The Information Technology Center (ITC) is looking for a Cyber Center Manager.
The Role Includes
End-to-end responsibility for the 24/7/365 detection, monitoring, investigation, and response to cyber incidents (Incident Response) across complex and classified technological environments.
Leading the organization’s operational cyber defense against advanced threat actors targeting information assets and infrastructure.
Managing and leading the team: recruiting, training, mentoring, and directly managing Tier 1–3 analysts, forensic investigators, and incident response specialists. Defining shifts and operational workflows.
Cyber Incident Response: directly leading the investigation and containment of complex cyber incidents, managing crises and exceptional events in real time, including activating teams outside regular working hours.
Developing and improving methodologies: writing, updating, and implementing operational policies and procedures, contingency plans, and automation-based Playbooks (SOAR).
Defining and implementing advanced monitoring and protection tools; strengthening the technological and operational capabilities of the Cyber Center and its systems, including SIEM, XDR, SOAR, and EDR, while adapting them to cloud environments and isolated On-Premise / Air-Gapped environments.
Threat Intelligence & Hunting: integrating relevant cyber threat intelligence feeds and leading proactive activities to identify malware and hidden threats across organizational networks.
Regulatory compliance and audits: ensuring the SOC complies with stringent security standards and guidelines issued by the Security Officer (CISO/Chief Security Officer) and relevant regulatory bodies.
Cyber Threat Intelligence (TI) monitoring and collection, and Threat Hunting (TH) across organizational networks.
Network systems monitoring and control.
Managing supply chain security incidents, including coordination with internal organizational units and external suppliers regarding cyber incidents within the supply chain.
Providing support to customers and company employees regarding service requests originating from suspected cyber incidents.
Producing professional reports on Cyber Center activities and investigated incident suspicions for senior management.
What We’re Looking For
Academic degree in Information Systems and/or Computer Science, or completion of at least 300 hours of professional cybersecurity training, or graduate of a technological unit such as Unit 8200, Ofek, Lotem, Mamram, or equivalent units – mandatory.
Recognized professional certifications such as CISSP, CISM, or CISA – advantage.
Experience working in physically segregated / Air-Gapped environments – advantage.
At least 5 years of proven experience in Cyber Security, including at least 2 years as a Senior Analyst (Tier 3), SOC Team Lead, or SOC Manager in a medium-to-large organization – mandatory.
At least 3 years of proven experience managing and leading a technological team of at least 10 employees in an operational environment – mandatory.
In-depth knowledge of cyber threats and threat actors, including attack groups and large-scale international cyber incidents – mandatory.
Proven experience leading cyber incidents in large organizations, including defense and response strategies and forensic investigations – mandatory.
Advanced training in communications and operating systems – advantage.
Knowledge and experience with information security products: SIEM, IPS/IDS, AV, EDR, Firewall, SOAR – mandatory.
Technical English (reading and writing) – mandatory.
In-depth understanding of TCP/IP communication protocols, network architecture, Windows/Linux operating systems, and common attack techniques such as MITRE ATT&CK – advantage.
Willingness to work overtime – mandatory.
About the Cyber Center
The Cyber Center provides comprehensive active and proactive monitoring and protection, including a senior team responsible for managing and responding to cyber incidents across the organization.
The Cyber Monitoring and Control domain is responsible for monitoring the organization’s cybersecurity and information security, as well as collecting cyber intelligence. The team monitors and controls security systems and protects the network against cyber threats and defined threat scenarios.
The Cyber Center Manager leads a team of analysts operating 24/7, protecting the organization’s assets through advanced security tools, automation processes, and AI.
