APN Consulting
Cyber Défense, Monitoring, Incident Management
APN Consulting, New York, New York, us, 10261
APN Consulting has an immediate need for a direct client requirement:
Role: Cyber Defense, Monitoring, Incident Management
Location: NYC (Hybrid)
Duration: FTE/Direct Hire
Major Duties & Responsibilities: In this role you will report to the Head of Cyber Defense, in the organization of the CISO. You will play a pivotal role in safeguarding the company's digital assets and ensuring business continuity. You will be a leading member of the Cyber Defense team for Customer. You will be responsible for managing the broader Monitoring & Incident Management activities and their various responsibilities. You will work closely with other members of the MAS Information Security Office to actively prioritize day to day operational activities, identify and respond to security risks and incidents, recommend and implement solutions, work with affected departments to address the risk, and ensure that the remedy remains in effect. You must combine hands-on experience with an understanding of theory and practice. You will also be involved with monitoring and oversight of security consultants and other supporting third parties. Your responsibilities include operational aspects of monitoring and remediating security events including working with vendors and other IT departments to address the event and escalating to senior members of the team as necessary.
Operational Responsibilities Coordinate work across the Monitoring & Incident Management team, ensuring 24/7 incident response readiness. Prioritize work amongst full time staff and third party resources Oversee tools, technologies, and processes related to security operations, including Vulnerability Management, Data Loss Prevention, EDR/NDR/XDR Ensure effective reporting of security activities, reporting status, risks, issues, and escalations to senior leadership (CISO, CIO, and other senior stakeholders). Perform day to day administration and support of security infrastructure tools and systems, including but not limited to SIEM, IDS/IPS, Anti-Virus, Anti-Malware, DLP, and other Network or System Monitoring tools Manage relationship with SOC, MSSP, TPRM, and other security vendors Provide expertise on Security Incidents Recommend and implement enhancements to existing processes, focusing on automation and integration between other security tools. Review security logs of critical systems to identify risks, security threats, or configuration errors Review daily, weekly, and monthly security reports for any anomalies or issues Provide first level support on security issues and guidelines from end-users, developers, desktop-support specialists and system administrators Troubleshoot security issues and assist with security incident responses and forensic investigations Maintain documentation on security architecture, procedures, configurations Create and update Incident Response documentation, IR Playbooks, KRI\KPIs, and other related items for Senior Management Serve as incident commander during incident response activities Project based work Provide feedback to MAS teams to implement well engineered solutions to improve security posture Work with colleagues and vendors to assess different technologies and determine their impact within the Client environment Provide security requirements for the design, development, engineering, and implementation of hardware, networks, and applications Conduct lessons learned exercises and RCAs after security incidents, detection of major system vulnerabilities, and ongoing compliance violations nalyze threat intelligence, vulnerability and security assessments; produce vulnerability reports and work with IT teams to correct or mitigate found deficiencies
Qualifications & Requirements:
t least 10+ years security domain related experience, preferably within a financial services firm 5+ years of experience in a similar position. Proven experience in leading security operations within a large enterprise. Strong understanding of cybersecurity risk management and information security standards. Excellent communication and leadership skills, with the ability to manage and prioritize multiple projects and initiatives. Educational background with BS / MS in Information Technology, Computer Science, Engineering or related area. Strong written and verbal communication skills. Ability to clearly articulate ideas, solutions etc. Strong knowledge of internet, web, application and network security platforms. Strong knowledge of Linux & Windows operating system and security functions bility to perform and interpret vulnerability assessments
Additional Qualifications:
Possess security certifications (CISSP, CISM, CISA, GSEC, etc.) Experience with project management and industry best practices Experience working within the Financial Services industry Experience in support projects and able to handle issues against defined SLA / KPI Clear communication & presentation skills, and the ability to articulate complex issues concisely Leadership, relationship-building and influencing skills to drive agendas across a number of teams Proven track record of effectively interacting with senior management bility to work strategically and collaboratively across departments Excellent organizational skills with the ability to multi-task, prioritize competing demands, be versatile and action-oriented
Major Duties & Responsibilities: In this role you will report to the Head of Cyber Defense, in the organization of the CISO. You will play a pivotal role in safeguarding the company's digital assets and ensuring business continuity. You will be a leading member of the Cyber Defense team for Customer. You will be responsible for managing the broader Monitoring & Incident Management activities and their various responsibilities. You will work closely with other members of the MAS Information Security Office to actively prioritize day to day operational activities, identify and respond to security risks and incidents, recommend and implement solutions, work with affected departments to address the risk, and ensure that the remedy remains in effect. You must combine hands-on experience with an understanding of theory and practice. You will also be involved with monitoring and oversight of security consultants and other supporting third parties. Your responsibilities include operational aspects of monitoring and remediating security events including working with vendors and other IT departments to address the event and escalating to senior members of the team as necessary.
Operational Responsibilities Coordinate work across the Monitoring & Incident Management team, ensuring 24/7 incident response readiness. Prioritize work amongst full time staff and third party resources Oversee tools, technologies, and processes related to security operations, including Vulnerability Management, Data Loss Prevention, EDR/NDR/XDR Ensure effective reporting of security activities, reporting status, risks, issues, and escalations to senior leadership (CISO, CIO, and other senior stakeholders). Perform day to day administration and support of security infrastructure tools and systems, including but not limited to SIEM, IDS/IPS, Anti-Virus, Anti-Malware, DLP, and other Network or System Monitoring tools Manage relationship with SOC, MSSP, TPRM, and other security vendors Provide expertise on Security Incidents Recommend and implement enhancements to existing processes, focusing on automation and integration between other security tools. Review security logs of critical systems to identify risks, security threats, or configuration errors Review daily, weekly, and monthly security reports for any anomalies or issues Provide first level support on security issues and guidelines from end-users, developers, desktop-support specialists and system administrators Troubleshoot security issues and assist with security incident responses and forensic investigations Maintain documentation on security architecture, procedures, configurations Create and update Incident Response documentation, IR Playbooks, KRI\KPIs, and other related items for Senior Management Serve as incident commander during incident response activities Project based work Provide feedback to MAS teams to implement well engineered solutions to improve security posture Work with colleagues and vendors to assess different technologies and determine their impact within the Client environment Provide security requirements for the design, development, engineering, and implementation of hardware, networks, and applications Conduct lessons learned exercises and RCAs after security incidents, detection of major system vulnerabilities, and ongoing compliance violations nalyze threat intelligence, vulnerability and security assessments; produce vulnerability reports and work with IT teams to correct or mitigate found deficiencies
Qualifications & Requirements:
t least 10+ years security domain related experience, preferably within a financial services firm 5+ years of experience in a similar position. Proven experience in leading security operations within a large enterprise. Strong understanding of cybersecurity risk management and information security standards. Excellent communication and leadership skills, with the ability to manage and prioritize multiple projects and initiatives. Educational background with BS / MS in Information Technology, Computer Science, Engineering or related area. Strong written and verbal communication skills. Ability to clearly articulate ideas, solutions etc. Strong knowledge of internet, web, application and network security platforms. Strong knowledge of Linux & Windows operating system and security functions bility to perform and interpret vulnerability assessments
Additional Qualifications:
Possess security certifications (CISSP, CISM, CISA, GSEC, etc.) Experience with project management and industry best practices Experience working within the Financial Services industry Experience in support projects and able to handle issues against defined SLA / KPI Clear communication & presentation skills, and the ability to articulate complex issues concisely Leadership, relationship-building and influencing skills to drive agendas across a number of teams Proven track record of effectively interacting with senior management bility to work strategically and collaboratively across departments Excellent organizational skills with the ability to multi-task, prioritize competing demands, be versatile and action-oriented