Staff Incident Response Commander

Requirements

• Proven experience in managing the end-to-end incident response process, including leading complex, multi-functional incidents.
• Deep understanding of threat intelligence, malware analysis, network security concepts, and advanced investigative techniques.
• Outstanding analytical and problem-solving skills with the ability to think critically and make decisions under pressure.
• Ability to communicate effectively with diverse collaborators and engineering teams using clear data points. Strong written and verbal communication skills.
• Proficiency in programming and scripting languages such as Python, Bash, Java, PowerShell is highly desirable.
• Strong understanding of security and privacy fundamentals. Expertise in security frameworks and guidelines.
• Extensive familiarity with regulations and compliance frameworks such as FedRAMP, ISO 27001, SOC2, HIPAA, FERPA, GDPR, and PCI.
• A collaborative outlook with a focus on building and encouraging relationships. Ability to lead and encourage cross-functional teams.

What you'll be doing

• Drive, orchestrate, and lead comprehensive incident response activities, ensuring all collaborators are aligned, and response efforts are cohesive and efficient. Provide strategic mentorship and oversight to junior team members.
• Apply advanced critical thinking and investigative skills to recognize indicators of compromise, identify potential attack vectors and root causes, and determine steps for resolution.
• Maintain meticulous records and documentation of incidents. Communicate effectively with collaborators and leadership through clear, concise reports and timely updates. Ensure documentation meets industry standards and regulatory requirements.
• Coordinate response actions across multiple internal and external organizations, draft detailed reports, assign remediation actions, and implement improvements. Facilitate communication and collaboration among diverse teams.
• Improve the Incident Response function by conducting post-incident retrospectives and gathering feedback from security, engineering, and partner teams. Guide junior team members and promote a culture of ongoing development.
• Build, document, and report on incident response processes, procedures, and metrics. Find opportunities for process optimization and efficiency.
• Partner with internal compliance teams to stay in sync with various compliance frameworks. Manage risk and ensure incident response strategies follow industry standards and regulatory requirements.
• Lead and participate in tabletop exercises and incident simulations. Develop training programs to improve the skills and preparedness of the incident response team.
• Stay informed about emerging threats and attack vectors to maintain expertise in the ever-evolving cyber landscape. Develop proactive measures to mitigate potential threats.

Perks and benefits

• Play a key role in protecting our organization and its data.
• Engage in continuous learning and professional development. Work with a team that values collaboration, innovation, and excellence!