Incident Response Program Lead
Core
Lead the development and operation of the security incident response program and oversee the governance of the Managed Security Service Provider (MSSP).
Role type
Senior IC incident response program lead
Builds
Security incident response capabilities and MSSP operational performance
Domain
Cybersecurity / Information Security
Required skills
Incident response lifecycle management, MSSP governance, security operations, risk assessment, compliance program support, tabletop exercise leadership, technical investigation, cloud security architecture, security frameworks (NIST, SANS), vendor management
Preferred skills
Detection engineering, threat hunting, digital forensics, malware analysis, security automation, PCI DSS 4.0.1, payment brand notification processes
Technologies
AWS, Sumo Logic, Cloudflare, Lacework, Sophos, SIEM, endpoint security, cloud security tools
Responsibilities
Own and continuously improve the Security Incident Response program including policies, playbooks, and escalation criteria; Serve as the incident lead during security and compliance incidents coordinating investigation and recovery; Oversee MSSP governance, performance, and contractual requirements; Partner with MSSP to improve alert quality, detection rules, and response automation; Lead incident response tabletop exercises and testing activities; Drive operational reporting on incident trends and MSSP performance; Support the Information Security Manager with risk assessments, compliance activities, and audit preparation; Advise leadership on security events and emerging risks; Participate in incident escalation or on-call rotation as required
