DevSecOps Manager

Global Payments - Oklahoma City, OK

Full-time - Mid Level

Oklahoma City, OK

Credit Intermediation and Related Activities

About the position

The DevSecOps Manager is responsible for leading specialized areas within information security, including Security Engineering, Security Architecture, Forensics Analysis, Threat Analysis, Threat Hunting, and Penetration Testing. This role involves managing the development and execution of enterprise security controls, monitoring system vulnerabilities, and responding to security incidents while providing guidance to business decision-makers.

Responsibilities

• Tracks and supports the delivery of information security solutions.
• Manages the tactical activities of installing and configuring security systems, software, and applications.
• Coordinates responses to intrusions and provides remediation guidance and support.
• Coordinates resources on highly complex development projects, including approval of design specifications and scope.
• Provides input to short-term security technology roadmaps regarding the applicability of new technologies.
• Disseminates updates to InfoSec Architectural policies, standards, and guidelines to team members.
• Reviews forensic investigations and analysis of reported cyber incidents to evaluate root cause vectors and necessary control measures needed to prevent future occurrences.
• Implements appropriate countermeasures to recover deleted, hidden, or lost user data.
• Coordinates research and analysis of threat actor profiles and associated indicators to detect potential threats.
• Implements recommended actions and security tools to identify, monitor, and mitigate attacks.
• Coordinates with external security organizations to exchange threat intelligence.
• Coordinates complex threat assessments to evaluate incident impact and risk exposure.
• Reviews cyber operations intelligence and/or indications and warnings intelligence products and draws conclusions on possible implications or applicability.
• Guides the threat intelligence collection process to enhance analytical capabilities.
• Manages execution of penetration testing activities on core systems.
• Articulates the outcome of stimulated attacks and underlying security issues or system weaknesses.
• Recommends and institutes remediation techniques or improvements to protect and maintain security frameworks and controls.
• Supports the evaluation and selection of security applications and systems.
• Manages the implementation of access control defenses.
• Provides quality review on the evaluation and documentation of team procedures.
• Manages development, deployment, and support activities for multiple critical security technologies.

Requirements

• Bachelor's Degree in Information Security, Computer Science, or related field.
• Typically a minimum of 6 years of related professional experience.
• Prefer a minimum of 1-2 years experience in a supervisory position.
• One or more of the following certifications: CISSP, CISA, CISM, PCI-QSA, PA-QSA, PCIP, CRISC, CGEIT, Certified Forensic Computer Examiner (CFCE), Certified Cyber Threat Analyst (CCTA), Certified Computer Examiner (CCE).

Nice-to-haves

• Prior Global Payments, payment, or technology industry experience.
• Master's Degree in a related field of study from an accredited university.