JD 

Cybersecurity Technical Lead - Job Description

The Cybersecurity Technical Lead will oversee the daily operations of our Cybersecurity team, ensuring the effective monitoring, detection, investigation, and response to cybersecurity threats and incidents. The ideal candidate will possess strong technical expertise in CrowdStrike, Proofpoint, Web Application Firewall (WAF) technologies, Microsoft Sentinel, Medical Device Security, and Cyber Incident Response.

Key Responsibilities:

· Lead and manage a team of Cybersecurity analysts in monitoring, analyzing, and responding to cybersecurity threats and incidents.

· Develop and implement SOC policies, procedures, and workflows to ensure timely and effective incident response and resolution.

· Utilize CrowdStrike Falcon, Proofpoint, and other cybersecurity tools to proactively identify and mitigate security risks and vulnerabilities.

· Configure and manage WAF policies to protect web applications and medical devices from potential security threats and attacks.

· Monitor and analyze security events and alerts generated by various security technologies, including SIEM platforms such as Microsoft Sentinel.

· Coordinate with internal stakeholders and external partners to escalate and resolve complex cybersecurity incidents.

· Provide leadership and guidance to the team during cyber incident response activities, including forensic analysis, containment, and remediation efforts.

· Stay current on emerging cybersecurity threats, trends, and best practices related to medical device security and cyber incident response.

Qualifications:

· Bachelor’s degree in computer science, Information Security, or a related field. Master's degree preferred.

· 10+ years of experience in cybersecurity, with at least 4 years in a leadership or management role within a 24/7 SOC environment.

· Strong technical expertise in CrowdStrike Falcon, Proofpoint, WAF technologies, Microsoft Sentinel, Medical Device Security, and Cyber Incident Response.

· Proven ability to lead and coordinate response efforts during cybersecurity incidents.

· Familiarity with industry frameworks and standards such as NIST Cybersecurity Framework, MITRE ATT&CK Framework, and ISO 27001.

· Excellent communication, leadership, and problem-solving skills.

· Flexibility to work in the US shift timings (Eastern Time)

· Relevant certifications such as CISSP, CISM, CEH, or GIAC are highly desirable.