Security Operations Center, Analyst- Costa Rica

As a SOC Analyst, you will play a pivotal role in supporting the Senior Program Manager in the day-to-day oversight of program performance. This dynamic position involves contributing to the technical delivery essential for establishing an interim vSOC (Virtual Security Operations Center) and subsequently, a permanent national SOC in Costa Rica. You will be a hands-on technical leader, responsible for the successful execution of CRDF’s contract engagements, with a special focus on deploying a vSOC within MICITT’s cybersecurity operations center (CSOC). This role demands the ability to execute with guidance from the Senior Program Manager, anticipate customer needs, and proactively meet those needs. Your primary responsibility will be ensuring the timely and high-quality delivery of all project deliverables.

This is a contractor position and will be located in San Jose, Costa Rica.

Responsibilities:

• Cybersecurity Operations: Lead and manage cybersecurity operations management and project management
• Quality Assurance: Ensure project-defined deliverables are provided on time and have undergone quality review, including SOPs, Configuration Guides, Training Documentation, and Project Schedules
• Resource Management: Provide a resource scheduling roster that demonstrates no service gaps, even during personal emergencies or planned non-emergency resource time off
• Stakeholder Collaboration: Collaborate with external stakeholders to understand operational needs and develop effective processes
• Industry Awareness: Maintain a current understanding of industry trends, emerging cyber threats, and new solutions that may impact the CSOC environment
• Alignment: Collaborate with key stakeholders across the organization to ensure that the CSOC aligns with business objectives, mission, and values by developing comprehensive CSOC strategies and tactics
• Communication: Participate in routine and periodic status meetings with key customer personnel, even on short notice, to convey the status and risks
• Policy Development: Develop policies, instructions, standards, and procedures around security operation functions
• Audit Support: Provide Metrics and Artifacts supporting audit activities
• Project Review: Continuously review project implementation activities to ensure maximum coordination and collaboration
• Relationship Building: Facilitate coordination and develop relationships between CRDF Global and key in-country technology stakeholders
• Additional Duties: Perform other duties and responsibilities as assigned

• Education: A bachelor’s degree in information technology, engineering, or a related field is strongly preferred

• Experience: Minimum of 7 years of experience in Information Technology, including a minimum of 4 years in a leadership role leading and managing a SOC

• Certifications: Preferred certifications include CISSP or CISM, and PMP would be an asset
• Frameworks: Must have experience with industry-standard frameworks such as ISO, NIST, and PCI, along with best practices
• Incident Response: Demonstrated experience in leading the development of incident response plans and SOPs, customer report creation, and managing the identification, triage, and response of security events
• Client Relations: Proven ability to form strong client relationships
• Skills: Excellent interpersonal, interviewing, analytical, and problem-solving skills are essential to address variable situations. Strong communication, supervisory, and time management skills are also crucial
• Expertise: Domain expertise and implementation experience providing best practices and recommendations to resolve project challenges, both business and technical
• Presentations: Must have proven experience in leading and executing executive presentations, demonstrations, and reporting
• Communication: Excellent communication skills, both written and oral, are necessary to communicate effectively with department executives

Preferred Experience:

• Familiarity with CSOC tools such as Splunk, Crowdstrike, Forescout, Tenable SC, Tenable IO, FireEye, EnCase/OpenText Digital, BigFix, Symantec Endpoint Protection (SEP), MaaS-360 (IBM MaaS-360), Okta, Cortex XDR, Cortex XSOAR, Prisma, Panorama, zScaler, Armis
• Additional certifications like PMP, CISSP, or CISM would be advantageous
• Experience working with the Department of State and/or other Government agencies is a plus