We are looking for a Blue Team Manager to lead and work closely with the cybersecurity team in defensive operations, ensuring the effectiveness of security processes and the continuous improvement of the organization's security posture.
Key Responsibilities
- Lead the team in monitoring, detection, and response to security incidents.
- Inspire, guide, and develop team members, fostering a collaborative and continuous learning environment.
- Oversee operations in SIEMs such as Rapid7/InsightIDR, QRadar, FortiSIEM, and Microsoft Sentinel, as well as security tools like EDR, SOAR, Firewalls, IDS/IPS.
- Define and review playbooks, policies, and performance metrics, ensuring ongoing process improvement.
- Directly support critical investigations, conducting technical analysis and strategic decision-making alongside the team.