What are the responsibilities and job description for the Manager, Cyber Defense position at Request Technology, LLC?
***Hybrid, 3 days onsite, 2 days remote***
***We are unable to sponsor as this is a permanent full-time role***
Responsibilities:
- Lead cyber security incident responders in response activities including investigation, coordination, review, and reporting.
- Oversee technical analysis of security events while coordinating incident response activities with internal and external teams.
- Ensure and directly oversee the collection and preservation of data associated with cyber security incident response activities following industry best practices and established procedures.
- Develop and support briefings to senior management as a trusted incident responder.
- Prioritize and identify security risks, threats and vulnerabilities of networks, systems, applications, and new technology initiatives.
- Lead systems management team to operationalize remediation efforts for gaps identified.
- Develop and implement security monitoring roadmaps for company technologies, applications, SaaS, and other cloud-hosted solutions. These roadmaps will direct efforts on implementation of monitoring use cases and measurement of monitoring capabilities.
- Manage, implement, and validate security monitoring use cases, mapping to frameworks, technical configuration for security tools, etc.
- Subject matter expert on security tools including appliances, hosted systems, and SaaS including health checks, version updates, and content development.
- Validate content changes to security tools are appropriate from other analysts and teams.
Qualifications:
- Minimum five years hands-on security operations experience including interdisciplinary experience with four or more of the following: Cyber Threat Analysis, Digital Computer Forensics, Incident Response, Application Security, Operating Systems Security, Cryptographic Controls, Networking, Programming languages, Incident Response.
- Proven team leadership and project management skills, with the initiative to drive solutions across diverse skillsets and work independently or with local/remote staff, vendors, and consultants.
- Skilled in security assessments and control implementation based on standards like NIST, COBIT, ISO, ITIL, and the NIST Cybersecurity Framework.
- Implementation and maintenance of security platforms (Splunk, Crowdstrike, Symantec DLP) and vulnerability assessment tools (Qualys, Nessus, nmap), including incident response playbook development and remediation management.
- Proficiency with network sniffers/packet tracing tools (Ethereal, tcpdump, etc.), preventative/detective technologies (EDR, network-based analysis), and Web Application Firewalls.
- Strong background in encryption technologies (PGP, PKI, X.509) and directory services/LDAP security (Active Directory, CA Directory).
- Experience across client/server platforms (Solaris, Windows, Linux) and OS hardening procedures, plus proxy/caching services.
- Knowledge of LAN/WAN routing and high availability protocols (OSPF, BGP4/iBGP, EIGRP, NSRP), cloud security tools (AWS, Azure, Google Cloud Platform), and SOAR tools/concepts.
- Some experience scripting and leveraging APIs to integrate security monitoring tools, with knowledge of Generative and Prompt AI.
Salary : $160,000 - $180,000