Contractor, Security Operations (SIEM/SOAR)

Purpose of the Job

As members of 6sense’s Security department, the Security Operations and Threat Management team protects 6sense through prevention, detection, investigation and response to business impacting security events, incidents and threats.

Responsibilities & Accountabilities

• Execute on milestones for end-to-end SecOps & Threat initiatives in accordance with the Security roadmap 
• Design, implement, and maintain the Exabeam SIEM solution to collect, analyze, and correlate security events from various sources
• Develop and tune security rules to detect potential security incidents, leveraging Exabeam's advanced analytics features
• Investigate security alerts and incidents using Exabeam SIEM, including utilizing advanced analytics for threat hunting and forensic analysis
• Respond to security incidents according to established procedures
• Participate in security incident response (SIEM) exercises and improve processes, incorporating advanced analytics for better detection and investigation
• Maintain knowledge of the latest security threats and vulnerabilities
• Provide technical guidance and support to other Secops professionals
• Create and maintain parsers to ingest log data from various sources into Exabeam SIEM
• Create and implement Exabeam SOAR playbooks to automate incident response tasks and workflows
• Build SIEM tools and advanced automation that enable the 6Sense Security Team to operate at speed and scale
• Create SOC playbook and KB article on Exabeam for future reference.
• Mentor engineers across Information Security to drive security controls and risk remediation
• Communicate risks and mitigations across multiple audiences with varying levels of sensitivity
• Flexible working hours that overlap with US Pacific time zone Monday - Thursday

Performance Measurement

• Maintains working knowledge of 6sense’s product, environment, systems and architecture 
• Actively prepares for weekly 1:1s with Manager and monthly skip levels
• Mitigates security exposures
• Drives incidents to closure within established SLAs
• Participates in creation of milestones associated with major security projects
• Executes on milestones associated with major security projects
• Develops and maintains up to date handbook pages, runbooks, workflows and dashboards
• Provides project status update on weekly basis

Educational and Experience Requirements

• 8+ years of experience being part of a Security Operations or similar team
• Extensive experience working with Exabeam SIEM
• Strong understanding of SIEM concepts and technologies.
• Experience with log management and analysis
• Experience with security information and event management (SIEM) rule development and tuning.
• Excellent analytical and problem-solving skills
• Strong communication and collaboration skills
• Deep knowledge of Exabeam SIEM's advanced analytics features, such as user and entity behavior analytics (UEBA), machine learning, and threat intelligence integration
• Experience with security orchestration, automation, and response (SOAR)

Preferred Qualifications

• Bachelor's degree in a related field
• Relevant industry certifications, such as CISSP, CISM
• Experience with industry frameworks, regulations and standards, such as: MITRE ATT&CK, STRIDE, PASTA, ISO 27001, SOC 2, GDPR, PCI, SOX, NIST, etc.

Competencies and Behaviors

• Works independently to maintain and improve overall company security posture
• Collaborates with cross-functional teams
• Translates technical requirement into actionable and timebound requests
• Drives projects and tasks to completion by following up on questions, deadlines, and requests for input
• Maintains accuracy of information 
• Proactive prioritization and escalation to management 
• Strong communication skills, including verbal, written, and presentation skills