Cyber Incident Response Leader

Harman International; Łódź; Hybrid; PLN 180,000 - 320,000; Full time

Benefits offered by this job

Hybrid work environment

Learning & development programs (HARMÂ

Wellness benefits

Employee discounts on Harman products

Job summary

HARMAN is seeking an Incident Response Leader to act as the primary authority for enterprise cyber incident response, guiding coordination, investigation, containment, and recovery across the org. You will work with Cyber Security Operations, Infrastructure, Legal, Privacy, Compliance, and business stakeholders to protect global technology environments and reduce risk.

You will lead major incidents, develop response playbooks, run tabletop exercises, and drive program maturity with executive

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or equivalent experience.
• 5+ years of experience in cybersecurity, security operations, incident response, digital forensics, or related disciplines.
• Demonstrated experience leading complex cybersecurity investigations and coordinating enterprise incident response activities.

Responsibilities

• Lead end-to-end management of cybersecurity incidents, including triage, investigation, containment, eradication, recovery, and post-incident activities.
• Serve as incident commander for major cybersecurity events, coordinating technical and business stakeholders.
• Develop, maintain, and improve incident response processes, playbooks, escalation procedures, and communication frameworks.
• Coordinate response activities across Cyber Security Operations, Infrastructure, Cloud, End User Services, Legal, Privacy, HR, and external partners.
• Conduct detailed incident analysis to determine root cause, business impact, and corrective actions.
• Lead post-incident reviews and drive remediation to strengthen security posture.
• Develop and execute incident response tabletop exercises, simulations, and readiness assessments.
• Establish metrics, reporting, and executive dashboards to measure incident response effectiveness.

Skills

Cybersecurity

Security operations

Incident response

Digital forensics

TTP knowledge

SIEM

EDR

Cloud security

Communication

Leadership

Education

Bachelor's degree in Cybersecurity/IT/CS/Engineering

Tools

SIEM

EDR

Identity security

Cloud security

Email security

Network security

Job description

Introduction: A Career at HARMAN Corporate

We’re a global, multi-disciplinary team that’s putting the innovative power of technology to work and transforming tomorrow. At HARMAN Corporate, you are integral to our company’s award-winning success.

• Enrich your managerial and organizational talents – from finance, quality, and supply chain to human resources, IT, sales, and strategy
• Augment your comprehensive skillset with expert training across decision-making, change management, leadership, and business development
• Obtain 360-degree support throughout your career life cycle, from early-stage to seasoned leader

What You’ll Be Part Of

As the Incident Response Leader, you will serve as HARMAN’s primary authority for enterprise cyber incident response, leading the coordination, investigation, containment, and recovery of cybersecurity incidents across the organization. This is an individual contributor role reporting to the Director of Cybersecurity Operations. You will be responsible for establishing and evolving incident response capabilities, driving response readiness, and ensuring effective execution during security events. Working closely with Cyber Security Operations, Infrastructure, Legal, Privacy, Compliance, and business stakeholders, you will play a critical role in protecting HARMAN’s global technology environment and reducing organizational risk.

How You’ll Make An Impact

• Lead the end-to-end management of cybersecurity incidents, including triage, investigation, containment, eradication, recovery, and post-incident activities.
• Serve as the incident commander for major cybersecurity events, coordinating technical and business stakeholders throughout the response lifecycle.
• Develop, maintain, and continuously improve incident response processes, playbooks, escalation procedures, and communication frameworks.
• Coordinate response activities across Cyber Security Operations, Infrastructure, Cloud, End User Services, Legal, Privacy, Human Resources, and external partners.
• Conduct detailed incident analysis to determine root cause, business impact, and corrective actions.
• Lead post-incident reviews and drive remediation efforts to strengthen HARMAN’s security posture and operational resilience.
• Develop and execute incident response tabletop exercises, simulations, and readiness assessments.
• Establish metrics, reporting, and executive dashboards to measure incident response effectiveness and program maturity.
• Partner with threat intelligence, vulnerability management, and security operations teams to proactively identify and mitigate emerging threats.
• Manage relationships with external incident response partners, cybersecurity vendors, and service providers supporting incident response activities.
• Provide guidance to leadership during significant security events and communicate incident status, risks, and recovery plans to stakeholders.
• Stay current on emerging threats, attack techniques, industry trends, and best practices to continuously enhance HARMAN’s incident response capabilities.

What Makes You A Strong Fit

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or equivalent experience.
• 5+ years of experience in cybersecurity, security operations, incident response, digital forensics, or related disciplines.
• Demonstrated experience leading complex cybersecurity investigations and coordinating enterprise incident response activities.
• Strong understanding of cyber threat actor tactics, techniques, and procedures (TTPs) and modern attack methodologies.
• Experience with incident response frameworks, security operations processes, and cyber crisis management.
• Knowledge of enterprise security technologies, including SIEM, EDR, identity security, cloud security, email security, and network security platforms.
• Ability to independently lead high-severity incidents while coordinating diverse technical and business stakeholders.
• Strong analytical and problem-solving skills with the ability to make effective decisions in high-pressure situations.
• Experience developing incident response playbooks, operational procedures, and security governance standards.
• Excellent written, verbal, and presentation skills with the ability to communicate effectively with both technical teams and executive leadership.

Bonus Points if You Have

• GIAC Certified Incident Handler (GCIH), GCFA, GCFE, or similar incident response and forensics certifications.
• CISSP, CISM, or equivalent cybersecurity certification.
• Experience supporting incident response activities within global enterprise environments.
• Knowledge of digital forensics, malware analysis, and threat hunting methodologies.
• Experience leading cyber crisis exercises and executive tabletop simulations.
• Familiarity with regulatory, privacy, and breach notification requirements across multiple jurisdictions.

Things To Know

What You Can Expect

• A hybrid work environment that balances flexibility with in-person collaboration, with most office-based roles onsite three days a week.
• Access to employee discounts on HARMAN and Samsung products (including JBL, Harman / Kardon, AKG, and others)
• Learning and development opportunities through our award-winning HARMAN University programs
• Wellness benefits designed to support your overall well-being
• Access to the HARMAN campus fitness center and cafeteria, where available
• An inclusive and diverse work environment that supports both your professional and personal development

Pay Transparency

The above represents the annual gross base salary range for this role.

Variable compensation and allowances: Dependent on the position offered, other forms of compensation may also be available, such as quarterly or annual bonus pay, commission payments, long term incentive compensation, or certain allowances. Further details will be made available as part of the recruitment process.

How we set pay: The pay posted is a reasonable estimate of the wage range anticipated for this position. Pay is determined using objective, job-related criteria such as relevant experience, skills, role scope/responsibilities, and location-based market factors (where applicable). In appropriate circumstances, based on objective, job-related factors, the final determination on pay may deviate from the posted range.

Pay history: Please do not include current or past pay information in your application. We do not request pay history as part of our recruitment process.

Benefits: HARMAN is interested in supporting the health and wellbeing of employees and offers a range of benefits. Offerings vary by country and employment arrangement and reflect a combination of statutory requirements and company-provided programs. These may include paid time off and holidays, sick and family leave, as well as health and wellbeing support and retirement or savings plans where applicable, along with other locally relevant benefits. Further details will be made available as part of the recruitment process.

About HARMAN: Where Innovation Unleashes Next-Level Technology

Ever since the 1920s, we’ve been amplifying the sense of sound. Today, that legacy endures, with integrated technology platforms that make the world smarter, safer, and more connected.

Across automotive, lifestyle, and digital transformation solutions, we create innovative technologies that turn ordinary moments into extraordinary experiences. Our renowned automotive and lifestyle solutions can be found everywhere, from the music we play in our cars and homes to venues that feature today’s most sought-after performers, while our digital transformation solutions serve humanity by addressing the world’s ever-evolving needs and demands. Marketing our award-winning portfolio under 16 iconic brands, such as JBL, Mark Levinson, and Revel, we set ourselves apart by exceeding the highest engineering and design standards for our customers, our partners and each other.

You Belong Here

HARMAN is committed to making every employee feel welcomed, valued, and empowered. No matter what role you play, we encourage you to share your ideas, voice your distinct perspective, and bring your whole self with you – all within a support-minded culture that celebrates what makes each of us unique. We also recognize that learning is a lifelong pursuit and want you to flourish. We proudly offer added opportunities for training, development, and continuing education, further empowering you to live the career you want.

HARMAN is proud to be an Equal Opportunity employer. HARMAN strives to hire the best qualified candidates and is committed to building a workforce representative of the diverse marketplaces and communities of our global colleagues and customers. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. HARMAN attracts, hires, and develops employees based on merit, qualifications and job-related performance. ( www.harman.com )

HARMAN is committed to providing reasonable accommodations to applicants with disabilities. If you need assistance or an accommodation during the application process, please contact us at [e-mail] . Requests will be considered on a case-by-case basis in accordance with applicable law.

Please be aware that HARMAN recruiters will always communicate with you from an '@harman.com', ‘@careers.harman.com’ or ‘@harmanglobal.avature.net’ email address. We will never ask for payments, banking, credit card, personal financial information or access to your LinkedIn/email account during the screening, interview, or recruitment process. If you are asked for such information or receive communication from an email address not ending in one of the above email domains about a job with HARMAN, please cease communication immediately and report the incident to us through: [e-mail].