Nuspire is a leading managed security services provider (MSSP) founded over 20 years ago to revolutionize the cybersecurity experience by taking an optimistic and people-first approach. Our deep bench of cybersecurity experts uses world-class threat intelligence as part of a Fusion Center to detect, respond, and remediate advanced cyber threats. Position Description: The Incident Handling Manager directs the team of incident handlers, incident responders, and forensics examiners by way of mentoring, capacity management, performance management, and incident review. The Incident Handling manager partners with other Fusion Center areas and leaders to assist with incident investigation, collaboration, and communication.As the Incident Handling Manager, you will be expected to understand and have deep experience in incident response and forensics. In this position, you will be reviewing investigative cases to ensure that processes are followed as well as serving as an escalation point for your team for customer interactions and declaring major incidents. This opportunity may require shift work and the ability to be available on[1]call on nights, weekends, and holidays.The ideal candidate will have 10+ years of incident handling and response experience. They should have in-depth technical knowledge of network security, operating system security, vulnerability management, common attacker techniques and vectors, and SIEM. They should have direct experience in leading critical investigations. They should have experience in writing technical investigation reports as well as incident summary reports for leadership. They should have experience managing teams of 10 or more people and providing mentorship. To apply for Network /System / Database Administration, you are excellent at:Providing day-to-day oversight of incident handling, incident response, and forensics teamsReviewing all incidents and participate in shift turnover meetingsMaintaining and enhance team training programMaintaining and enhance career development and advancement plansManaging multiple priorities and projects at onceBeing responsible for overall ownership of all playbooks, procedures, and workflows pertaining to incident handling and forensicsServing as a subject matter expert as it pertains to incident handling and incident response processesCollaborating with SIEM team to drive down false positives of alertsYour Success Profile includes:At least 10 years of security experienceAdvanced incident investigation and response experienceAdvanced log parsing and analysis skill setsAdvanced knowledge of networking fundamentalsModerate knowledge of Windows, Linux/Unix, and Mac operating systemsModerate knowledge of network defenses such as firewalls, IDS/IPS, proxiesModerate knowledge of forensic techniquesModerate knowledge of audit requirements (PCI, HIPAA, SOX, NYDFS, etc)Preferred Skills:The ability to communicate technical and security topics to executive leadershipAdvanced understanding of the TCP/IP packet frameworkAdvanced understanding of MITRE ATT&CK and Cyber Kill Chain frameworksEthical hacking/penetration testing experience · Attacker mindsetModerate understand of different cryptographic algorithmsExperience in multiple roles in incident responseAbility to explain technical security events to non-technical audiencesUnderstanding of cyber fraud and the attack vectorsEducation/Certifications/Training Required:Bachelors’ Degree in Computer Science, Information Security Assurance, or equivalent experienceEducation/Certifications/Training Preferred: GIAC, GCIH, GMON, OSCP, CEH, CEPTCCNA, CCNPCISSP
2 months ago