Lead Cyber Operations Engineer

As a Lead Cyber Operations Engineer at Manychat, your responsibilities will encompass a range of vital tasks to ensure our cybersecurity. You will support AWS infrastructure security, design and maintain secure cloud solutions, and continuously monitor for risks. Additionally, you will lead DevSecOps practices, overseeing security integration in the software development lifecycle (SDLC) and managing vulnerability assessments. Your role will also involve coordinating incident detection and response strategies, directing blue and red team operations, and optimizing our security systems.

To qualify for the Lead Cyber Operations Engineer position at Manychat, candidates should possess a Bachelor's degree in Computer Science or Information Security (a master's degree is a plus) and a minimum of 7 years of experience in cybersecurity operations. Expertise in securing AWS infrastructure and managing security tools is essential, along with strong communication and leadership skills. Relevant security certifications like OSCP, OSWE, or AWS Security are advantageous.

Manychat believes in fostering professional growth for our Lead Cyber Operations Engineers by providing a development budget for relevant training programs, courses, and conference tickets. This commitment to your ongoing education ensures you stay updated on the latest cybersecurity practices and enhances your professional skills.

The working environment for a Lead Cyber Operations Engineer at Manychat is vibrant and collaborative. Located in beautiful Barcelona, the role allows for a hybrid work model, splitting your time between comfortable home settings and our creative WeWork offices. You’ll also enjoy free meals and snacks, promoting a positive and engaging workplace culture.

In your role as the Lead Cyber Operations Engineer at Manychat, you'll manage a variety of security systems and tools. This includes overseeing Web Application Firewalls (WAF), Endpoint Detection and Response (EDR) platforms, Security Incident and Event Management (SIEM) systems, and vulnerability management tools. You will ensure robust logging and monitoring of all systems to maintain a secure infrastructure.

When asked about your methodologies during an interview for the Lead Cyber Operations Engineer position, you can highlight your experience with frameworks like NIST and ISO 27001. Discuss your approach to risk management, integrating DevSecOps practices within software development, and maintaining a proactive security stance through constant monitoring and threat assessment.

When responding to this question, be specific about the AWS security tools you have expertise in, such as AWS WAF, GuardDuty, and CloudTrail. Share examples of how you've designed secure cloud infrastructure and the techniques you implemented for ongoing security assessment and vulnerability management.

Discuss your experience in embedding security into the DevSecOps lifecycle. You might mention initiating training sessions for developers, implementing automated security testing in CI/CD pipelines, and creating documentation that enforces security best practices. Highlighting your interpersonal skills and teamwork will also show your ability to collaborate effectively.

When addressing this question, narrate a specific incident where you spearheaded the response efforts, detailing your role in the response protocol and the outcome. Discuss the steps taken for forensic analysis, lessons learned, and how you improved the incident response plan to prevent future occurrences.

In your answer, elaborate on the tools you've used for vulnerability assessments and how you've managed a bug bounty program. Talk about the processes you implemented for continuously monitoring vulnerabilities in applications and infrastructure and how you coordinated remediation efforts.

Reassure the interviewer of your calm demeanor under stress. Provide examples of high-pressure situations you've managed effectively, focusing on your communication skills and decision-making process. Explain how you prioritize tasks and mobilize teams quickly to address security threats.

Explain your passion for cybersecurity and various methods you use to keep yourself informed, such as attending industry conferences, participating in webinars, and engaging in online forums. Mention any specific sources or publications that you follow regularly.

Talk about how you believe automation is essential in streamlining security processes and reducing response times. Provide examples of security tasks you've automated, such as integrating security tools into CI/CD pipelines or utilizing scripts for vulnerability scanning.

When discussing your experience with penetration testing, go into detail about the methodologies you use, the types of tests you've conducted, and the outcomes of those tests. Share how your findings contributed to enhancing security measures in previous roles.

Express your enthusiasm for Manychat’s innovative approach to chat marketing and your desire to contribute to a leading platform. Discuss how your skills and experiences align with the company's goals, particularly in enhancing cloud security and safeguarding customer interactions.