Senior Security Operations & Incident Response Leader (Hybrid)

K&L Gates; Durham (NC); On-site; USD 148,000 - 296,000; Full time

Benefits offered by this job

Medical/Prescription Coverage

401(k) Retirement Plan and Profit Shs.

Paid Time Off (25-30 days)

Hybrid/Remote Work Opportunities

Dental Insurance

Job summary

K&L Gates is seeking a Senior Manager, Security Operations to oversee cyber security, forensics, incident response and physical security across the firm. You will implement monitoring technologies, incident response systems and a comprehensive security strategy to convert business needs into technical specs while ensuring data security and regulatory compliance.

The role requires leadership of remote teams, extensive experience in IT audit and risk management, and proficiency with cloud

Qualifications

• Bachelor's degree or equivalent in CS, information security, cybersecurity or related field.
• Expertise in DevSecOps security principles and industry best practices.
• Experience in security automation and using Generative AI to enhance security operations.
• Ability to build productive relationships across the firm.
• Proficiency in Microsoft Office applications (Word, Excel, PowerPoint, SharePoint).
• Experience in multi-cloud environments (Azure, AWS, GCP).
• 10+ years in IT audit, enterprise risk management, penetration testing, red teaming, incident response and physical security operations.
• 10+ years in regulatory compliance and information security frameworks such as ISO 27001, NIS 800-171.
• Leadership of remote teams including performance management and development.

Responsibilities

• Implementing comprehensive strategies for network monitoring and intrusion detection analysis using defense tools like firewalls, IDS/IPS, and host-based security systems.
• Performing log-based and endpoint-based threat detection to identify and safeguard against risks originating from various sources.
• Overseeing deployment of cloud-based detection to identify threats in cloud environments and firm-utilized services.
• Correlating activity across assets such as endpoints, networks, apps, and environments (on-prem and cloud) to identify anomalous activity.
• Reviewing alerts and sensor data while documenting formal technical incident reports.
• Ensuring incident response support for network subscribers, including containment and mitigation actions and coordinating forensic analysis when required.
• Supporting the creation of business continuity/disaster recovery plans, including testing and addressing deficiencies.
• Working with SIEM to manage/tune the system, create/detect content and monitor alerts.
• Researching emerging threats and vulnerabilities to assist with identifying incidents.
• Conducting regular training sessions on intrusion detection, prevention systems, security incident response procedures, threat intelligence analysis, and log analysis within the team.

Skills

DevSecOps

Security automation

Cross-functional relations

MS Office

Azure

AWS

GCP

ISO 27001

NIS 800-171

Remote leadership

Education

Bachelor's degree or equivalent

Tools

SIEM

Job description

K&L Gates is seeking a Senior Manager, Security Operations to oversee cyber security, forensics, incident response and physical security across the firm. You will implement monitoring technologies, incident response systems and a comprehensive security strategy to convert business needs into technical specs while ensuring data security and regulatory compliance.

The role requires leadership of remote teams, extensive experience in IT audit and risk management, and proficiency with cloud