Cyber Defense Lead: Incident Response & SOC Automation

The Options Clearing Corporation (OCC); Chicago (IL); Hybrid; USD 133,000 - 218,000; Full time

Benefits offered by this job

Hybrid work environment

Tuition Reimbursement

Student Loan Repayment Assistance

Technology Stipend

PTO and Parental leave

401k Employer Match

Health benefits

Job summary

The Options Clearing Corporation (OCC) is seeking a Lead Associate Principal to drive cyber incident response, security monitoring, and digital forensics across the enterprise. This role champions automation, alert optimization, and continuous SOC process improvement, supported by project management experience.

Ideal candidates bring seven or more years of hands-on security operations, experience with SIEM, SOAR, and EDR, and strong leadership with cross-functional collaboration.

Qualifications

• Seven years or more in security operations with cross-disciplinary experience.
• Experience with security controls and regulatory understanding.
• Strong written and verbal communication and analytical skills.

Responsibilities

• Lead cyber security incident responders in response activities including investigation, coordination, review, closure, and reporting.
• Tier-2 support of alerts and validating tuning requests.
• Alert tuning and reduction.
• Lead Automation/AI efforts to optimize security operations effort.
• Ensure accurate documentation.
• Monitor security alerts and events from various security tools and technologies.
• Perform advanced analysis of security logs, network traffic, and endpoint data.
• Deploy and maintain digital forensic solutions and lead forensic investigations to determine scope, root cause, and impact of security incidents, preserving evidence in accordance with legal and regulatory requirements.
• Participate in post-incident reviews to identify areas for improvement.
• Stay current with the latest cybersecurity trends, threats, and technologies.
• Lead the development and enhancement of SOC processes, procedures, and SOAR/AI-driven automation.

Skills

Team Leadership

Cyber Incident Response

SOC Operations

Automation & AI

Security Monitoring

Communication

Project Management

Regulatory Knowledge (NIST)

Education

Bachelor's degree in CS/IS

CISSP or equivalent

Tools

SIEM

SOAR

EDR

DLP

Forensic Tools

Job description

The Options Clearing Corporation (OCC) is seeking a Lead Associate Principal to drive cyber incident response, security monitoring, and digital forensics across the enterprise. This role champions automation, alert optimization, and continuous SOC process improvement, supported by project management experience.

Ideal candidates bring seven or more years of hands-on security operations, experience with SIEM, SOAR, and EDR, and strong leadership with cross-functional collaboration.