Cybersecurity Operations - 100% Remote - 2080 Hours Contract

Job Details:

Job Title: Cybersecurity Operations

Location: 100% Remote

Duration: 2080 Hours Contract

Description:

• Documentation for SOPs, Playbooks, process flows, analysis, reviews and recommendations..
• SMEs to use internal JIRA for proper team alignment and task tracking internally
• Provide periodic updates from assigned SMEs to management
• Provide framework analysis, review, and recommendation support for modernization of Cybersecurity Technology Operations organization
• Responsibilities and actions for the SME to analyze, review, and provide recommendations for process improvements for the following Cyber Operations activities (but not limited to):

• Scheduled monitoring and management of cybersecurity platforms, applications, and services to ensure continuous health, availability, and performance
• Rapid first-response to system alerts and incidents, including initial triage and escalation as necessary
• Detection and remediation of configuration drift or policy deviations across the environment
• Execution of redundancy, backup validation, and failover testing to maintain business continuity
• Routine health checks, patch validations, configuration updates, and service restarts to ensure optimal operations
• Implementation of patching, updates, and configuration changes following established internal guidance and best practices
• Tracking and reporting of coverage metrics across all endpoints and services
• Maintenance and regular updates of operational documentation and runbooks
• Comprehensive vulnerability management activities, including scanning, assessment, and remediation support

Must Have:

• Bindplane/OTEL agents

Nice to have:

• Axiom
• BitSight Security Benchmarking
• Cellebrite
• Cobalt Strike
• Cyderes Managed Services for Chronicle
• Domain Tools
• DTEX
• Flashpoint
• Google Chronicle SOAR
• Google Security Operations
• Intelligence Cloud
• OpSec
• Rapid7
• Security Scorecard
• SimSpace Threat Simulator
• Tenable.one
• Anomali Threat Stream
• Linux OS
• Windows OS
• Dynatrace
• MoogSoft
• Splunk
• CloudWatch
• Cloud (Kubernetes, Docker/container technologies)
• Ansible (base scripting knowhow)