Cybersecurity Advisor

Job Description The Cybersecurity Advisor is responsible for the Security Operations Center Activity. This role will help develop innovative and effective procedures for the Security Operations Center to enhance response time, coordination and incident response operations, and build a world class team of Cyber Security Incident Response and forensics experts. Train staff on security concepts, develop incident response and forensics management process, write correlations, and integrate intelligence data into monitoring and operations activities. The Security Director/Manager will coordinate with company leadership for the development, implementation, and maintenance of security operations processes across the enterprise. Lead and participate in the Computer Emergency Response Team and the Computer Security Incident Response Team Lead day-to-day SOC Operations, ensuring continuous monitoring, detection and response to security events and incidents. Manage L2/L3 SOC analysts, incident responders and threat hunters fostering a high-performance culture Perform accurate and precise real-time analysis and correlation of logs/alerts from a multitude of client devices with a focus on the determination of whether said events constitute security incidents Analyze and assess security incidents and elevate to resources or appropriate internal teams for additional assistance Ensure adherence to incident response SLAs, escalation paths and communication protocols. Maintain measures to ensure information privacy, information security, and information assurance Establish and operate security events and log-monitoring delivery. Provide operational oversight of service delivery and ensure deliverables are timely and of high quality Possess Significant theoretical and practical knowledge in Exploits, vulnerabilities, network attacks Possess Theoretical and practical knowledge in Packet analysis tools (tcpdump, Wireshark, ngrep, etc.) Possess Significant theoretical and practical knowledge in Regular expressions Identify/implement improvements to business processes, methodologies, and client communication methods. Perform Training, monitoring, and motivating a diverse group of SOC Analysts Manage project scopes and timelines, and assist in managing project budgets Participate in reviewing the design and development of significant new information systems and applications, and participate in the design and development of any significant changes to existing information systems and applications Maintain relationships with appropriate technology partners, both internal and external, that will aid in the development, deployment, and support of technical solutions EDUCATION, EXPERIENCE, TRAINING The successful applicant must possess one or more current, applicable professional/technical certifications, such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Security Compliance Specialist (CSCS), Certified Information Privacy Professional (CIPP), Certified Information Systems Security Professional (CISSP), Certified Internal Auditor (CIA), GPEN, GWAPT, SANS GIAC/GSEC, or CEH Bachelors degree in information systems, Computer Science, or related field or equivalent or an equivalent number of years of experience 7+ years of experience in Cyber Security 5+ years of experience with defensive Cyberspace operations 4+ years of handson experience in SIEM technologies like LogRhythm, SPLUNK, QRadar etc. 4+ years of experience in Incident response process and incident handling 3+ years of experience in network intrusion detection Specific experience delivering largescale, scalable technology infrastructure solutions to support rapid business growth Advanced knowledge of Cyber Security management practices, network and application vulnerability assessments, change control, business continuity planning, data privacy, and risk assessment practices Experience working with log management, security monitoring, vulnerability management and security incident/event management tools Experience with Cyber incident management, response and reporting procedures Knowledge of network monitoring, analysis, troubleshooting, and configuration control technologies Knowledge of TCP/IP communications and how common protocols (SMTP, HTTP, POP3, IMAP, etc.) and applications work at the network Inquisitive, critical thinker with business risk awareness, professional skepticism, and sound judgment Practical leader, capable of creating and implementing plans to achieve strategic objectives Capable of gaining support for initiatives through influence and the use of business rationale Ability to work under the pressure and stress of deadlines Ability to think independently and provide self and group direction, solve various problems and make informed, rational decisions Ability to research, assimilate information from both IT and business functions, apply strong problem IT and business functions, apply strong .