Назад
Company hidden
4 дня назад

Manager, Cyber Incident Response

110 000 - 170 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
lead
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Manager, Cyber Incident Response (Cybersecurity): Leading 24x7x365 incident response operations across a global enterprise with an accent on containment, remediation, forensic analysis, escalation management, and operational maturity. Focus on coordinating complex cyber incidents, improving response processes and automation, developing responders, and communicating risk and business impact to senior leadership.

Location: Fully remote from a non-hirify.global worksite, most commonly an employee’s residence; role location listed as Orlando, Florida, United States. Participation in a manager on-call rotation and support for a 24x7x365 global environment are required. External candidates may be required to attend an in-person interview at an hirify.global location.

Salary: USD 110,000–170,000 yearly, bonus eligible.

Company

hirify.global is a media and entertainment company producing and distributing film, television, streaming, news, theme park, consumer product, and experience offerings.

What you will do

  • Manage Incident Response operations, including prioritization, resource allocation, shift coverage, tooling, workflows, escalations, and queue health.
  • Oversee cyber incidents from escalation and validation through containment, remediation, recovery support, documentation, and closure.
  • Serve as an Incident Handler, Incident Commander, and managerial escalation point for significant incidents and responder support needs.
  • Lead governance and improvement of response processes, playbooks, metrics, technical procedures, tuning requests, and automation opportunities.
  • Coordinate with Information Security Officers, business stakeholders, technical teams, vendors, partner teams, and senior leadership.
  • Lead, coach, and develop Incident Response personnel; prepare executive reporting on operational effectiveness, risk reduction, trends, and business impact.

Requirements

  • Bachelor’s degree in an information technology-related field or equivalent work experience.
  • Seven or more years of cybersecurity or investigations experience, including at least four years in Incident Response, a Security Operations Center, threat intelligence, or a similar function.
  • Experience leading incident response operations, cybersecurity personnel, or complex incident coordination.
  • In-depth understanding of cyber threats, adversary techniques, response procedures, network and enterprise architecture, and threat detection.
  • Ability to make evidence-based decisions under uncertainty and coordinate response activities across multiple teams.
  • Willingness to work in a fast-paced, high-demand role with possible nonstandard working hours, including escalation support in a 24x7x365 global environment.
  • Strong organizational skills with the ability to manage multiple workstreams, incidents, and escalation paths.
  • Working knowledge of web application architecture, networking, identity, endpoint, email, and cloud services.
  • Experience with host-based and network-based forensic tools and analysis.
  • Knowledge of MITRE ATT&CK, the Cyber Kill Chain, the Diamond Model, and NIST incident response guidance.
  • Experience applying security concepts in AWS, Azure, and/or Google Cloud Platform environments.
  • Knowledge of EDR, XDR, SOAR, case management, and response automation capabilities.
  • Experience developing or improving incident-management processes, playbooks, metrics, or automation.
  • Exceptional written and verbal communication skills for briefing technical professionals, business stakeholders, and senior executives.
  • Strong leadership, coaching, interpersonal, and problem-solving skills, with the ability to adapt to changing and fast-paced environments.

Nice to have

  • Prior experience managing a Cyber Incident Response, Security Operations Center, or related cyber defense function.
  • Experience supporting incident response or SOC operations for a large, complex, or global enterprise.
  • Hands-on familiarity with endpoint detection and response, forensic, network-analysis, email-security, and cloud-security technologies.
  • Security certifications such as GCIH, GCFA, GNFA, GCIA, CISSP, or equivalent.
  • Demonstrated success improving operational discipline, employee development, cross-team coordination, and executive communication.

Culture & Benefits

  • Fully remote work from a non-hirify.global worksite, most commonly an employee’s residence.
  • Company-sponsored medical, dental, and vision insurance.
  • 401(k), paid leave, tuition reimbursement, and additional discounts and perks.
  • Inclusive culture focused on employee development, community impact, and diverse content creation.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →