Cyber Defense Incident Lead: Strategic Response Champion

KeyCorp; Brooklyn (OH); Hybrid; USD 96,000 - 181,000; Full time

Benefits offered by this job

In-office presence

Flexible work options

Job summary

KeyBank is seeking a Cyber Incident Response Lead in Brooklyn, OH to strengthen enterprise readiness. You will lead high-impact incident response activities, coordinate across cyber defense, technology, risk, legal, and communications, and mature the incident response program with playbooks and runbooks.

The role requires strong executive communication, multi-team leadership, and experience with tabletop exercises, post-incident reviews, and governance reporting.

Qualifications

• Bachelor’s degree or equivalent practical experience.
• 8+ years in cybersecurity, incident response, or related fields.
• Experience coordinating incidents in complex enterprises.
• Knowledge of incident response lifecycle: prep, detect, analyze, contain, recover, improve.
• Ability to lead cross-functional teams during high-pressure incidents.
• Strong executive reporting and after-action skills.
• Experience with tabletop exercises or crisis simulations.
• Familiarity with security operations (SIEM, EDR/XDR, SOAR) and cloud security.

Responsibilities

• Lead cybersecurity incident response coordination for significant events.
• Coordinate across multiple cyber defense and technology teams.
• Document incident timelines, actions, evidence, and lessons learned.
• Develop and mature the incident response program and playbooks.
• Design and facilitate tabletop exercises and simulations.
• Lead post-incident reviews and action ownership.
• Create executive-level incident reports for leadership and boards.
• Track metrics and drive continuous improvement.

Skills

Incident response leadership

Executive communication

Tabletop exercises

Cross-functional coordination

Documentation & case management

Education

Bachelor’s degree in Cybersecurity, Computer Science, IT, Business Continuity, Risk Management, or related field

Tools

SIEM

EDR/XDR

SOAR

Palo Alto Cortex XSIAM/XSOAR/XDR

Job description

KeyBank is seeking a Cyber Incident Response Lead in Brooklyn, OH to strengthen enterprise readiness. You will lead high-impact incident response activities, coordinate across cyber defense, technology, risk, legal, and communications, and mature the incident response program with playbooks and runbooks.

The role requires strong executive communication, multi-team leadership, and experience with tabletop exercises, post-incident reviews, and governance reporting.