SOC Manager - Incident Response
This role joins SpearTip, the cybersecurity consulting segment within Zurich Resilience Solutions. Blending cutting-edge technologies, unique skill sets and proven cyber counterintelligence strategies, SpearTip partners with our clients to protect shareholder value, shield corporate reputations and enhance long-term profits. We are driven to protect our clients from the ever-changing threat actors and become the gold standard in detecting zero-day vulnerabilities. This virtual role manages a current team of 4.
As a SOC Manager, Incident Response you will drive the identification, evaluation and response of complex cyber security risks and gaps. Drives the implementation of complex solutions to mitigate security exposure, information security policies, standards, and programs consistent with local, regional, and global strategy. Analyze and understand the security posture and formulate solutions. Manage a team of cyber security professionals working to assist organizations experiencing cyber incidents in their IT environments.
Duties/Responsibilities:
- Engage directly with senior management, and major stakeholders to build and maintain relationships and identify strategic direction and prioritize Information Security initiatives that align with business and group strategy to reduce the level of IT risk.
- Leads and manage a team of Information Security specialists / analysts
- Accountable for the delivery of assigned Digital Forensic/Incident Response (DFIR) projects in own area of expertise for specific lines of business, collaborating with Insurance Carriers, Breach Counsel, Security Operations Center (SOC), and Advisory Services colleagues from across the wider function to agree an approach for project/program management.
- Provide technical guidance and recommendations as a subject matter expert in relevant area of DFIR, in order to support the resolution of the most complex customer cases and develop precedents to improve customer service.
- Provide consultancy on IT security, risk and compliance technologies to ensure business and regulatory requirements are met during DFIR engagements.
- Develops and maintains the policies and standards, and works with stakeholders to develop and maintain Information Security components of other group standards. ·
- Analyzes local or regional Information Security Compliance requirements to identify and map control objectives, and tracks progress to completion.
- Develops and maintains the Information Security Risk Strategy and Security Roadmaps, supports definition and discussion of security projects and programs to address gaps identified during an incident response engagment.
- Provides global support and coordination for security response processes including vulnerability management, incident response and forensics.
- Leads analysis and identification of broader systemic issues based on results of security metrics and audit information and implements improved processes.
Basic Qualifications:
- Bachelors degree and 5 or more years experience in the Information Security/Digital Forensics Incident Response (DFIR) area
OR - Zurich Cybersecurity Technician Apprentice, including Cyber Security Certification and 6 or more years experience in the Information Security/Digital Forensics Incident Response (DFIR) area
OR - High School Diploma or Equivalent and 7 or more years experience in the Information Security/Digital Forensics Incident Response (DFIR) area
AND - MS Office experience
- Knowledge of Cyber Security Operations
Preferred Qualifications:
- People management experience
- Knowledge of cyber information security functions (Digital Forensics, Incident Response, Application Security, Threat Defense, Vulnerability Management, Threat Intelligence)
- Strong analytical and customer service skills
- Strong verbal and written communication skills
- Industry certifications such as, but not limited to: Network+, Server+, Security+, CyberSecurity Analyst+, Penetration Tester+, CEH, GCFA, GCFE, CCE, CFCE, EnCE, ACE, CHFI, MCFE, CISSP
- Project management experience
- Incident response, application security, vulnerability management, or threat intelligence experience
Compensation for roles at Zurich varies depending on a wide array of factors including but not limited to the specific office location, role, skill set, and level of experience. As required by local law, Zurich provides in good faith a reasonable range of compensation for roles. For additional information about our Total Rewards, Click here. Other rewards may include short term incentive bonuses and merit increases. Candidates with salary expectations outside of the range are encouraged to apply, and will be considered based on experience, skill, and education. The salary provided is a nationwide market range and has not been adjusted for the applicable geographic differential associated with the location where the position may be filled. The starting salary range for this position is $110,700.00 - $181,400.00.
As an insurance company, Zurich is subject to 18 U.S. Code § 1033.
As a condition of employment at Zurich, employees must adhere to any COVID-related health and safety protocols in place at that time (https://www.zurichna.com/careers/faq).
A future with Zurich. What can go right when you apply at Zurich?
Now is the time to move forward and make a difference. At Zurich, we want you to share your unique perspectives, experiences and ideas so we can grow and drive sustainable change together. As part of a leading global organization, Zurich North America has over 150 years of experience managing risk and supporting resilience. Today, Zurich North America is a leading provider of commercial property-casualty insurance solutions and a wide range of risk management products and services for businesses and individuals. We serve more than 25 industries, from agriculture to technology, and we insure 90% of the Fortune 500®. Our growth strategy is not limited to our business. As an employer, we strive to provide ongoing career development opportunities, and we foster an environment where voices are diverse, behaviors are inclusive, actions drive equity, and our people feel a sense of belonging. Be a part of the next evolution of the insurance industry. Join us in building a brighter future for our colleagues, our customers and the communities we serve. Zurich maintains a comprehensive employee benefits package for employees as well as eligible dependents and competitive compensation. Please click here to learn more.
As a global company, Zurich recognizes the diversity of our workforce as an asset. We recruit talented people from a variety of backgrounds with unique perspectives that are truly welcome here. Taken together, diversity and inclusion bring us closer to our common goal: exceeding our customers’ expectations. Zurich does not discriminate on the basis of age, race, ethnicity, color, religion, sex, sexual orientation, gender expression, national origin, disability, protected veteran status or any other legally protected status. EOE disability/vet
Zurich does not accept unsolicited resumes from search firms or employment agencies. Any unsolicited resume will become the property of Zurich American Insurance. If you are a preferred vendor, please use our Recruiting Agency Portal for resume submission.
Location(s): AM - St. Louis, AM - Remote Work (US)
Remote Working: Yes
Schedule: Full Time
Employment Sponsorship Offered: No
Linkedin Recruiter Tag: #LI-AW1 #LI-ASSOCIATE
Nearest Major Market: St Louis