Cyber Defense Manager

JustMarkets; United States; Remoto; USD 170.000 - 250.000; Tempo pieno

Descrizione del lavoro

JustMarkets is seeking a senior Cyber Defense leader to own and advance the organization's security operations, incident response, and vulnerability management across cloud and on‑prem environments. You will build a high‑performing team and establish detection coverage while coordinating with IT, Product, Legal, and executives.

This role requires 10+ years in information security, hands-on SOC and incident command, and expertise with SIEM/EDR and cloud security.

Competenze

• 10+ years of experience in Information Security.
• 3+ years in a security management or team lead role with direct people management experience.
• Hands-on experience managing SOC operations and leading incident command.
• Ability to design and maintain detection logic across SIEM, EDR, and cloud platforms.
• Knowledge of attack scenarios (ATO, credential theft) and MITRE ATT&CK mapping.
• Experience prioritizing vulnerabilities using CVSS.
• Hands-on experience with enterprise SIEM (Splunk, Microsoft Sentinel, Chronicle, Elastic) and SOAR tooling.
• Understanding of cloud security in AWS, GCP, or Azure.
• Understanding of IAM, PAM, SSO, and identity attack vectors.
• English - Upper-Intermediate or higher.
• Ukrainian - Fluent.

Mansioni

• Own Cyber Defense execution across SOC, detection engineering, incident response, and exposure remediation
• Lead alert triage quality, escalation standards, incident command, and response coordination
• Prioritize critical vulnerabilities and exposures using asset criticality, exploitability, and business impact
• Manage Cyber Defense dashboards, runbooks, remediation follow-up, and operational metrics
• Coordinate with IT, Platform, Product, GRC, Legal, and business owners during incidents and remediation
• Build and develop the Cyber Defense team, including hiring, onboarding, mentoring, and retaining security talent
• Drive continuous improvement of detection coverage, response playbooks, and security controls based on lessons learned and threat intelligence
• Report on Cyber Defense performance, incidents, and risk posture to security leadership and stakeholders

Conoscenze

Security leadership

SOC operations

Incident command

Detection logic design

Vulnerability prioritization

Threat intelligence

SIEM

SOAR

Cloud security

IAM/PAM/SSO

Strumenti

Splunk

Microsoft Sentinel

Chronicle

Elastic

Descrizione del lavoro

Responsibilities

• Own Cyber Defense execution across SOC, detection engineering, incident response, and exposure remediation
• Lead alert triage quality, escalation standards, incident command, and response coordination
• Prioritize critical vulnerabilities and exposures using asset criticality, exploitability, and business impact
• Manage Cyber Defense dashboards, runbooks, remediation follow-up, and operational metrics
• Coordinate with IT, Platform, Product, GRC, Legal, and business owners during incidents and remediation
• Build and develop the Cyber Defense team, including hiring, onboarding, mentoring, and retaining security talent
• Drive continuous improvement of detection coverage, response playbooks, and security controls based on lessons learned and threat intelligence
• Report on Cyber Defense performance, incidents, and risk posture to security leadership and stakeholders

Requirements

• 10+ years of experience in Information Security
• 3+ years in a security management or team lead role with direct people management experience
• Hands‑on experience managing SOC operations and leading incident command
• Ability to design and maintain detection logic across SIEM, EDR, and cloud platforms
• Knowledge of attack scenarios (ATO, credential theft) and MITRE ATT&CK mapping
• Experience prioritizing vulnerabilities using CVSS
• Hands‑on experience with enterprise SIEM (Splunk, Microsoft Sentinel, Chronicle, Elastic) and SOAR tooling
• Understanding of cloud security in AWS, GCP, or Azure
• Understanding of IAM, PAM, SSO, and identity attack vectors
• English - Upper-Intermediate or higher
• Ukrainian - Fluent

Preferred Qualifications

• Experience in fintech or e-commerce industries
• Background as a SOC analyst or incident responder prior to management
• Experience building a SOC or Cyber Defense function from scratch
• Familiarity with threat intelligence platforms
• Relevant certifications: CISSP, CISM, GIAC (GSOM, GCED, GCIH)

Benefits

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Medical budget
• Professional education budget
• Language learning budget
• Wellness budget