Cyber Defense Incident Response Lead
Core
Lead high-impact cyber incident response activities, coordinate across enterprise stakeholders, and mature the incident response program to ensure business resilience.
Role type
Senior IC Cyber Defense Incident Response Lead
Builds
Repeatable response processes, playbooks, runbooks, and executive-level reporting for KeyBank
Domain
Financial Services / Cybersecurity Incident Response
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Incident response lifecycle management, cross-functional team leadership, executive communication, tabletop exercise facilitation, program development, regulatory compliance support, process automation, documentation management
Preferred skills
Financial services experience, ServiceNow Security Incident Response, Palo Alto Cortex XSIAM/XSOAR/XDR, post-incident maturity reviews
Technologies
SIEM, EDR/XDR, SOAR, ServiceNow, Palo Alto Cortex XSIAM/XSOAR/XDR
Responsibilities
Lead cybersecurity incident response coordination for significant cyber events; Serve as primary incident response lead during active incidents; Develop and maintain incident response playbooks and runbooks; Design and facilitate cyber tabletop exercises; Lead post-incident reviews and lessons-learned sessions; Develop executive-level incident reporting and metrics
Seniority
Senior, hands-on IC with program leadership
