The Opportunity

Qurate Retail Group (QRG) is in search of a Cybersecurity Threat Operations Monitoring Manager for a key leadership role in the Cyber Threat Operations Center (CTOC) and overall Cybersecurity Program.   This individual is responsible for a team of engineers/analysts that provide cyber threat monitoring capabilities for all QRG brands and global markets as well as oversees security event analysis and triage, assures monitoring tools are properly tuned and alerting, identifies security monitoring gaps and recommends tools and content, assures shift coverage, and assigns incident queues and shift handover reports for daily operations.

Who We Are

Be a part of delivering tomorrow’s innovations today!  We are a leader in ecommerce technology solutions, from designing applications to creating entirely new platforms.  Technology is at the core of all that we do.  If you are energized by a dynamic engineering environment that encourages technical curiosity, collectivism, courage and a desire to grow professionally, then we want to talk to you!

Your Impact

• Manage and maintain the day-to-day operations of the CTOC to include tools, capabilities, monitoring content and personnel. 
• Maintain expert-level knowledge and expertise with cybersecurity tools, methodologies, IOCs, TTPs, vulnerabilities and exploits. 
• Ensure all SLA’s are met for cyber security monitoring.
• Oversee cyber threat intelligence and threat hunting activities.
• Identify training opportunities and mentor CTOC team members. Work with the director to identify and compute budgetary guidance on training needed for regulatory requirements.
• Identify and implement process, policy and procedure improvements to enhance monitoring capabilities and response times.
• Lead and prioritize CTOC-related project activities and assure implementation of project milestones are completed.
• Collaborate with cybersecurity architects and engineers to ensure adequate security solutions and controls are in place throughout all IT systems and platforms. 

What You Bring

• Bachelor's Degree in Computer Science or related field or equivalent experience
• 6+ years of related experience along with leadership and decision-making abilities at a managerial level.
• Ability to act independently and make decisions based on best practices, policies, procedures and law.
• In-depth knowledge of threat actor tactics, techniques, and procedures.
• Experience conducting or participating in cyber-counterintelligence analysis, computer network attack (CNA), Computer Network Defense (CND), Computer Network Exploitation (CNE).
• Strong knowledge and hands on experience with host, network, static, and dynamic forensic techniques.
• Experience searching, manipulating, and interpreting SIEM products such as Netwitness.
• Strong scripting and programming skills in Perl, Python, Ruby a plus.
• Strong problem solving and troubleshooting skills.
• Ability to communicate directly with leadership and create technical and management-level reports and presentations.
• Experience providing remediation recommendations.
• Experience conducting proactive threat analysis and hunting.
• Experience collecting, analyzing, and correlating cyber threat intelligence information.
• Experience directly supporting management at the Director level and above.
• Experience training junior and mid-level analysts a plus.

#LI-JL1