Cyber Defense Operations & Incident Response Lead

Fox Rothschild LLP; Charlotte (NC); On-site; USD 100,000 - 130,000; Full time

Job summary

Fox Rothschild LLP is seeking a Senior Analyst in Cybersecurity Operations & Response to support and enhance the Firm’s security posture. You will assist with security operations, incident response, and threat/vulnerability management to protect firm systems and data.

The role covers developing playbooks, participating in incident response, and delivering security metrics while coordinating with internal teams and vendors. A fast-paced, on-call rotation may be required.

Qualifications

• Minimum five years information security experience including operations, incident response, and threat/vulnerability management.

Responsibilities

• Support day-to-day operation and execution of the Cybersecurity Operations & Response program.
• Assist with administration and continuous improvement of threat and vulnerability management program.
• Develop, maintain, and update playbooks, policies, standards, and procedures.
• Participate in cyber event response activities including investigation, containment, remediation, and recovery.
• Serve as a primary resource for security operations monitoring and incident triage.
• Perform threat and vulnerability assessments and assist with remediation.
• Monitor security tools and alerts to identify and elevate incidents.
• Develop and distribute reporting and metrics on security operations and incidents.
• Collaborate with internal teams and third-party providers to support security initiatives.

Skills

Cybersecurity operations

Incident response

Threat management

Vulnerability management

Security monitoring

Analytical thinking

Communication skills

Team collaboration

Education

Bachelor's degree in information security

Tools

NIST

MITRE ATT&CK

Job description

Fox Rothschild LLP is seeking a Senior Analyst in Cybersecurity Operations & Response to support and enhance the Firm’s security posture. You will assist with security operations, incident response, and threat/vulnerability management to protect firm systems and data.

The role covers developing playbooks, participating in incident response, and delivering security metrics while coordinating with internal teams and vendors. A fast-paced, on-call rotation may be required.