SecOps Manager

JOB SUMMARY: Responsible for the operation, performance and availability of all systems within PFFCU infrastructure. The primary focus will be on Information Security and some Networking Security technologies throughout the organization. The position is responsible for the operation, performance, and availability of the Credit Union’s core security systems.  He\She is also responsible for handling of security systems and projects of all levels of complexity.  This is a Leadership position – in addition to the aforementioned operational responsibilities, this position will provide mentorship, guidance, performance monitoring, and escalated support to all IT\IS teams. 

This position will take ownership through hands on work and for managing and supporting PFFCU enterprise systems, including design, implementation and support. Must possess hands on ability to execute creative solutions to complex problems.  Must be able to balance the ability to work independently and be the leader of a high performance team.  Professionally interact with user groups while keeping Senior Information Technology management fully appraised of the status of his/her projects.

The Manger of SecOps will report to the SVP IT and will work closely with all IT\IS Systems department staff to assess and reduce information security and network risks and to ensure compliance with established financial institution regulations.  This role is responsible for all aspects of daily Alert Monitoring and Reporting, Security Information and Event Management (SIEM), Web content filtering, Nessus, Annual Risk Assessment Assistance, Quarterly Logical Access Reviews, Audit Response Assistance, CSW, ISE, AMP, Trellix, MS Defender, Fireye NX and CMS, RSA, Okta, StealthWatch, Security Policy maintenance and mentoring of team members. 

 RESPONSIBILITIES/TASKS:

• Hardware Architect and Hands-on engineering and management of all PFFCU Security and Networking systems
• Performance and Tuning of Security infrastructure
• Security implementation throughout the InfoSec infrastructure
• Review and Maintenance of daily jobs
• Security and Hardening recommendations\reviews\audits of all PFFCU infrastructure
• Maintain, configure and update the InfoSec infrastructure systems to ensure security, reliability and performance
• Analyzing and monitor system capacity and performance for upgrades and expansion
• Assist in managing the budgeting and business plans for his\her area
• Problem resolution at all levels for the InfoSec infrastructure while documenting root cause and performing corrective action
• Document and Diagram current and future expansion of systems and security through thoughtful analysis and review
• Mentoring staff and building a cohesive team
• Work in conjunction with third party vendors to expedite resolution
• Develop a working knowledge of the business side of PFFCU and be able to interface effectively with all user areas.
• Perform systems analysis of all software\hardware modification including vendor software releases\patches and user requests for change in a timely and proactive manner  
• Revising and updating IT departmental procedures as it applies to InfoSec infrastructure, scheduling, tuning and maintenance
• Documenting internal support processes and procedures
• Designing and implementing processes to ensure high availability of all systems and take immediate control of production problems and drive them to resolution
• Working with the SVP IT to determine departmental priorities
• When appropriate engaging outside contractors with proper technical expertise
• Ensuring timely completion of projects and deployments
• Other duties as assigned by the SVP IT

 QUALIFICATIONS:  

• 15+ years hands on InfoSec with some networking infrastructure experience (design and implementation)
• Project management skills are a must
• 7+ years in Management and Leadership
• Demonstrated advance networking experience with TCP/IP, UDP 
• Demonstrated advance experience with Web\Content Filtering, IPS, IDS, XDR platforms, Nexus, Vulnerability Management and advance security technologies
• Experience working with vendors on multiple levels (ordering, provisioning and engineering)
• Bachelor’s degree in technical field; or related experience and/or training; or equivalent combination of education and experience is required 
• Must possess effective written and verbal communication skills
• Must possess knowledge of monitoring technologies\methods relating to InfoSec\Networking systems 
• Must possess a high level of comfort with debugging complex issues
• Must possess excellent customer service skills and be able to work independently and with a team in a highly customer-focused environment
• Strong understanding of all aspects of InfoSec Systems as well as strong technical aptitude and problem-solving skills are needed to perform this job successfully
• Ability to meet deadlines and concurrently manage multiple projects.

 SKILLS/KNOWLEDGE/ABILITIES REQUIRED:

• In depth working knowledge of a variety of network perimeter security technologies including:

• Web Filter (ForcePoint)
• Intrusion Detection/ Protection Systems
• DLP - Network Based Data Loss Prevention
• Vulnerability Scanners (Nessus)
• Zero Day technologies (FireEye/Trellix)
• Email security technologies
• Cisco Secure Workload (CSW)
• Cisco Identity Services Engine (ISE)
• Security Information and Event Management (SIEM)

1. XDR solutions (Cisco AMP, Trellix, MS Defender)
2. FireEye (NX and CMS)
3. MFA (Okta and RSA)
4. StealthWatch

• Working knowledge of Security Risk Assessment Methodology, Vulnerability Analysis and strong knowledge of SIEM technology
• Monitor and maintain network security appliances to ensure the integrity of all systems from both internal and external entities.           
• Accurately document current and future InfoSec systems configuration and changes following PFFCU’s change control guidelines.
• Tier 3 problem escalation contact including rotating afterhours support
• Develop a working knowledge of the business side of PFFCU and be able to effectively interface with staff using the technology.    
• Strong project skills required, specifically the ability to maintain focus and complete projects with multi-month timeframes
• Worked with third party service provider 
• Ability to handle multiple projects at the same time
• Ability to think logically and visualize abstract concepts
• Ability to prioritize multiple tasks
• Ability to work varying hours, sometimes includes evening and weekend work

#PFFCUBO