security operations manager in fintech

HireHi; Portugal; Presencial; EUR 60 000 - 90 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Конкурентная зарплата

Годовой бонус

Акции компании

Медицинская страховка

Оплачиваемый отпуск

Resumo da oferta

iCapital осуществляет операции безопасности на глобальном уровне, укрепляя киберустойчивость через команду информационной безопасности.

На должности лидера SOC вы будете руководить повседневной работой SOC, наставлять аналитиков и развивать процессы инцидент-менеджмента, SIEM и SOAR, а также взаимодействовать с другими командами для повышения защиты.

Qualificações

• 5–8 лет опыта в операциях безопасности
• 1–3 года руководства SOC/команды
• Практический опыт настройки SIEM (Splunk)
• Опыт работы с SOAR и знание жизненного цикла инцидентов и NIST/MITRE ATT&CK
• Знание Linux, Windows и macOS
• Опыт работы в облачных инфраструктурах
• Сильные навыки коммуникации на английском
• AWS опыт будет плюсом

Responsabilidades

• Управление суточной работой SOC, мониторинг, эскалирование и реагирование на инциденты
• Менторство и развитие команды аналитиков, планирование смен и он-бординг
• Разработка и поддержка runbooks, playbooks и чек-листов
• Настройка и управление SIEM и SOAR, контроль тревог и панелей
• Эскалация инцидентов и координация с другими командами
• Сотрудничество с менеджером по киберугрозам для обработки инцидентов
• Отчеты руководству об уровне защиты и операционных метриках
• Выступать как точка эскалации вне рабочий график
• Выбор и настройка ключевых инструментов безопасности

Conhecimentos

SOC leadership

Team mentoring

SIEM management

SOAR

Incident response

Cloud security

Linux

Windows

macOS

English

AWS experience

Ferramentas

Splunk

SOAR platforms

Descrição da oferta de emprego

Описание

iCapital provides security operations coverage across global time zones and strengthens the firm’s cyber resiliency through its Global Information Security team.

Задачи

• Manage the day-to-day operations of the Security Operations Center, ensuring monitoring, alerting, triage, and incident response run effectively across the operating day
• Lead, mentor, and develop a team of SOC analysts, including scheduling, shift and on-call coverage, performance management, hiring, and onboarding
• Establish and maintain runbooks, playbooks, incident-handling procedures, and daily, weekly, and monthly security checklists
• Operate, tune, and manage the SIEM and SOAR platforms; maintain alerts and dashboards that surface key security events and provide security assurance
• Triage and elevate incidents, set priorities for the SOC team, and coordinate responses with other teams across the firm
• Partner with the Cyber Case Manager to ensure incidents flow into case management, are tracked to closure, and align with case-driven priorities
• Work with Threat Detection Engineering, Cloud Security, Incident Response, and other Information Security teams to improve the firm’s security posture
• Measure and report on the state of the firm’s cyber security defenses, including operational metrics and regular reporting to leadership
• Serve as an escalation point for high-severity incidents, including outside standard business hours as needed
• Drive the evaluation, selection, and configuration of key security tools to enhance Cyber Security Operations

Требования

• 5-8 Years of experience in security operations, including 1-3 years leading or managing a SOC or security operations team
• Demonstrated people-management experience leading, mentoring, scheduling, and developing analysts
• Hands-on experience setting up and managing a SIEM, preferably Splunk
• Experience with SOAR and a strong understanding of the incident-response lifecycle and frameworks such as NIST and MITRE ATT&CK
• Knowledge of Linux, Windows, and macOS operating systems
• Experience with cloud infrastructure
• Strong coordination and stakeholder-management skills, including liaising across teams and reporting to leadership
• Professional fluency in English
• Attentive, organized, and detail-oriented, with solid problem-solving and analytical skills
• Excellent written and verbal communication skills
• Будет плюсом: AWS experience

Условия

• Competitive salary, annual performance bonus, and equity for full-time employees
• 100% Employer-paid health and dental insurance
• Generous paid time off (PTO)