement of its operations
Working experience in planning and conducting of technical security audits. 
Knowledge of Information Security (IS) standards/frameworks (ISO 27001/2, SOC2, Cyber Essentials, PCI DSS, HiTrust), ability to establish IS processes in line with these standards
Network architecture, security principles, technologies, and tools
Detailed technical knowledge of Windows and UNIX operating systems
Virtualization technologies and security
Identity and access management principles and technologies
Subnetting, DNS,DHCP, VPNs, VLANs, VoIP and other network routing methods
Network and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, etc.)
Solid knowledge of secure coding practices, application security and cryptography technologies, ethical hacking, threat modeling, secure SDLC process
Solid knowledge of disaster recovery and business continuity planning
Strong analytical and conceptual skills balanced by broad perspective on how security efforts to support realization of business goals and customer satisfaction
Proven leadership capabilities and strong communication and interpersonal skills
English – upper-intermediate or higher

RESPONSIBILITIES

Develop and maintain short- and long-term goals and objectives for ELEKS Security Operations Center aligned with Information Security goals
Define activities and projects supporting continuous improvement of ELEKS Security Operations Center, addressing the IS gaps identified and enhancing ELEKS security overall
Evaluate new technologies and processes that enhance security capabilities. Design, architect, test, analyze, evaluate and implement new security systems and processes
Perform program and project management activities to ensure successful execution of ISMS projects assigned.  
Coordinate the development and review of ISMS policies relevant to SOC activities and other supporting documents, such as Hardening Baselines, IS standards/procedures
Effectively inform stakeholders about the status of the ELEKS information security posture. Perform periodic security reporting (both: executive and technical)
Coordinate handling of the information security incidents, coordinate investigation activities, communicate with clients and, if needed, escalate to ELEKS senior management, and contact authorities (Police, CERT-UA, etc.)
Plan, control, and perform installation, configuration, technical support and administration of security systems and countermeasures (e.g. SIEM, EDR, DLP, UEBA, IDS/IPS, vulnerability scanners, anti-virus and anti-malware, firewalls, encryption)
Supervise and perform system hardening, security testing, and vulnerability management
Prevent, detect, investigate and respond to cyber threats for the organization’s assets
Build and establish plans and controls to protect digital files and information systems against unauthorized access, modification and/or destruction
Coordinate configuration, management and running the phishing simulation campaigns
Plan, manage and optimize the capacity of ELEKS SOC
Provide leadership, training and technical advice to SOC team. Identify/address training and career development needs, provide feedback and conduct performance assessment of subordinates
Management of access rights for SOC by participation in approval, review, and removal of access rights (in case of specialist termination, role change and on a regular basis as per Access Control Policy)
Resolve security incidents within the SOC team and, if necessary, perform disciplinary actions in conjunction with HR team