Senior Enterprise Security Incident Manager

This is a fully remote position, open to applicants in United States.

📋 Description

• Act as the Cyber Incident Commander for major cybersecurity incidents.

• Oversee the organization-wide response to high-risk cybersecurity events.

• Authenticate and escalate incidents as necessary.

• Lead collaborative response efforts across various functions.

• Facilitate containment, eradication, recovery, and resolution processes.

• Provide executive updates to senior management and stakeholders.

• Coordinate with technical and business teams to support decision-making processes.

• Ensure precise documentation of incidents is maintained.

• Execute post-incident reviews and analyze root causes.

• Document lessons learned and continuously enhance response plans, playbooks, and operational procedures.

• Conduct tabletop exercises with both business and technology stakeholders.

• Assess response capabilities, identify gaps, and enhance preparedness.

• Stay informed about emerging threats.

• Collaborate with security and technology teams.

• Participate in the Cyber Fusion Center's on-call rotation.

• Assist in developing strategies that bolster Experian's security posture.

⛳️ Requirements

• A minimum of 8 years of experience in security operations or information technology.

• At least 5 years of experience in handling or responding to information security incidents.

• Bachelor's degree in Computer Science, Computer Engineering, Information Security, or a related field, or equivalent professional experience.

• Proven experience in leading or supporting investigations and responses to complex cybersecurity incidents, including APTs, ransomware, DDoS, insider threats, web/mobile application attacks, and data exfiltration.

• Familiarity with cyber incident response, digital investigation methodologies, and adversary tactics, techniques, and procedures (TTPs).

• Understanding of incident triage, impact assessment, containment, remediation, and recovery processes.

• Extensive technical knowledge of enterprise and cloud environments, operating systems, networking, security controls, enterprise technologies, and detection and response platforms.

• Experience in investigating complex incidents, conducting root cause analysis, making risk-based decisions, and effectively communicating technical findings to diverse audiences.

• Leadership experience in coordinating cross-functional incident response activities, influencing stakeholders, and managing multiple high-priority cybersecurity incidents.

• Demonstrated initiative with the ability to identify improvement opportunities, promote security enhancements, and work effectively while keeping leadership informed.

• Must be available for after-hours pages and assigned nights, weekends, and holidays as part of an on-call rotation.

• Preferred industry certifications in cybersecurity, incident response, digital forensics, or ethical hacking, including GIAC, CISSP, SSCP, CISM, EC-Council, or Offensive Security.

🏝️ Benefits

• Variable pay opportunities.

• Competitive compensation package and bonus plan.

• Medical, dental, and vision benefits.

• Matching 401K plan.

• Flexible work environment with options for remote, hybrid, or in-office work.

• Flexible time off policies.

• Volunteer time off.

• Vacation leave.

• Sick leave benefits.

• 12 paid holidays each year.