- Company Name
- Broster Buchanan
- Job Title
- Security Operations Specialist
- Job Description
-
**Job Title**
Security Operations Specialist
**Role Summary**
Owns and executes the security operations strategy in a Microsoft Azure environment, acting as the primary liaison between the organization and its outsourced SOC provider. Ensures effective monitoring, incident response, threat intelligence integration, and continuous improvement of security posture.
**Expectations**
- Deliver measurable improvements in incident detection and response timelines.
- Maintain service quality by managing SLAs, KPIs, and provider performance reviews.
- Demonstrate proactive threat hunting and most‑effective security tool integration.
- Serve as a trusted advisor to senior stakeholders with clear, actionable reporting.
**Key Responsibilities**
- Manage and nurture the relationship with the outsourced SOC/MSSP, driving SLAs, KPIs, and regular service reviews.
- Validate, triage and resolve security escalations, ensuring rapid remediation and correct documentation.
- Integrate and optimise security tooling across Azure and on‑prem environments (Microsoft Sentinel, Defender suite, Entra ID, Purview, Abnormal, Recorded Future, Tenable).
- Coordinate vulnerability management, patch assurance processes, and risk mitigation plans.
- Lead threat intelligence integration and enhance detection engineering using MITRE ATT&CK framework.
- Produce detailed, actionable reporting and metrics for executive stakeholders.
- Support incident simulations, tabletop exercises, and security readiness initiatives.
- Mentor internal staff and act as an escalation point for Security Operations best practices.
**Required Skills**
- Deep technical expertise in Microsoft Azure security stack (Sentinel, Defender suite, Entra ID, Purview).
- Hands‑on experience with Abnormal, Recorded Future, and Tenable.
- Proven delivery of outsourced SOC/MSSP management, including SLA negotiation and KPI monitoring.
- Strong stakeholder management and communication skills across technical and non‑technical audiences.
- Calm under pressure, proactive, and confident in negotiating with security providers.
- Familiarity with threat intelligence frameworks (MITRE ATT&CK) and detection engineering.
**Required Education & Certifications**
- Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
- Security‑focused certifications: AZ‑500, SC‑200, GCIA, GCIH, CISSP, or equivalent.
---