Associate Director, Security Operations & Incident Response

Morrison Foerster; Boston (MA); Ibrido; USD 175.000 - 244.000; Tempo pieno

Vantaggi offerti da questo lavoro

Medical, dental, vision coverage

Parental leave & family benefits

Wellness program

Education reimbursement

Profit-sharing

Descrizione del lavoro

Morrison Foerster is seeking an Associate Director of Security Operations to lead our 24/7 security program across on‑prem and cloud environments. You will drive incident response, threat hunting, and detection engineering while partnering with CISO and legal teams to manage risk in a high-stakes legal setting.

The role requires hands-on leadership, experience with enterprise security stacks (Microsoft Defender/Sentinel, Mimecast, Purview), and the ability to scale operations through SOAR

Competenze

• Bachelor's degree in Information Security, Computer Science, Information Systems, Cybersecurity, or related field.
• CISSP or equivalent certification is strongly preferred; GIAC certifications a plus.
• Advanced degree preferred but not required.

Mansioni

• Lead incident response program: preparation, testing, response, recovery, lessons learned.
• Act as incident commander for critical incidents; set priorities and direct actions.
• Investigate and contain incidents; coordinate with IT to fix weaknesses.
• Direct third-party responders and run investigations under attorney-client privilege.
• Develop and refine response playbooks and tabletop exercises.
• Maintain 24x7x365 escalation paths with MSP; participate in on-call rotation.
• Oversee security monitoring across networks, endpoints, email, and cloud.

Conoscenze

Incident response

Security operations

Threat hunting

Threat intelligence

MITRE ATT&CK

Formazione

Bachelor's in Info Sec

CISSP

GIAC certifications

Strumenti

Microsoft Defender

Microsoft Sentinel

Mimecast

Microsoft Purview

Recorded Future

SOAR

Descrizione del lavoro

Morrison Foerster is seeking an Associate Director of Security Operations to lead our 24/7 security program across on‑prem and cloud environments. You will drive incident response, threat hunting, and detection engineering while partnering with CISO and legal teams to manage risk in a high-stakes legal setting.

The role requires hands-on leadership, experience with enterprise security stacks (Microsoft Defender/Sentinel, Mimecast, Purview), and the ability to scale operations through SOAR