Associate Director, Security Ops & Incident Commander

Morrison Foerster; New York (NY); Sur place; USD 184 000 - 257 000; Plein temps

Avantages offerts par ce poste

Medical, dental, vision coverage

Parental leave

Wellness program

Résumé du poste

Morrison Foerster seeks an Associate Director of Security Operations to lead incident response, threat detection engineering, and digital forensics within a 24/7 MDR/MSSP framework. The role collaborates with the CISO, CIIO, OGC, and IT teams to mature detections, automate playbooks, and drive data‑driven security enhancements across the firm.

Based in one of several US cities, you will act as incident commander for major events, manage staff and MSP relationships, and champion proactive

Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Systems, Cybersecurity, or a related field.
• CISSP or equivalent certification preferred; GIAC certs a plus.
• Advanced degree preferred but not required.

Responsabilités

• Lead the Firm's incident response program, including preparation, testing, response, recovery, and lessons learned.
• Serve as incident commander for critical incidents: run the bridge, set priorities, assign work.
• Investigate, contain, and resolve incidents hands-on with IT and forensics partners.
• Direct third‑party retainers for investigations and maintain privilege where applicable.
• Develop and test response playbooks and table-top exercises; track remediation actions.

Connaissances

Security leadership

Incident response

Threat detection engineering

MITRE ATT&CK

Cross-functional collaboration

Formation

Bachelor's degree in Information Security, CS, or related field

Outils

Microsoft Defender EDR/XDR

Microsoft Sentinel

Mimecast

Recorded Future

Vulnerability management tools

Description du poste

Morrison Foerster seeks an Associate Director of Security Operations to lead incident response, threat detection engineering, and digital forensics within a 24/7 MDR/MSSP framework. The role collaborates with the CISO, CIIO, OGC, and IT teams to mature detections, automate playbooks, and drive data‑driven security enhancements across the firm.

Based in one of several US cities, you will act as incident commander for major events, manage staff and MSP relationships, and champion proactive