VP Technical Cyber Intelligence (PSS05879)

About the client - PSS has been mandated to hire a Vice President - Technical Cyber Intelligence for a premier consumer financial services company delivering one of the industry's most complete digitally-enabled product suites. Their experience, expertise, and scale encompass a broad spectrum of industries including digital, health and wellness, retail, telecommunications, home, auto, outdoors, pet, and more.

Job Purpose -

Technical Cyber Intelligence with robust and varied threat detection and threat

intelligence experience. As a key member of the SecDevOps-Detection team, the individual will

provide senior advisement on the design, implementation, and optimization of detection mechanisms

and in advising and participating in the development of the overall threat detection strategy. The

individual’s expertise in threat detection and prevention should be borne of a deep understanding of

the threat landscape and adversary behavior, allowing them to identify and protect against the most

concerning of cyber threats. Join us if you are passionate about staying ahead of the cybersecurity

curve, are an inquisitive critical thinker, and thrive in a dynamic, collaborative environment.

Key Responsibilities -

• Develop, implement, and verify baseline and advanced detection strategies for a wide

variety of enterprise technologies including but not limited to SIEM, UEBA, EDR, WAF, IDS and

IPS.

• Experience and comfort with detection strategies and implementations in multiple OS

(Windows, MacOS, Linux) and with cloud-based architectures (Amazon Web Services and

Microsoft Azure).

• Familiarity with the development and implementation of use cases underlying complex

capabilities such as UEBA and other behavioral risk-based detection tools.

• Leadership experience with a demonstrated ability to leverage technical domain knowledge

to teach, mentor, and develop more junior team members and provide day-to-day

managerial support fostering high morale.

• Collaborate and lead cross-functional initiatives. Communicate complex and nuanced

topics in an accessible manner throughout the company and its departments.

• Regularly arbitrate technical discussions and make challenging calls.

• Demonstrated proficiency in recognizing emerging cyber intelligence, rigorously testing

identified Tactics, Techniques, and Procedures (TTPs) in a security-lab environment and

crafting custom detection content against identified gaps.

• Vision to aid in prioritization and curation of a detection content backlog using Agile

principles. The backlog should ensure the highest-priority material receives resourcing and is

executed upon.

• Assist in the ideation, creation, and implementation of security automation use cases via the use of

a security orchestration automation and response (SOAR) platform

• Administer test bed(s), and test and validate functionality of security tools as well as

rules/signatures, alerting logic, and automation.

• Identify potential conflicts with the implementation of any cyber defense tools (e.g., tool and

signature testing and optimization) and conducting tuning to reduce unnecessarily

voluminous alerts and false positives.

Educational Qualification and Experience -

• Bachelor’s degree with a minimum of 10 years of experience including 5 years of Information

Security or Intelligence experience or in lieu of a Bachelor’s degree, 12 years of experience

including 7-8 years of Information Security or Intelligence experience

• Past Experience as a manager of people

• Demonstrated competence with Splunk programming language (SPL) and with the creation of

custom detection signatures used in modern NGAV/EDR and IDS/IPS systems

• Past experience in threat intelligence, threat hunt, or red team capacity in which the use of

threat intelligence and attack-focused frameworks were utilized

• Able to communicate complex information, concepts, or ideas in a confident and well-

organized manner through verbal, written, and/or visual means.

• Able to function effectively in a dynamic, fast-paced environment