Manager, IT Security Operations

HomeAway is looking for a talented and highly motivated IT Security Operations Manager to join the Global IT Security Team. This roll will lead our Security Operations Center and provide support to ensure that we are operating to the highest security standards. You are expected to be well-organized, team driven and a dynamic multi-tasker, including handling a team and leading the way for expanding our innovative SOC. This role requires maintaining and improving systems and staying abreast of the latest trends, tools and products in IT security operations. This position requires experience in operationalizing security technologies, alerting, critical issues and day to day security operations. You will have a consistent record of planning, implementation, maintenance and monitoring of security technologies.

Responsibilities:

• Responsible for managing an IT Security Operations Team, including contractors.
• Responsible for establishing security operations framework for security technologies.
• Develop operational processes around: incident response, alerting, and critical issues.
• Responsible for developing & deploying new security technologies.
• Must have advanced Splunk skills/knowledge, creating custom dashboards, advanced query experience.
• Responsible for developing advanced metrics, scorecards, and Splunk dashboards.
• Participate in project teams providing security requirements where needed.
• Work on process improvements including: development of tools, automation, and integration.
• Responsible for interconnecting security event sources: server logs, network, security devices, threat feeds, antivirus, malware, vulnerability scanners, net flow, etc.
• Responsible for designing and operationalizing all aspects of our security infrastructure.
• Responsible for rolling up your sleeves and getting stuff done. This is a hands-on position.

Qualifications:

• Previous experience with leading tactical teams, including incident response.
• Programming or automation experience with Ruby, Python or other scripting language.
• Strong understanding of network security, operating systems, web application security, incident response, security engineering, authentication, authorization, security protocols, and cryptography.
• Excellent knowledge of security event types, structured and unstructured data.
• Must have advanced Splunk skills/knowledge, creating custom dashboards, advanced query experience.
• Keen understanding of DevOps tooling and monitoring platforms.
• Knowledge of system security vulnerabilities and remediation techniques.
• Knowledge of network and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)
• Be an effective communicator,who works well with team members, IT teams, business partners, and vendors.
• Creative, problem-solving approach to projects.
• Strong analytical capabilities and have a desire to learn new things.
• Willingness to provide feedback in challenging situations.

Experience:

• 5+ years of experience working in a security operations & incident response role. Certifications like CISSP, CISM, CISA, CEH, GCIH, GCIA, etc. A bachelor’s degree in computer science or equivalent work experience.

Benefits:

• Great health and insurance benefits.
• Competitive salary.
• Annual target bonus or commission.
• Paid vacation and sick time.
• Vacation rental on a yearly basis (taxable benefit).
• Employee Stock Purchase Program.
• Free snacks and beverages.
• Frequent company update talks with our leadership team.
• Free listing on HomeAway.com
• Electronic, adjustable stand-up desk.
• Discounted Metro & Rail pass.