General Purpose: The Cybersecurity Operations Lead will provide technical leadership for the company’s incident response and vulnerability management processes. In addition, this role will also lead cybersecurity architecture reviews to develop and mature secure design patterns that will balance business requirements with information and cybersecurity requirements. This is an individual contributor role with the potential of growing into a management role in the next 2-3 years. You’ll provide the expertise on the direction of our security operations capability, and business leadership during major security incidents and issues.

Responsibilities:

• Lead the functional global security operations team consisting of internal and external resources
• Ensure the security operations process correctly collects and stores logs, detects intrusions, identifies potential areas of security improvement or vulnerabilities, and engages in threat hunting across our enterprise
• Ensure the incident response process is operational and rapidly detects, responds, and address potential security incidents
• Continuous improvement of the vulnerability management program. You will partner with various internal stakeholders to conduct holistic response management on identified vulnerabilities and the remediation efforts.
• Review and approve secure solution architectures, provide guidance, insight, and feedback on new security technologies
• Experience working with senior management to brief them on emerging security threats and security incidents.

Required Qualifications

• Experienced: 7+ years of IT Security experience with 3 years of technical security leadership and engineering experience. Ability to develop a strategic plan and discuss details at a technical level with functional managers, engineers, and analysts.
• Educated B.S. degree or equivalent work experience in Computer Science, Information systems or other relevant fields. Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or similar certification.
• Knowledgeable. Deep domain expertise in at least two of the following: intrusion detection and security monitoring, incident response, threat intelligence and analysis, and vulnerability management

Preferred Qualifications

• Technically Savvy.
• Incident Response- Expert knowledge. Leader experience. KPI development. Playbook development,
• Vulnerability Management- Expert technical and process owner experience.
• Security Architecture Assessment
• Experience developing and maintaining cybersecurity dashboards and relevant KPIs.

• Cloud Security- Azure, GCP or AWS.
• Experience leading and managing large, complex enterprise-level projects
• Strong Communicator. Ability to effectively interact with internal and external customers, managers, and staff.
• Detail oriented. Superior written and verbal communication and attention to detail.

Additional Requirements:

• Demonstrated skills in collaboration, teamwork, and problem-solving to achieve goals.
• Demonstrated skills in verbal communication and listening.
• Self-driven and proven track record of achieving goals.
• Comfortable with change.

As an inclusive company, Veolia is committed to diversity and gives equal consideration to all applications, without discrimination.