Incident Response Advanced Lead

This is a fully remote position, open to applicants in California.

📋 Description

• Act as the main Incident Commander for all high-severity (SEV-1 / SEV-2) cyber incidents.

• Design and implement the incident battle rhythm at an advanced level.

• Convert intricate technical findings into clear situational awareness for non-technical stakeholders.

• Make independent, time-sensitive decisions regarding severity classification, scope expansion, external support activation, and criteria for incident closure.

• Manage the executive communication stream at the highest level during incidents.

• Maintain and uphold the authoritative incident timeline standard in real time throughout the response.

• Create and lead a sophisticated annual tabletop and functional exercise program.

• Promote enterprise alignment with NIST SP 800-61r3, NIST CSF 2.0, and relevant regulatory frameworks.

• Shape and advance the multi-year Incident Response (IR) program strategy.

⛳️ Requirements

• Over 10 years of experience in cybersecurity, with a minimum of 6–7 years of directly overseeing incident response operations on an enterprise scale.

• Extensive hands-on experience as the primary incident commander on various major incidents across a range of attack scenarios.

• Expert-level proficiency in MITRE ATT&CK, cyber kill chain, diamond model, and incident response frameworks (NIST SP 800-61, SANS PICERL).

• Exceptional written and verbal communication skills at the executive level, especially under pressure.

• Advanced skills in program and project management.

• In-depth knowledge of regulatory and legal responsibilities concerning cyber incidents.

• Previous experience in a Fortune 500 company, large-scale entertainment/media/technology sector, or a heavily regulated industry.

• At least one industry certification demonstrating a sustained commitment to the field: GCIH, GCFA, GCIA, CISSP, CISM, or equivalent.

🏝️ Benefits

• Medical, vision, dental, and mental health benefits for you and your family.

• Complimentary concert tickets.

• Generous paid time off, including paid holidays, sick time, and personal days.

• 401(k) plan with company matching.

• Stock reimbursement program.

• New parent programs, including caregiver leave, as well as support for fertility, adoption, foster care, or surrogacy.

• Career and skill development programs, including the School of Live, tuition reimbursement, and student loan repayment.

• Volunteer time off and crowdfunding match.