Manager, Cyber Incident Response
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Location: Fully remote from a non- worksite, most commonly an employee’s residence; role location listed as Orlando, Florida, United States. Participation in a manager on-call rotation and support for a 24x7x365 global environment are required. External candidates may be required to attend an in-person interview at an location.
Salary: USD 110,000–170,000 yearly, bonus eligible.
Company
is a media and entertainment company producing and distributing film, television, streaming, news, theme park, consumer product, and experience offerings.
What you will do
- Manage Incident Response operations, including prioritization, resource allocation, shift coverage, tooling, workflows, escalations, and queue health.
- Oversee cyber incidents from escalation and validation through containment, remediation, recovery support, documentation, and closure.
- Serve as an Incident Handler, Incident Commander, and managerial escalation point for significant incidents and responder support needs.
- Lead governance and improvement of response processes, playbooks, metrics, technical procedures, tuning requests, and automation opportunities.
- Coordinate with Information Security Officers, business stakeholders, technical teams, vendors, partner teams, and senior leadership.
- Lead, coach, and develop Incident Response personnel; prepare executive reporting on operational effectiveness, risk reduction, trends, and business impact.
Requirements
- Bachelor’s degree in an information technology-related field or equivalent work experience.
- Seven or more years of cybersecurity or investigations experience, including at least four years in Incident Response, a Security Operations Center, threat intelligence, or a similar function.
- Experience leading incident response operations, cybersecurity personnel, or complex incident coordination.
- In-depth understanding of cyber threats, adversary techniques, response procedures, network and enterprise architecture, and threat detection.
- Ability to make evidence-based decisions under uncertainty and coordinate response activities across multiple teams.
- Willingness to work in a fast-paced, high-demand role with possible nonstandard working hours, including escalation support in a 24x7x365 global environment.
- Strong organizational skills with the ability to manage multiple workstreams, incidents, and escalation paths.
- Working knowledge of web application architecture, networking, identity, endpoint, email, and cloud services.
- Experience with host-based and network-based forensic tools and analysis.
- Knowledge of MITRE ATT&CK, the Cyber Kill Chain, the Diamond Model, and NIST incident response guidance.
- Experience applying security concepts in AWS, Azure, and/or Google Cloud Platform environments.
- Knowledge of EDR, XDR, SOAR, case management, and response automation capabilities.
- Experience developing or improving incident-management processes, playbooks, metrics, or automation.
- Exceptional written and verbal communication skills for briefing technical professionals, business stakeholders, and senior executives.
- Strong leadership, coaching, interpersonal, and problem-solving skills, with the ability to adapt to changing and fast-paced environments.
Nice to have
- Prior experience managing a Cyber Incident Response, Security Operations Center, or related cyber defense function.
- Experience supporting incident response or SOC operations for a large, complex, or global enterprise.
- Hands-on familiarity with endpoint detection and response, forensic, network-analysis, email-security, and cloud-security technologies.
- Security certifications such as GCIH, GCFA, GNFA, GCIA, CISSP, or equivalent.
- Demonstrated success improving operational discipline, employee development, cross-team coordination, and executive communication.
Culture & Benefits
- Fully remote work from a non- worksite, most commonly an employee’s residence.
- Company-sponsored medical, dental, and vision insurance.
- 401(k), paid leave, tuition reimbursement, and additional discounts and perks.
- Inclusive culture focused on employee development, community impact, and diverse content creation.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →