Cybersecurity Manager

We are looking for an experienced Cybersecurity Manager to lead cybersecurity operations, SOC monitoring, incident response, endpoint security, vulnerability management, DLP, security compliance, and risk mitigation. The candidate will manage security tools and processes, lead incident investigations, mentor the cybersecurity team, and work closely with IT and business teams to maintain a secure IT environment.

Responsibilities

• Lead and manage SOC operations, security monitoring, alert investigation, escalation, and incident response.
• Manage and optimize SIEM, EDR/XDR, Antivirus, DLP, IDS/IPS, and endpoint security solutions.
• Investigate and respond to malware, ransomware, phishing, unauthorized access, data leakage, and other security incidents.
• Lead Incident Response, Threat Hunting, Root Cause Analysis (RCA), remediation, and post-incident reviews.
• Manage endpoint security policies and security controls across Windows and Linux environments.
• Lead vulnerability monitoring, risk assessment, remediation, security hardening, and patch-management activities.
• Develop and improve security policies, procedures, detection rules, incident-response playbooks, and security controls.
• Monitor and manage DLP and data-security incidents involving sensitive and confidential information.
• Support cybersecurity audits and compliance requirements including PCI-DSS, ISO 27001, NIST, and CIS Controls.
• Prepare cybersecurity dashboards, incident reports, risk reports, management reports, and security metrics.
• Lead, mentor, and manage SOC/Security Analysts and cybersecurity team members.
• Coordinate with IT Infrastructure, Network, Application, DevOps, Compliance, and Management teams to resolve security issues.
• Evaluate new cybersecurity technologies and drive security automation and continuous improvement.

Skills & Experience

• 6-10+ years of experience in Cybersecurity, SOC, Information Security, Security Operations, or related fields.
• 2-4+ years of experience in a leadership/managerial role.
• Strong hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or equivalent.
• Experience with EDR/XDR and endpoint security platforms such as Crowd Strike, Microsoft Defender, Trend Micro, Symantec, McAfee, Deep Security, or equivalent.
• Strong knowledge of Incident Response, Threat Detection, Malware Analysis, Threat Hunting, DLP, IDS/IPS, and Vulnerability Management.
• Strong understanding of Windows and Linux security.
• Experience in RCA, security risk assessment, security hardening, and remediation.
• Knowledge of MITRE ATT&CK, IOC analysis, threat intelligence, and security monitoring.
• Good understanding of network security**, firewalls, VPN, access control, MFA, and endpoint protection.**
• Knowledge of security automation/scripting using PowerShell, Python, or APIs is an advantage.
• Strong leadership, communication, documentation, problem-solving, and stakeholder-management skills**.**
• Bachelors/Masters degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.
• Certifications such as CISSP, CISM, CEH, Security+, GIAC, Microsoft Security, Splunk, or CrowdStrike are preferred.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.