Security Operations Center Manager

MTI; Nashville (TN); On-site; USD 120,000 - 150,000; Full time

Job summary

MTI is seeking a Security Operations Center Manager in Nashville, TN, who will lead the design and implementation of SOC solutions. This role involves heavy technical management, requiring 10+ years in IT, with 2+ years specifically in SOC or Security Analytics. The successful candidate will ensure that incident detection and response remain at the forefront of Security Operations.

The ideal candidate will possess a consultative nature, evaluating existing tools, and uniting them into solid platforms. Strong understanding of security technologies and IT architectures is essential.

Qualifications

• Minimum of 10 years IT experience, with at least 2 years in a SOC or Security Analytics role.
• Demonstrated experience in an incident detection and response oriented security monitoring environment.
• Administrative experience in VMWare-based environments.

Responsibilities

• Lead the evaluation and integration of existing SOC toolsets.
• Work with IT leadership to align SOC solutions with operational goals.
• Identify and translate solution gaps into technical requirements.

Skills

Incident response

SIEM solutions

Log management and analytics

Vulnerability Management Solutions

Pen-Test Frameworks

Hands-on experience in *nix environments

Windows PowerShell scripting

Networking

Education

Technical certifications from GIAC, SANS, Microsoft, Cisco

Tools

Forensics toolsets

Endpoint Security Toolsets

UTM products

Job description

Security Operations Center Manager- Nashville, TN

ALL INTERESTED CANDIDATES ARE HIGHLY ENCOURAGED TO APPLY REGARDLESS OF FULL PROFICIENCY IN ALL REQUIRED SKILLSETS

Job Requirement:

The ideal SOC Manager will possess a strong multi-disciplinary background. A strong technical aptitude across multiple IT arenas paired with outside-the-box thinking and the skillset to turn conceptual ideas into working solutions is imperative. There will be an extremely strong focus on incident detection and response, systems administration, networking, and security. This individual will need to be self-motivated and possess a consultative nature in order work with various IT team members & managers. This role reports directly to Director of Security Operations, who in turn reports directly to the CISO. Frequent executive level interactions, discussions, and briefings will be expected.

As an architect by trade, this will be a heavily technical managerial position. The technical focus of this role is to evaluate multiple existing but independent toolsets and unite them into a single inter-related solutions platform. This will not require customized application development as existing COTS type solutions are in place, however the ability to dynamically integrate custom products would be extremely beneficial. This role will lead in the interaction with both internal and external industry-elite incident response and security analytics & engineering resources. Key project interactions will include SOC development, threat intelligence sharing initiatives, and alpha/beta testing of emerging security solutions.

The successful candidate will be capable of simultaneously meeting four high-level objectives:

• Demonstrate proficiency in incident response, kill chain oriented analytics, and identification of IoC’s.
• Evaluate, tune, integrate, and optimize existing toolsets to meet monitoring and intelligence sharing requirements
• Work directly with senior Security and IT leadership to ensure that the final SOC solutions platform is designed to meet diverse operational goals and initiatives
• Identify solution gaps and translate those gaps into succinct (vendor-agnostic) technical requirements

IT management experience and a general understanding of the totality of IT architectures and how they interrelate will be required. From a workflow perspective this candidate will need to understand a tiered work delegation model and be able to design and leverage existing solutions to promote that model. The successful candidate will be able to both evaluate technical solutions from the big picture perspective and actually drill down and configure the solutions independently.

Skills Preferences:

Minimum of 10 years IT experience, with at least 2 years in a SOC or Security Analytics role

Hands‑on advanced level experience with both closed and open source SOC technologies to include:

• Log management, analytics, and correlation platforms
• SIEM solutions
• Forensics toolsets
• Pen-Test Frameworks & Toolsets
• Vulnerability Management Solutions (Nessus, Qualys, Nexpose, etc.)
• Endpoint Security Toolsets
• UTM products

Demonstrated experience in an incident detection and response oriented security monitoring environment

Expert level hands‑on knowledge of installing, configuring, and maintaining network and security monitoring solutions.

Hands on experience in *nix environments and open source toolsets

Administrative experience in VMWare‑based environments

Intermediate level of Windows PowerShell and Perl scripting

Knowledge of typical III‑Tiered IT support models

Knowledge of how role‑based access works within NOC/SOC solutions, and experience implementing it

Technical certifications from GIAC, SANS, Microsoft, Cisco, are highly desirable

Candidates will be required to actively pursue and acquire certification

All your information will be kept confidential according to EEO guidelines.