Information Security Manager --- DFIR

Company: Synopsys
Location: Mountain View
Posted on: January 12, 2021

Job Description:

Job Description and RequirementsThe Synopsys Information Security team is expanding and seeking a Manager of Digital Forensics and Incident Response (DFIR) to enable and transform its security operations capabilities and resources.The DFIR Manager is an integral part of the Security Operations group. Working closely with the Director of Security Operations and stakeholders across the organization, this position will be responsible for building and enhancing the threat intelligence, threat hunting, detection, and incident response capabilities at Synopsys. This individual will be responsible for monitoring the latest threats and attack patterns, as well as leading security analysts (SOC) and partnering with business teams to create relevant security content for Synopsys. The role will involve a mixture of hands-on technical execution as well as people and process management.ExperienceManages a staff of 3-5 Security professionalsDemonstrates experience building security content for a variety of detection technologies such as Network and Host Intrusion Detection Systems (IDS), Endpoint Detection and Response (EDR) tools and SIEM solutionsPossesses detailed knowledge of a variety of attack patterns, threats, malicious actors, exploits and common vulnerabilities Has deep understanding of MITRE ATT&CK Frameworks, Cyber Kill Chain and the Diamond Model Has previous experience working as an incident responder or in a security operations analyst role Demonstrates knowledge of current and emerging threatsHas proven experience conducting threat hunting activitiesBalances the need for high fidelity detections while reducing false positivesKey Responsibilities Leads content building and tuning lifecycle using a variety of SIEM, endpoint, network, cloud security tools Researches and keeps current on latest emerging threats, attack patterns and adversaries Manages and mentors security analysts / SOC to refine detections and reduce false positives Learns about Synopsys business initiatives, products and attack surface to drive relevant security detections Partners with Security Engineers and Architects to drive improvements in technology and policy governance Gathers threat intelligence and conduct hypothesis-driven threat hunting activities Identifies and implements process improvements and enhancementsQualificationsPrior management or technical leadership experienceUniversity degree or equivalent certified education and experience5 years of relevant Cyber Security content development experience Fluent verbal and written English interpersonal and communication skillsHighly proficient with Regular Expressions (RegEx), SQL queries, YARA rules, network packet analysis and JSON Strong understanding of common attack patterns and Indicators of Compromise (IoCs) across Windows, MacOS and Linux based operating systems Hands on experience conducting data ingestion, parsing/normalization and building alerting rules using an enterprise-grade SIEM product (such as Elastic, Splunk, QRadar, SumoLogic, etc) Experience with Malware analysis and reverse-engineering a strong plus Experience with red team, penetration testing or vulnerability management a strong plusExperience creating scripts using Python or similar languagesBackground in incident investigations and response, computer forensics preferred Excellent understanding of foundational operating system and networking concepts (TCP/IP) including common protocols (HTTPS/SSH/RDP/etc.) Presenting security risks to wide audience including senior management Excellent attention to detail and ability to task-switchAbility to communicate and work seamlessly in a global team Inclusion and Diversity are important to us. Synopsys considers all applicants for employment without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, military veteran status, or disability.Job CategoryInfo Technology Hire TypeEmployeeCountryUnited States Requisition Number: 28057BRHiring Location: USA - California - Mountain View/Sunnyvale, USA - California - San Francisco, USA - Massachusetts - Marlboro, USA - Oregon - Hillsboro, USA - Texas - Austin, USA - Virginia - Dulles

Keywords: Synopsys, Mountain View , Information Security Manager --- DFIR, Executive , Mountain View, California