Incident Response Lead

Piper Companies; Philadelphia (Philadelphia County); Remote; USD 140,000 - 160,000; Full time

Job summary

Join a forward-thinking company as an Incident Response Lead, where you'll spearhead cybersecurity operations for a major hospital system. This exciting, fully remote role involves providing technical leadership and mentoring to analysts, coordinating incident response activities, and conducting vital research on threats and vulnerabilities. With a focus on enhancing service delivery and managing high-stakes security events, you will play a crucial role in safeguarding information systems. If you are passionate about cybersecurity and possess strong leadership skills, this position offers a unique opportunity to make a significant impact in a dynamic environment.

Benefits

Comprehensive benefit package

Cigna Medical

Cigna Dental

Vision insurance

401k with ADP

Paid Time Off (PTO)

Paid holidays

Sick Leave as required by law

Qualifications

• 7+ years in information technologies with a focus on information security.
• Demonstrated leadership and excellent interpersonal skills.

Responsibilities

• Lead cybersecurity operations response activities and mentor analysts.
• Coordinate 24x7 incident follow-up and manage investigations.

Skills

Cybersecurity Operations

Incident Response

Leadership

Technical Research

Vulnerability Management

Interpersonal Skills

Education

Bachelor's Degree in Information Technology or related field

Tools

SIEM/SOAR platforms

EDR tools

NDR tools

NBAD tools

Job description

Piper Companies is looking for an Incident Response Lead for a major hospital system. This individual would lead key cybersecurity operations response activities while providing technical direction and mentoring to one or more analysts. Additional responsibilities include coordinating 24x7 cybersecurity incident follow-up activities, technical research and analysis of threat and vulnerabilities affecting information systems, and participating in other cybersecurity program activities, including risk assessment, risk management, risk remediation, and others. The role will liaise with other members of the Information Services team, coordinate the response to cybersecurity incidents, and maintain written documentation as needed. Current experience as a Lead, Consultant, or Tier III analyst is required.

This is a 100% remote and full-time position. Required for this person to live in PA, NJ, MD, or DE.

Essential Duties of the Incident Response Lead:

• Provide technical leadership and coaching to multiple junior and senior SOC analysts, ensuring the highest quality in the delivery of response services.
• Assist management in process, service and SLA development, metrics creation, and management and maturity enhancements.
• Receiving escalations from the SOC team and conducting investigations as requested.
• Investigation of suspicious network and endpoint activity.
• Provide feedback on IR playbooks, runbooks, and plans as needed.
• Collaborates with information assurance advisors to address network and endpoint security risks.
• Participates in vulnerability management, including scanning and remediation.

Qualifications of the Incident Response Lead:

• 7+ years in information technologies, especially information security, such as security operations and incident response. Triage active high-stakes security events, including reviewing and applying security controls to detect, respond, prevent and remediate threats.
• Demonstrated leadership experience and excellent interpersonal skills.
• Ability to evaluate cybersecurity tools, systems, processes and make effective recommendations and changes.
• Experience with Incident Response lifecycle and supporting technologies.
• Hands-on experience with modern SIEM/SOAR platforms, EDR tools, NDR and/or NBAD tools, or the like.

Compensation for the Incident Response Lead:

• $140,000 - $160,000 (based on experience)
• 100% Remote
• Comprehensive benefit package; Cigna Medical, Cigna Dental, Vision, 401k w/ ADP, PTO, paid holidays, Sick Leave as required by law.

This job opens for applications on 1/31/2025. Applications for this job will be accepted for at least 30 days from the posting date.