Security Operations Center Manager jobs in Columbia, MO

• Bachelor's Degree (or equivalent) in Computer Science, Information Technology, Cyber Security, or related discipline
• Information Security Certification preferred (CISSP, GCIH, CYSA , etc.)
• 4 years of applicable Management or Leadership experience
• Minimum of 4-7 years of experience in roles related to cyber security operations including participation in incident response
• Strong written and verbal communication skills, including building reports and metrics for specific target audiences
• Extensive technical understanding and exposure to SIEM, EPP/EDR, IDS/IPS, DLP, and SOAR
• Experience with successful Data Loss Prevention and Insider Threat programs
• Proven experience with incident response methodologies, tools, and best practices
• Knowledge of general attack stages, attacker Techniques, Tactics, and Procedures (TTPs), and defense models
• Ability to work calmly under pressure and manage crisis situations effectively
• Strong critical thinking and assessment capabilities
• Self-motivated with a strong enthusiasm for learning

The well-being of WWT employees is essential. So, when it comes to our benefits package, WWT has one of the best. We offer the following benefits to all full-time employees:

• Health and Wellbeing: Heath, Dental, and Vision Care, Onsite Health Centers, Employee Assistance Program, Wellness program
• Financial Benefits: Competitive pay, Profit Sharing, 401k Plan with Company Matching, Life and Disability Insurance, Tuition Reimbursement
• Paid Time Off: PTO & Holidays, Parental Leave, Sick Leave, Military Leave, Bereavement
• Additional Perks: Nursing Mothers Benefits, Voluntary Legal, Pet Insurance, Employee Discount Program

• Locations Include:Missouri and potentially others

Equal Opportunity Employer Minorities/Women/Veterans/Individuals with Disabilities

Why WWT?

At World Wide Technology, we work together to make a new world happen.Our important work benefits our clients and partners as much as it does our people and communities across the globe. WWT is dedicated to achieving its mission of creating a profitable growth company that is also a Great Place to Work for All. We achieve this through our world-class culture, generous benefits and by delivering cutting-edge technology solutions for our clients.

WWT was founded in 1990 in St. Louis, Missouri. Weemploymore than10,000 peoplegloballyand closed nearly $21 billion in revenue in 2023. We have an inclusive culture and believe our core values are the key to company and employee success. WWT is proudto have been included onthe FORTUNE "100 Best Places to Work For®" list 13 years in a row!

• Collaborate with cross-functional teams, including IT, legal, and compliance, to ensure the effective resolution of security incidents while adhering to regulatory and legal requirements
• Lead and coordinate cybersecurity incident response activities, including triage, containment, investigation, and remediation of security incidents across the organization.
• Manage a team of remote cyber security professionals consisting of incident response and data protection team members.
• As an engineer by trade, this will be a heavily technical managerial position
• Key project interactions will include SOC development, Security Operations, GRC, Threat and Vulnerability Management, Identity and Access Management Operations, and alpha/beta testing of emerging security solutions
• Identify SOC capability enhancement ideas for continuous improvement
• Work directly with Security Operations and Leadership to ensure that the final SOC solutions platform is designed to meet diverse operational goals and initiatives
• Contribute as lead and SME on incident research and resolution when appropriate, mentoring incident team members
• In addition to experience with leading SOC operations and strong technical acumen in threat detection and response processes, the ideal candidate will bring demonstrated success in hiring, evaluating, and developing talents and comfort with presenting analytical insights to senior leadership
• Develop (and oversees) metrics and Key Performance Indicators designed to illustrate program performance, alert fidelity, and how the SOC contributes to a reduction in overall enterprise risk

• Detect and triage security events from endpoint, network, and cloud services to identify active threats to WWT information systems.
• Identify the root cause of cyber security incidents and brief the WWT Security Engineering team of findings, including new threat actors and control deficiencies.
• Develop security threat intelligence relevant to WWT and use this information to hunt for active threats within the organizations information systems.
• Update the configuration of security tools and services, such as anti-malware whitelists and proxy block and allow lists to mitigate emerging threats and adapt to business needs.
• Brief Information Security leadership on active investigations and escalate incidents based on defined threat and priority criteria.
• Develop and operationalize hunt exercises and tabletop exercises for existing and new threats within WWT networks and endpoints.