Senior Manager, IT Data Center Operations - NetWitness

Senior Manager, IT Data Center Operations - NetWitness
As one of the most established cybersecurity companies in the world, we at
NetWitness are hard at work every day helping our customers and partners
better protect their organizations from cyberattacks. Our products and
incident response services are used within most large enterprises, governments
and militaries for incident response and threat hunting. Our Sales
Professionals, Sales Engineers and Professional Services Consultants design
and deliver solutions for potential and existing customers to enable better
visibility, insight and action to prevent and defend against attacks.
NetWitness provides the unique ability to provide one single platform with a
unified view across all attack surfaces including Network, Logs/SIEM, Endpoint
and IoT combined with our AI-based User and Entity Behavioral Analysis (UEBA)
and Security, Orchestration, Automation & Response (SOAR) capabilities.
Be a part of RSA's internal security team to develop, manage and lead the
24x7x365 Security Operations Center (SOC) & Incident response program. This is
an exciting opportunity to be part of a build from scratch experience,
utilizing industry leading technologies and capabilities. We are seeking
individuals who share our values, thrive in a team environment, and recognize
the importance of accountability; people who strive to exceed expectations to
ensure our success. With team members located globally, you will have an
excellent opportunity to influence the security culture at RSA and further
develop your career.
Responsibilities:
* Manage a team of 24X7x365, global technical security resources
* Accountable for Security Operations Center Detect & Response strategy, program effectiveness and operational execution utilizing the NetWitness platform
* Work cross-functionally with other leads in Cybersecurity, IT or business functions to meet project milestones and service levels
* Develop, mature and evolve security monitoring processes, procedures and techniques against the latest industry best practices
* Participate in internal assessments and tabletop exercises, and other activities that contribute to operational readiness.
* Support and oversee incident response activities as the most senior escalation point within the team
* Lead the team in a fast-paced environment, while exercising composure, professionalism and teamwork during incidents.
* Exercise discretion and confidentiality on a need-to-know basis when performing investigations.
* Lead Executive Briefings to both RSA Leadership as well as customers describing the SOC operating model and industry leading practices in use leveraging RSA technology.
* Initiating new or revised departmental procedures, programs and initiatives
* Maintain full accountability for all people-management activities for subordinate staff such as the hiring, staffing and maintaining of a diverse and effective workforce, career development/planning, performance and pay discussions of team members and responsible for establishing goals and objectives for the department
* Continuous development of staff through formal and informal training, information sharing sessions and recorded training
* Identify operational inefficiencies as well as best practices and drives improvements via creation of metrics, measurements, and tools
* Provides technical leadership expertise for the support of integrated security systems and solutions
* Take the first step towards your dream career
Essential Requirements:
* Bachelor's Degree in Information Technology,
* Information Security or related major; or ‎10 years of direct experience in the field of Cybersecurity
* Expert understanding of Cybersecurity technologies and concepts directly related to security event management, incident response, threat hunting and threat intelligence
* Understanding of tactics, techniques and procedures (TTPs) associated with cyber threats and the ability to develop relevant alerting, countermeasures, and threat hunting techniques
* ‎5+ years of management experience in a Cybersecurity role, preferably ‎3+ in a security operations center (SOC) function
* Experience performing monitoring and incident response activities within cloud hosted environments such as AWS, Azure and GCP
* Flexibility to work non-standard business hours such as nights or weekends as required, with normal work hours planned between 6am - 3pm local Cairo time
* Strong leadership, problem solving and critical thinking skills with the ability to prioritize and execute autonomously
* Ability to lead, motivate and direct a workgroup
* Excellent communication skills, particularly with English language
Desirable Requirements:
* Ability to prioritize projects and/or deliverables
* Ability to work in a high-pressure environment

RSA is committed to the principle of equal employment opportunity for all
employees and applicants for employment and to providing employees with a work
environment free of discrimination and harassment. All qualified applicants
will receive consideration for employment without regard to race, color, and
any other category protected by applicable country law.
If you need a reasonable accommodation during the application process,
please contact the RSA Talent Acquisition Team at
[email protected] . RSA and its
approved consultants will never ask you for a fee to process or consider your
application for a career with RSA. RSA reserves the right to amend or withdraw
any job posting at any time, including prior to the advertised closing date.