Bachelor's degree in Cyber Security or related field, or equivalent work experience
4-years of experience in Security Operation Centers or a similar role with at least 2-years managing all aspects of a Security Operation Center
Formal IT Security/Network Certification such as CompTIA Security+, Network+, ISC2 CC, ISSAP, CCSP, SANS GIAC Certified Intrusion Analyst (GCIA) or SANS GIAC Network Forensic Analyst (GNFA) or SANS GIAC Continuous Monitoring (GMON) or related Degree
Candidate must have familiarity with Cyber Kill Chain, MITRE Telecommunication&CK, and NIST Cybersecurity Frameworks
Knowledge of common indicators of compromise and of methods for detecting these incidents
Knowledge of IT core infrastructure and cybersecurity components/devices Have demonstrated expertise in developing, implementing, tuning, and automating operations center programs
Experience with scripting preferably with Python/PowerShell Experience operating and tuning EDR/XDR platforms
Experience monitoring threats via a SIEM console with significant experience performing analysis of log files from a variety of sources, including individual host logs, network traffic logs, firewall logs, or intrusion prevention logs
Knowledge of diverse operating systems, networking protocols, and systems administration, and system forensic investigation techniques
Be adept at managing crises; provide front-line coordination in responses to a myriad of crises