Senior Enterprise Security Incident Manager

This is a fully remote position, open to applicants in United States.

📋 Description

• Act as the Cyber Incident Commander to lead the organization-wide response to high-risk cybersecurity incidents.

• Assess and escalate incidents while directing cross-functional response initiatives.

• Oversee the processes of incident containment, eradication, recovery, and resolution.

• Provide executive updates to senior leaders and stakeholders.

• Coordinate efforts between technical and business teams to facilitate decision-making.

• Ensure precise documentation of incidents is maintained.

• Conduct post-incident reviews, root cause analyses, and lessons-learned sessions.

• Enhance response plans, playbooks, and operational processes.

• Facilitate tabletop exercises to verify response capabilities and identify any gaps.

• Support the operations of the Cyber Fusion Center and keep an eye on emerging threats.

• Participate in the on-call rotation, which includes assigned nights, weekends, and holidays.

• Contribute to projects aimed at bolstering Experian's security posture and cyber resilience.

⛳️ Requirements

• Over 8 years of experience in security operations or information technology.

• More than 5 years in handling or responding to information security incidents.

• A Bachelor's degree in Computer Science, Computer Engineering, Information Security, or a related discipline, or equivalent professional experience.

• Proven experience in leading or supporting investigations and responses to intricate cybersecurity incidents, such as APTs, ransomware, DDoS, insider threats, web/mobile application attacks, and data exfiltration.

• In-depth knowledge of cyber incident response, digital investigation techniques, and adversarial tactics, techniques, and procedures (TTPs).

• Familiarity with incident triage, impact assessment, containment, remediation, and recovery processes.

• Comprehensive technical knowledge of enterprise and cloud environments.

• Understanding of operating systems, networking, security controls, enterprise technologies, and detection and response platforms.

• Experience in investigating complex incidents and conducting root cause analyses.

• Capability to make risk-based decisions and clearly communicate technical findings to diverse audiences.

• Leadership experience in coordinating cross-functional incident response activities.

• Proven ability to influence stakeholders and manage multiple high-priority cybersecurity incidents.

• Demonstrated initiative in identifying opportunities for improvement and driving security enhancements.

• Ability to operate efficiently while keeping leadership informed.

• Must be available for after-hours pages and assigned nights, weekends, and holidays as part of an on-call rotation.

• Preferred industry certifications in cybersecurity, incident response, digital forensics, or ethical hacking, such as GIAC, CISSP, SSCP, CISM, EC-Council, or Offensive Security.

🏝️ Benefits

• Attractive compensation package and bonus plan.

• Opportunities for variable pay.

• Comprehensive medical, dental, and vision benefits.

• Matching 401K contributions.

• Flexible work environment, with options to work remotely, in a hybrid model, or in the office.

• Flexible time off policies.

• Volunteer time off available.

• Paid vacation time.

• Sick leave provisions.

• 12 paid holidays each year.