Lead Cyber Security Operations Specialist, Datasnipper

• 5+ years of experience in cybersecurity operations, with at least 2 years in a Senior Analyst or Lead role
• Demonstrated experience managing and operating a vulnerability management program (e.g., Qualys, Tenable, Rapid7)
• Hands-on experience with internal vulnerability testing, security assessment tools, and remediation planning
• Advanced knowledge of incident response, SIEM tools (e.g., Splunk, Sentinel, QRadar), and endpoint detection (e.g., CrowdStrike, SentinelOne)
• Strong familiarity with MITRE ATT&CK, CVSS, OWASP Top 10, and security frameworks (NIST, CIS)
• Excellent analytical, problem-solving, and communication skills
• A curious mind and eagerness to keep learning and experimenting

Desirable

• We are seeking an experienced and technically skilled Lead Cyber Security Operations Specialist to take ownership of our Security Operations Center (SOC) and internal threat detection program
• In this role, you’ll lead day-to-day security operations, drive incident response, manage vulnerability risk, and continuously improve our security posture
• You’ll also lead internal vulnerability testing and collaborate across IT and engineering teams to identify, assess, and mitigate risk across infrastructure, applications, and cloud environments
• Lead and coordinate daily SOC operations, including threat detection, investigation, containment, and remediation
• Manage and execute the vulnerability management program, including scheduling, scanning, reporting, and risk prioritization
• Conduct internal vulnerability testing and validation, including manual verification and exploit simulation where appropriate
• Collaborate with IT, DevOps, and application teams to ensure timely remediation of critical vulnerabilities
• Act as the technical escalation point for complex security incidents and provide hands-on response support
• Lead development and optimization of detection logic, response playbooks, and automated workflows (SOAR)
• Drive proactive threat hunting and behavioral analysis using SIEM, EDR, and threat intelligence feeds
• Monitor and tune systems to reduce false positives and enhance detection efficacy
• Stay current on CVEs, zero-days, APTs, and threat actor techniques to inform internal defense strategy
• Provide executive-level reporting on security incidents, vulnerability trends, and operational KPIs
• Ensure security tools and configurations align with policy, compliance, and risk objectives

• 30-minutes call with the recruiter
• 45-minutes call with the Hiring Manager
• Assessment
• Offer