Назад
Company hidden
6 дней назад

Cyber Defense Manager (Cybersecurity)

Формат работы
remote (только Europe)
Тип работы
fulltime
Грейд
head
Английский
b2
Страна
Europe
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Cyber Defense Manager (Cybersecurity): Leading SOC operations, detection engineering, incident response, and exposure remediation across a fintech environment with an accent on alert quality, vulnerability prioritization, and security operations metrics. Focus on designing SIEM, EDR, and cloud detections, coordinating incident command, reducing MTTD/MTTR, and building a high-performing Cyber Defense team.

Location: Europe; remote work is available.

Company

hirify.global operates in the fintech sector.

What you will do

  • Own Cyber Defense execution across SOC operations, detection engineering, incident response, and exposure remediation.
  • Lead alert triage quality, escalation standards, incident command, response coordination, and MTTD/MTTR improvement.
  • Prioritize critical vulnerabilities and exposures using asset criticality, exploitability, and business impact.
  • Manage dashboards, runbooks, remediation follow-up, operational metrics, and security performance reporting.
  • Coordinate with IT, Platform, IAM, Product, GRC, Legal, and business owners during incidents and remediation.
  • Build and develop the Cyber Defense team through hiring, onboarding, mentoring, retention, and continuous improvement.

Requirements

  • 10+ years of experience in Information Security and 3+ years in a security management or team lead role with direct people management experience.
  • Hands-on experience managing SOC operations, leading incident command, and improving MTTD/MTTR.
  • Ability to design, validate, and maintain detection logic across SIEM, EDR, and cloud platforms, including runbook development and false-positive reduction.
  • Knowledge of attack scenarios including ATO, credential theft, privilege escalation, and data exfiltration, with the ability to map detections to MITRE ATT&CK threat models.
  • Experience prioritizing vulnerabilities using CVSS and asset criticality to reduce exposure aging.
  • Hands-on experience with at least one enterprise SIEM: Splunk, Microsoft Sentinel, Chronicle, or Elastic, plus SOAR tooling.
  • Understanding of cloud-native security controls and monitoring in AWS, GCP, or Azure.
  • Understanding of IAM, PAM, SSO, and identity-related attack vectors relevant to detection and response.
  • Ability to define, track, and communicate security KPIs and operational dashboards to technical and executive audiences.
  • English at Upper-Intermediate level or higher; fluent Ukrainian or Russian.

Nice to have

  • Experience in fintech, e-commerce, or other high-risk industries with complex threat landscapes.
  • Previous hands-on experience as a SOC analyst, incident responder, or detection engineer before moving into management.
  • Experience building a SOC or Cyber Defense function from scratch or significantly maturing an existing one.
  • Familiarity with threat intelligence platforms and threat-informed defense methodologies.
  • Relevant certifications such as CISSP, CISM, GIAC GSOM, GCED, GCIH, or equivalent.

Culture & Benefits

  • 20 paid vacation days and 10 paid sick leave days per year.
  • Public holidays according to the company-approved holiday list.
  • Medical, professional education, language learning, and wellness budgets.
  • Remote work opportunity.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →