Information Security Operations Manager

Who we are

DoubleVerify (NYSE: DV) is the leading independent provider of marketing measurement software, data, and analytics that authenticates the quality and effectiveness of digital media for the world's largest brands and media platforms. DV provides media transparency and accountability to deliver the highest level of impression quality for maximum advertising performance. Since 2008, DV has helped hundreds of Fortune 500 companies gain the most from their media spend by delivering best in class solutions across the digital ecosystem, helping to build a better industry. Learn more at www.doubleverify.com.

Job Overview: 

The Security Operations manager will be responsible for managing the security detection and response processes for DoubleVerify.  You will play a critical role in the security team and help ensure that the organization stays well protected and has the ability to detect and respond to a number of different threats . The candidate will also be responsible for the management of the security awareness program by helping drive best practices and delivery of proper content to the staff. 

In addition, the Security Operations manager will also help maintain the identity security policies and program outlined by the Information Security department.  He or she will provide support to business areas regarding security operations and will be a key player in ensuring that all security events are properly managed as well as documented. 

Responsibilities:

• Oversee and lead the security operations program with identification and response to cyber threat activities
• Lead all incident response activities including detection, response, and process management
• Liaise with different stakeholders to provide incident notification and description during events
• Drive tactical and operational direction for security operations and maintain responsibility for ensuring the maintenance, operations, and support of corresponding tools
• Manage several security operation tools including but not limited to; EDR, Anti-malware, threat intelligence platform, security training platforms, and detection systems
• Oversee the MSSP SOC and ensure they meet the businesses strategies and goals to ensure a best in class operations center
• Develop, maintain, and enforce the centralized strategy for enterprise monitoring (logging & alerting)
• Identify monitoring risks, hurdles, challenges and escalate to leadership in a timely manner
• Maintain alignment with security monitoring requirements as well as internal and external assessments
• Manage the security awareness training program and ensure that all employees are compliant to the business policies
• Help develop and champion the identity security program by creating new processes to align with business strategy
• Help drive security alignment and requirements under official policies, such as Information Security Standard
• Work with stakeholders clarifying business requirements, removing roadblocks, constantly communicating and gaining alignment around security operations
• Under limited supervision and general direction, evaluates and reports on the effectiveness of the security operations program strategies in IT and business environments

Requirements:

• Bachelor's or master’s degree in computer science, Information Systems, or related major discipline
• Passionate about the prevention, detection, and response of security related risks
• 10+ years of progressing information security experience
• Strong security operations exposure and background
• Experience reviewing log event data and detecting potential attack patterns
• Strong experience driving detection and response capabilities for a security operations center
• Strong experience leading response efforts to cyber-attacks and events
• Strong ability to document specific events as they pertain to security incidents
• Exposure to training staff in terms of developing security content and driving best practices knowledge
• Hands on experience managing EDR and anti-malware solutions
• Hands on experience managing a security operations team and/or security center
• Hands on experience integrating a variety of different log source systems to a modern SIEM
• Hands on experience managing and operationalizing threat intelligence
• Experience working with identity and access management systems
• Experience conducting user access reviews for standard and privileged users
• Exposure to identity governance and administration concepts
• Experience delivering projects end to end from a tactical and technical perspective
• Ability to effectively communicate verbally and in writing
• Effectively communicates technical issues to diverse audiences
• Ability to lead by example and effectively manage a team