SOC and Incident Response, Executive Director
Kforce
Kforce has a client that is seeking a SOC and Incident Response, Executive Director in Atlanta, GA.
Summary:
The Executive Director of Security Operations Center (SOC) and Incident Response will be responsible for leading and managing a team of security professionals to ensure the protection of the organization's critical information assets. This role will oversee the day-to-day operations of the SOC, incident response processes, policies, tools, threat intelligence and the development and implementation of security best practices. These capabilities of this aspect of the security program are 24/7/365.
Key Responsibilities:
* Develop and execute a strategic vision for the SOC, balancing internal and external resources and AI-enhanced capabilities
* Define performance metrics (e.g., MTTD, MTTR) to measure and continuously improve SOC effectiveness
* Align SOC operations with organizational risk tolerance and compliance requirements
* Manage relationships with EDR/MSSP vendors to ensure services align with SLAs and organizational security goals
* Ensure timely incident escalation and response
* Vendor Detection Effectiveness
* Evaluate cost efficiency of vendor services
* Coordinate with vendors to integrate their processes into in-house workflows, ensuring seamless communication and incident handoffs
* Identify, deploy, and manage AI/ML-enabled tools to enhance threat detection, triaging, and response capabilities
* Implement AI-driven solutions for: Predictive threat modeling; Automated alert triaging and prioritization; Behavior-based anomaly detection
* Regularly evaluate and refine AI models to maintain effectiveness and reduce biases
* Use AI-enhanced tools like SOAR (e.g., Cortex XSOAR, Swimlane) to streamline repetitive tasks and improve incident response times
* Oversee real-time monitoring of security events, using tools such as AI-powered SIEM (e.g., Splunk, Sentinel) and EDR platforms
Confirm your E-mail: Send Email
All Jobs from Kforce