24/7 Incident Response Lead

Global Payments; Columbus (GA); On-site; USD 110,000 - 170,000; Full time

Job summary

Global Payments is seeking a cybersecurity incident management professional to coordinate containment, eradication and post-incident activities on the GCIM team in the United States. You will work closely with GSOC and risk teams to ensure rapid containment and effective remediation.

The role requires 2+ years in incident management or incident response, strong communication and knowledge of security operations, and a commitment to maintaining runbooks and improving the security posture of

Qualifications

• Bachelor's degree in Computer Science, Info Security, or related field, or equivalent work experience.
• Typically 2+ years of relevant Incident Management or Incident Response experience.
• Knowledge of network operations or engineering or system administration on Unix/Linux/Windows.
• Strong verbal and written communication skills.
• Ability to facilitate meetings and communicate results.
• Industry knowledge of threat landscapes and incident response processes.

Responsibilities

• Coordinate incident response in line with the corporate security incident response plan.
• Lead post-incident reviews, document root causes, and track remediation actions.
• Provide 24x7 on-call incident management support on rotation for critical incidents.
• Engage with Risk Management and Legal teams on data protection and lessons learned.
• Maintain runbooks and contribute to improving security posture.

Skills

Incident management

Incident response

Security operations

Communication skills

Education

Bachelor's degree or equivalent

Tools

SIEM systems

Unix/Linux

Cloud technologies

Job description

Global Payments is seeking a cybersecurity incident management professional to coordinate containment, eradication and post-incident activities on the GCIM team in the United States. You will work closely with GSOC and risk teams to ensure rapid containment and effective remediation.

The role requires 2+ years in incident management or incident response, strong communication and knowledge of security operations, and a commitment to maintaining runbooks and improving the security posture of