Security Operations Center Lead

Description

Required Qualifications:

• This position requires nine years of directly related full-time experience or, as an alternative, a Bachelor's degree from an accredited institution in Cybersecurity, Computer Science, Informatics, Information Systems, or related field and five years of full-time experience directly related to the job functions.
• Experience with SOC operations, security monitoring, incident response, or related cybersecurity functions, including conducting cybersecurity investigations, alert triage, or security event analysis.
• Experience with enterprise SIEM, EDR, or similar platforms.
• Experience utilizing Microsoft security tools, including Microsoft Entra ID, Microsoft Sentinel, Active Directory, Microsoft Defender, Microsoft 365 security features or comparable enterprise security tools.
• Any appropriate combination of relevant education, experience, and/or certifications may be considered.

Preferred Qualifications:

• Five years full time experience in cybersecurity operations, incident response, or threat detection.
• Two years experience in managing, coaching, or mentoring technical staff or junior analysts
• Familiarity with NIST CSF, NIST 800-53, FERPA, and HIPPA.
• Experience working in Higher Education.
• Familiarity with Higher Education technologies, including Banner, Workday, Canvas, Blackboard, and research computing infrastructure.
• Experience designing security training or formal curricula.
• Experience with Microsoft Sentinel, Microsoft Defender XDR, Microsoft Entra ID, Microsoft Purview, or related Microsoft security technologies.Experience with SOAR platforms.
• CISSP, CISM, Security+, GCIH, GCIA, CISA, or similar certifications.

Knowledge, Skills & Abilities:

• Proven ability to think strategically and approach challenges with creativity.
• Demonstrated track record of reliability, meeting goals, and holding oneself accountable.
• Strong interpersonal skills and experience working effectively across teams.
• Knowledge of security strategies (operating system hardening, vulnerability management, change management, application testing/patching, security tools, and software products).
• Knowledge of network/system security access, management, and testing.
• Knowledge of applicable security policies, best practices, and principles.
• Knowledge of standard computer logging processes and understanding of the types of events logged.
• Skill in identifying complex problems and reviewing related information to develop and evaluate options and implement solutions.
• Excellent interpersonal skills.
• Advanced verbal and written communication skills and the ability to present effectively to small and large groups.
• Ability to take initiative to plan, organize, coordinate and perform work in various situations when numerous and competing demands are involved.
• Ability to collaborate and work effectively within the community and willing to contribute to a team effort.
• Ability to work independently and follow through on assignments.
• Ability to translate security concepts to all areas of the business.
• Ability to interpret log data and investigate potential issues.
• Ability to prepare network/system diagrams and advise on secure implementations of systems and services.
• Ability to discern between security breaches and more innocent technical bugs.
• Ability to participate in after-hour incident response or emergency escalation activities as needed.

Institutional Values & Behavioral Expectation

In this role, the successful candidate will be expected to:

• Seek out new approaches to improve outcomes; remain open for feedback and new ideas.
• Lead with integrity; consistently produce high-quality work; persevere to overcome obstacles to meet deadlines and achieve deliverables.
• Share information and insights thoughtfully; build partnerships across departments; communicate respectfully; support colleagues to achieve common goals.

Pay Grade 19