Cybersecurity Operations Leader: Incident Response & SOC

McKinsey; Boston (MA); On-site; USD 174,000 - 178,000; Full time

Benefits offered by this job

Competitive salary

Comprehensive benefits

Bonus eligibility

Job summary

McKinsey & Company in the United States is seeking a senior security leader to run incident response within the Americas SOC. You will own end-to-end management of cybersecurity incidents, direct the response as incident commander, and mentor a team of security analysts.

You will coordinate across endpoint, network, and cloud environments (AWS, Azure, GCP), drive detection improvements, and represent the SOC to internal stakeholders.

Qualifications

• US Citizenship is required due to the nature of this role supporting McKinsey RE incident response engagements
• 5+ years of hands-on experience in Security Operations, Cyber Defense, Incident Response, or Threat Detection
• 2+ years in a people-management or team-lead capacity
• Strong understanding of security monitoring, incident response across enterprise and multi-cloud environments (AWS, Azure, GCP), and AI/LLM-related security risks
• Hands-on experience with EDR/XDR, SIEM, and cloud security tools; strong working knowledge of Microsoft Defender EDR and Palo Alto Cortex XSIAM is preferred
• Proficiency in using AI/LLM tools to build automations and scripts, with the ability to mentor team members on their secure use
• Strong people-leadership skills with the ability to coach and develop a team of security analysts
• Excellent written and verbal communication skills, with the ability to convey technical findings to both technical and non-technical stakeholders

Responsibilities

• Lead incident response operations within our SOC for the Americas time zones
• Own end-to-end management of cybersecurity incidents as incident commander
• Direct log analysis across endpoint, network, and cloud environments
• Influence threat-hunting activities and drive SOC process improvements

Skills

Incident Response

SOC Leadership

Security Monitoring

Multi-Cloud (AWS/Azure/GCP)

EDR/XDR & SIEM

AI/LLM Automations

Team Management

Technical Communication

Education

Industry certifications such as GCIH, GCFA, GCFE, CISSP, CEH

Tools

Microsoft Defender EDR

Palo Alto Cortex XSIAM

EDR/XDR tools

SIEM

Cloud security tooling (AWS/Azure/GCP)

Job description

McKinsey & Company in the United States is seeking a senior security leader to run incident response within the Americas SOC. You will own end-to-end management of cybersecurity incidents, direct the response as incident commander, and mentor a team of security analysts.

You will coordinate across endpoint, network, and cloud environments (AWS, Azure, GCP), drive detection improvements, and represent the SOC to internal stakeholders.