Cybersecurity Manager

About Us

At Kalderos, we are building unifying technologies that bring transparency, trust, and equity to the entire healthcare community with a focus on pharmaceutical pricing.  Our success is measured when we can empower all of healthcare to focus more on improving the health of people. 

That success is driven by Kalderos’ greatest asset, our people. Our team thrives on the problems that we solve, is driven to innovate, and thrives on the feedback of their peers. Our team is passionate about what they do and we are looking for people to join our company and our mission.
That’s where you come in! 

What You’ll Do:

The Manager of Cyber Security manages the company’s cyber security program and technologies to defend and protect Kalderos’s systems and information assets against cyber-attacks and adversaries. This individual will be a subject matter expert in incident response and cyber security defense and will build a team of security professionals to design and execute best-in-class network/systems monitoring, preventative and detective controls, forensics and investigations, vulnerability management, and cyber threat intelligence activities. The role will drive the creation and execution of plans for incident response and lead the incident response team through material incidents. The manager will develop and maintain key relationships with external cyber security organizations and federal/state law enforcement and regulatory agencies. The manager is operationally focused on defending Kalderos’s data and intellectual property while strategically positioning the organization in preparation for increasing technical complexity and emerging cyber threats.

• Lead the design and execution of the enterprise security operations processes, procedures, and playbooks
• Oversee and lead security operations in the identification and response to cyber threat activities and incident response
• Lead and manage technology vulnerability identification and remediation/patching of priority vulnerabilities
• Define and maintain the roadmap of program and technology changes being driven by effective threat analysis.
• Develop and lead cyber threat intelligence efforts to identify and analyze long-term and short-term cyber threat actor groups, techniques, and tactics to inform information security defenses and technology decisions
• Manage team of analysts and subject matter specialists to ensure continued success and growth
• Manage security operations projects, including process improvement and technology investment
• Develop and communicate to peers, business partners, and management aspects of cyber defense, including crisis/incident communications, investigative results, and training and awareness of the cyber threat landscape
• Provide management with weekly, monthly, and quarterly metrics for both risk and performance
• Manage and maintain relationships with external sources of information security information that can be used to manage our information security & compliance program

What You’ll Bring:

• At least 5 years of experience implementing cyber security solutions within Cloud environments
• Mastery in understanding the cyber risks, cyber threats and detection and response capabilities associated with operating within a Cloud-native environment. 
• Mastery of incident response methodologies, best practices and routines
• Advanced level of understanding in cyber specialization and several cyber-related disciplines to investigate and analyze all response activities related to cyber incidents
• Mastery at directing and coordinating technical response teams to develop quick containment solutions to cyber security incidents
• Expert at identifying various types of events and incidents and applying the right response framework for each (i.e. information mishandling, security vulnerability, system exploit, malware infection, etc.)
• Basic to advanced reverse engineering with deep understanding of IOC's, Cyber Kill Chain, and preventive and detective technical controls
• Digital forensics or enterprise investigation experience
• Ability to work effectively with technical and non-technical staff
• In-depth familiarity with workflow tools and ability to develop and improve tools/processes
• Familiarity with industry organizations and individuals that can be leveraged for knowledge sharing and support
• Exceptional verbal and written communication skills, with mastery of the ability to tailor the context of the conversation to the audience
• Experience with socializing awareness campaigns
• Ability to think outside the box and develop solutions to accomplish seemingly impossible tasks, while remaining risk and objective focused

Recommended Certifications

• CEH – Certified Ethical Hacker
• CISM - Certified Information Security Manager
• LPT – Licensed Penetration Tester
• CISSP - Certified Information Systems Security Professional
• CompTIA Security+

Expected Salary Range: $100,000-$140,000 base + bonus

____________________________________________________________________________________________Highlighted Company Perks and Benefits

• Medical, Dental, and Vision benefits
• 401k with company match
• Flexible PTO with a 10 day minimum
• Opportunity for growth
• Mobile & Wifi Reimbursement
• Commuter Reimbursement
• Donation matching for charitable contributions
• Travel reimbursement for healthcare services not available near your home
• New employee home office setup reimbursement

What It’s Like Working Here

• We thrive on collaboration, because we believe that all voices matter and we can only put our best work into the world when we work together to solve problems.
• We empower each other and believe in ensuring all voices are heard.
• We know the importance of feedback in individual and organizational growth and development, which is why we've embedded it into our practice and culture. 
• We’re curious and go deep. Our slack channel is filled throughout the day with insightful articles, discussions around our industry, healthcare, and our book club is always bursting with questions.

To learn more: https://www.kalderos.com/company/culture

We know that job postings can be intimidating, and research shows that while men apply to jobs when they meet an average of 60% of the criteria, women and other marginalized folks tend to only apply when they check every box. We encourage you to apply if you think you may be a fit and give us both a chance to find out!

Kalderos is proud to be an equal opportunity workplace.  We are committed to equal opportunity regardless of race, color, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, or veteran status.

Kalderos participates in E-Verify.