Senior SOC and IR Manager

Stelle nicht auf LinkedIn

🕒 vor 1 Monat

🦌 Connecticut – Remote

🦌 Connecticut – Remote

⏰ Vollzeit

🟠 Senior

👔 Manager

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mails für Remote-Jobs erhalten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Crane Cryogenics

WebsiteLinkedInAlle Stellen

1001 - 5000 Mitarbeiter

Gegründet 1855

⚡ Energie

🔧 Hardware

🤝 B2B

Energy • Hardware • B2B

Crane Cryogenics ist eine Sparte von Crane ChemPharma & Energy, die kryogene Anlagen und vakuumisolierte Rohrleitungssysteme für industrielle Anwendungen entwickelt, herstellt und wartet. Ihr Produktportfolio umfasst vakuumisolierte Transferleitungen, kryogene Bajonettkupplungen, einstellbare Druckphasentrenner, Entlüftungsgeräte und komplette kryogene Rohrleitungslösungen, die in Wasserstoff-, LNG-, Biowissenschaften- und anderen anspruchsvollen Industriebereichen eingesetzt werden. Das Unternehmen konzentriert sich auf speziell entwickelte Hardware und B2B-Lieferungen an Energie-, Chemie- und Industriekunden und bietet Installation, technischen Support und maßgeschneiderte kryogene Lösungen an.

Beschreibung

• Lead and continuously improve the SOC and incident response program, including operating model, standard work, and outcomes. • Serve as incident commander for high-severity investigations, coordinating cross-functional response and driving clear decisions, timelines, and communications. • Lead and develop a distributed team of analysts/engineers; build a strong culture of learning, quality, and operational excellence. • Own detection and response capability across endpoint, network, cloud, SaaS, and identity telemetry; improve signal quality and reduce noise through tuning and engineering. • Define, maintain, and test playbooks/runbooks and escalation paths, drive readiness through exercises and continuous improvement. • Drive automation and orchestration (SOAR) to streamline triage and response, integrate systems, and reduce manual effort. • Guide thoughtful adoption of AI-assisted workflows to accelerate investigations and reporting, with appropriate validation, governance, and analyst enablement. • Manage SOC tooling, service partnerships, and performance; ensure clear expectations, measurable SLAs, and continuous value delivery. • Develop and maintain program metrics, KPIs, and executive-ready reporting; track effectiveness and drive improvements in speed, quality, and consistency. • Partner with Legal, Privacy, HR, GRC, Risk Management, and IT to align response processes, documentation, and communication practices. • Evaluate, plan, and implement security operations improvements and supporting solutions; keep practices aligned with evolving standards and best practices.

🎯 Anforderungen

• 7+ years relevant professional experience in security operations and incident response • 3+ years managing or leading others in a security operations/incident response context • Degree in a related field or equivalent practical experience preferred • Advanced professional security certifications (e.g., CISSP, CISM, GIAC or similar) preferred • Experience managing, leading, and developing remote/distributed teams with diverse backgrounds and skill levels • Demonstrated success designing and running SOC and incident response processes across traditional enterprise environments and modern cloud/SaaS services. • Strong, current knowledge of security operations tradecraft: alert triage, investigation, containment/recovery coordination, post-incident reviews, and continuous improvement • Expertise with security telemetry and analytics: SIEM engineering, log normalization, detection content development, alert tuning, and correlation across endpoint/network/cloud/identity sources • Working knowledge of security automation/orchestration (SOAR) and integration patterns (APIs, webhooks, scripting) to reduce toil and improve response consistency • Strong fundamentals in Windows and Linux administration, networking, and modern enterprise services • Solid understanding of identity and access controls (SSO, MFA, conditional access concepts) and the role of identity telemetry in detection and response • Ability to lead high-severity investigations with calm, clarity, and strong judgment; comfortable serving as incident commander and coordinating across teams • Excellent written and verbal communication skills, including executive-ready status updates, post-incident reporting, and roadmap/strategy presentations • Familiarity with relevant privacy, regulatory, and eDiscovery considerations for incident response • Strong project leadership skills with a track record of delivering measurable improvements • Flexibility to support incident response needs outside of standard business hours, as required • Ability to travel both domestically and internationally (est. no more than 10%)

🏖️ Vorteile

• Comprehensive health • Wellness incentives • Assistance with retirement savings • Paid time off • Paid holidays • Tuition reimbursement • Performance-based bonus programs