Hybrid Cyber Defense Lead - Incident Commander

AFL; South Carolina; Hybrid; USD 120.000 - 170.000; Vollzeit

Benefits dieser Stelle

Hybrid in-office schedule

401K match

Tuition reimbursement

Medical, dental, vision insurance

Career advancement opportunities

Zusammenfassung

AFL is seeking a Cyber Defense Lead to head security operations, threat monitoring, investigation, and response across a global IT landscape. You will own the security stack, govern a managed detection service, and lead incident response for high-severity events.

The role also sets technical direction for threat detection and response. Based in Duncan, SC with hybrid scheduling, you will mentor others, build runbooks, and drive automation across detection, response, and service management

Qualifikationen

• Bachelor's degree in computer science, information technology, cybersecurity or equivalent.
• Five+ years in security operations, with three+ in senior roles.
• Hands-on administration of enterprise EDR (CrowdStrike Falcon preferred).
• IR experience on business-impacting incidents: containment and post-incident reviews.
• Fluent in query languages for security analytics and log onboarding.
• Experience tuning detection content using production telemetry.
• Knowledge of MITRE ATT&CK for coverage decisions, not just terminology.
• Clear written and verbal communication with technical and leadership teams.

Aufgaben

• Own admin, tuning, and roadmap for endpoint detection, identity protection, and security analytics.
• Act as incident commander for high-severity security events and drive post-incident actions.
• Govern the managed detection and response provider relationship and reviews.
• Define agent scope, guardrails, and human gates; measure autonomous accuracy.
• Develop and refine detection content mapped to MITRE ATT&CK.

Kenntnisse

Security operations

Incident response

MITRE ATT&CK

CrowdStrike Falcon

Log onboarding

Query language

Automation playbooks

Ausbildung

Bachelor’s degree in CS/IT/Cybersecurity

Tools

CrowdStrike Falcon

Security analytics platforms

Jobbeschreibung

AFL is seeking a Cyber Defense Lead to head security operations, threat monitoring, investigation, and response across a global IT landscape. You will own the security stack, govern a managed detection service, and lead incident response for high-severity events.

The role also sets technical direction for threat detection and response. Based in Duncan, SC with hybrid scheduling, you will mentor others, build runbooks, and drive automation across detection, response, and service management