Sr Manager, Incident Response

Make a difference here.

UltraViolet Cyber is a leading platform-enabled unified security operations company providing a comprehensive suite of security operations solutions. Founded and operated by security practitioners with decades of experience, the UltraViolet Cyber security-as-code platform combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations by eliminating risks of separate red and blue teams.

By creating continuously optimized identification, detection, and resilience from today’s dynamic threat landscape, UltraViolet Cyber provides both managed and custom-tailored unified security operations solutions to the Fortune 500, Federal Government, and Commercial clients. UltraViolet Cyber is headquartered in McLean, Virginia, with global offices across the U.S. and in India.

-Lead the Corporate Security Program -Manage the SOC team -Develop, publish, maintain, and enforce comprehensive organization-wide information security risk assessment framework, plans, policies, procedures, guidelines and controls that are aligned with the organization’s business needs -Evangelize and provide SME knowledge on Information security matters -Establish metrics and regular reporting mechanisms for assessing and measuring security, privacy, compliance and risk across the organization including metrics for the Public Bug Bounty program -Manage planning, tracking and reporting including risk and issue tracking , developing schedules and managing interdependencies -Develop process documentation -Vendor Management (Including procurement related activities) and the 3 rd party vendor risk management program -Lead the incident response process and participate in vulnerability remediation efforts. Maintain the vulnerability management system and ensure compliance on SLAs for security bugs -Identify and resolve systemic issues impacting IT and aggressively take action to resolve - including reviews, awareness, education and process controls -Improve overall security awareness and instill a culture of secure software development throughout the IT organizations. -Manage the ongoing training program for employees -Manage various security governance, risk and compliance projects -Establish credibility as a trusted advisor to partners including customers, executives, peers, and employees -Maintain strong knowledge of ongoing security threats, remediation and operational standard methodologies -Support and Manage Action Plans including exceptions to closure; including working with Risk owners to develop sustainable action plans that address technology, process and organizational risk areas. -Manage relationships and relevant information sharing with members of the Information Security Team, broader IT Team as well as Lines of Business -Act as an internal consultant within IT and business groups for Information Security Risk Assessments -Help develop an effective Information Security Strategy by aligning Risk Management & Information Security Governance efforts with Information Security Technology Strategy and Information Security Threats -Perform security audits and assessments of internal systems and third parties and recommend actions to mitigate risks through a review of efficiency, effectiveness and compliance of operational and security policies, processes and practices. -Perform technical security assessment of solutions and recommend/review security designs and controls . Oversee and perform operational execution of the third party cyber risk management processes -Act as primary trusted security advisor on projects to ensure that information security risks are managed and risk assessment process is followed including when interacting with 3rd parties -Support periodic audit activities as they relate to the IT cyber security domain (e.g., GDPR, PCI, SOX -Provide hands-on security expertise during design, development, implementation and testing of various IT projects -Provide clear direction and mobilize others to take action on priorities -Manage, coach and develop outstanding Information Security talent

-US Citizenship is Required -10+ years experience in Computer Science field -Experience leading SOC or Incident Response teams -Experience collaborating and being a strategic member of a Zero Trust rollout -Experience owning detection engineering via Crowdstrike -Experience reviewing cloud configurations and AWS Security solutions -Experience performing continuous security validations and review of controls -Knowledge of NIST CSF risk register -Experience partnering with Threat Intelligence vendors and providing action around IOC hunts, blocks, detections, etc. -Experience with vulnerability management via Tenable; running scans, remediation cycle with analysts