Назад
Company hidden
обновлено 1 день назад

CFC Senior Enterprise Security Incident Manager (Cybersecurity)

153 075 - 275 535$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
CFC Senior Enterprise Security Incident Manager (Cybersecurity): Leading enterprise-wide response to complex cybersecurity incidents as Cyber Incident Commander with an accent on containment, recovery, executive communication, and cyber resilience. Focus on coordinating cross-functional investigations, conducting root cause analysis, improving response playbooks, and strengthening readiness through tabletop exercises and on-call operations.

Location: United States; remote position

Salary: $153,075–$275,535 per year, plus variable pay opportunity.

Company

hirify.global is a global data and technology company operating across financial services, healthcare, automotive, agribusiness, insurance, and other markets, with 25,200 employees in 32 countries.

What you will do

  • Lead enterprise-wide response to high-risk cybersecurity incidents as Cyber Incident Commander, including validation, escalation, containment, eradication, recovery, and resolution.
  • Coordinate technical and business teams, provide executive updates, support risk-based decision-making, and maintain incident documentation.
  • Conduct post-incident reviews, root cause analysis, lessons-learned activities, and continuous improvements to response plans, playbooks, and operations.
  • Lead tabletop exercises and partner with business and technology stakeholders to validate response capabilities and identify gaps.
  • Support Cyber Fusion Center operations, monitor emerging threats, collaborate across security and technology teams, and participate in the on-call rotation.

Requirements

  • 8+ years of experience in security operations or information technology, including 5+ years in information security incident handling or response.
  • Bachelor’s degree in Computer Science, Computer Engineering, Information Security, or a related field, or equivalent professional experience.
  • Experience leading or supporting investigations and response to complex incidents, including APTs, ransomware, DDoS, insider threats, web and mobile application attacks, and data exfiltration.
  • Knowledge of incident response, digital investigation methodologies, adversary TTPs, incident triage, impact assessment, containment, remediation, and recovery.
  • Broad technical knowledge of enterprise and cloud environments, operating systems, networking, security controls, enterprise technologies, and detection and response platforms.
  • Experience investigating complex incidents, performing root cause analysis, making risk-based decisions, and communicating technical findings to varied audiences.
  • Leadership experience coordinating cross-functional incident response, influencing stakeholders, and managing multiple high-priority cybersecurity incidents.
  • Demonstrated initiative to identify improvement opportunities, drive security enhancements, and keep leadership informed.
  • Availability for after-hours incident pages and assigned nights, weekends, and holidays as part of an on-call rotation.

Nice to have

  • Industry certifications in cybersecurity, incident response, digital forensics, or ethical hacking, such as GIAC, CISSP, SSCP, CISM, EC-Council, or Offensive Security.

Culture & Benefits

  • People-first, inclusive, and purpose-driven culture.
  • Flexible work environment with remote, hybrid, or in-office options.
  • Medical, dental, vision, matching 401(k), bonus plan, and variable pay opportunity.
  • Flexible time off, including volunteer time off, vacation, sick leave, and 12 paid holidays.
  • Equal opportunity employment with accommodations available for disabilities or special needs.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →