Responsibilities
- Full management of direct reports, which consists of Cybersecurity Analysts.
- Oversee and maintain quality control of tickets, phone calls, and overall quality of all SOC related tasks.
- Responsible for the overall performance of the Blue Team.
- Manage and maintain the Blue Team shift schedule.
- Ensure customer escalations are handled in a timely manner via email and meeting.
- Measure and report Blue Team key performance indicators (SLAs, metrics, etc.).
- Conduct gap analysis to improve overall operations of the SOC.
- Collaborate with other SOC teams to ensure operational efficiency and quality.
- Ensure full coverage of core SOC processes including but not limited to: Alarm runbooks, Alert macros, Escalation procedure.
- Automate tasks to drive efficiency and quality amongst the Blue Team.
- Serve as primary point of escalation for Blue Team questions and issues.
- Ongoing updating of our SOC knowledgebase and training program.
- Responsible for mentoring new Cybersecurity Analysts throughout their training.
- Provide ongoing training to the SOC team as a whole.
- Oversee accuracy of Blue Team shift turnover information.
- Lead recurring forums such as SOC All Hands and Emerging Threats.
- Manage vulnerability assessment process/service delivery.
Requirements
- 5+ years working in a Security Operations Center.
- Strong leadership and people management skills.
- Full understanding of SOC structure and process.
- Understanding of XDR.
- Experience working as a Cybersecurity Analyst.
- Customer service skills.
- In depth knowledge of common SOC tools such as: SIEM, SOAR, EDR, Email Security, Threat Intelligence, Vulnerability Scanner.
- In depth knowledge of security monitoring and analysis.
- In depth knowledge of core attack vectors such as: Ransomware, Business Email Compromise, Phishing, Botnet, DDoS, SQL Injection, Supply-Chain Attacks, Mobile Threats.
- Knowledge with cloud computing.
- Experience troubleshooting in a technical environment, problem solving skills.
Nice to Have
- Bachelor's/Master's degree in cybersecurity or relevant field.
- CEH, CompTIA Security+, and similar certifications or cybersecurity bootcamps.
- Programming skills.
Benefits
- A team where you can voice your opinion, make an impact, and where you and your experience are valued.
- Internal mobility – there are opportunities for cross training and the ability to attain your next career step within Barracuda.
- Equity, in the form of non-qualifying options.
- High-quality health benefits.
- Retirement Plan with employer match.
- Career-growth opportunities.
- Flexible Time Off and Paid Time Off benefits.
- Volunteer opportunities.
Work Arrangement
Remote (Worldwide)
Team
Structure: SOC team
Additional Information
- 24x7x365 operations.
- Ensure full coverage of core SOC processes including but not limited to: Alarm runbooks, Alert macros, Escalation procedure.