Cyber Security Exposure Response Lead

This is a fully remote position, open to applicants in United States.

📋 Description

• Explore newly revealed CVEs, zero-day vulnerabilities, KEVs, actively exploited threats, and critical exposures.

• Analyze security and technology data, validate hypotheses, identify impacted assets, and refine the scope and impact.

• Take the lead during rapid exposure incidents and act as Incident Commander when necessary.

• Set priorities, coordinate simultaneous workstreams, track actions and decisions, and modify the response as situations progress.

• Collaborate with technology and security teams to clarify ownership, drive remediation efforts, address obstacles, and escalate risks.

• Liaise with SOC and Incident Response teams when findings suggest potential or active compromises.

• Offer practical coaching and training to developing analysts.

• Maintain situational awareness and documentation of ongoing events.

• Ensure structured handoffs throughout coverage periods.

• Participate in an on-call rotation to support a comprehensive 24/7/365 response model.

⛳️ Requirements

• Over 5 years of experience in cybersecurity or technology operations focused on technical investigations, coordination, escalation, and resolution.

• Proven ability to lead or coordinate high-priority, fast-paced operational events and make effective decisions amidst incomplete or changing information.

• Strong practical technical and investigative abilities, including correlating various data sources, testing assumptions, defining scope and impact, and determining necessary actions.

• Capacity to collaborate across technical teams without direct authority and drive issues towards resolution.

• Experience in mentoring, training, or providing technical guidance to junior analysts.

• Preferred: experience in Security Operations, Incident Response, Threat Hunting, network operations, infrastructure operations, or another high-tempo technical operations environment.

• Preferred: familiarity with applying threat-hunting or incident-response investigative techniques to evolving situations.

• Preferred: experience leading significant security or technical incidents, including acting as Incident Commander.

• Preferred: knowledge of enterprise vulnerability, endpoint, cloud, asset, network, or exposure-management technologies.

• Background investigation is required.

• Generally, no employment-based visa sponsorship is available.

🏝️ Benefits

• Comprehensive technology setup, which includes a laptop, monitors, headset, keyboard, and mouse.

• Monthly connectivity reimbursement for employees eligible to work from home.