INFORMATION SECURITY INCIDENT RESPONSE LEAD

Direct Staffing Inc; Colorado Springs (CO); On-site; USD 100,000 - 150,000; Full time

Benefits offered by this job

Bonus

Job summary

A leading company is seeking an Information Security Incident Response Lead to manage security incidents and lead proactive measures in a global enterprise. The role requires 8+ years of experience in Threat Management and a background in Computer Science, focusing on incident response and SIEM technologies.

Qualifications

• 8+ years of related experience in Threat Management.
• Deep technical skills in IDS/IPS and incident management.
• Experience with incident response processes.

Responsibilities

• Own detection, validation, containment, remediation of security events.
• Lead strategy and effectiveness of SIEM technology.
• Create and maintain security operations playbooks.

Skills

Threat Management

Incident Management

Communication

Organizational Skills

Technical Skills in IDS/IPS

Education

Bachelor's or Master's Degree in Computer Science

Tools

SIEM

Job description

INFORMATION SECURITY INCIDENT RESPONSE LEAD

• Full-time
• Department: Information Security
• Position: INFORMATION SECURITY INCIDENT RESPONSE LEAD
• Experience: 8-10 years
• Education: Bachelor's degree required, Master's preferred
• Benefits: Bonus

Job Description

We are seeking a highly skilled IT Security Threat and Incident Response Lead with a strong technical background in a large, global enterprise. The candidate should have solid experience in managing security incidents, responding to threats, and assessing risk.

The successful candidate will oversee incident response tools and processes, including proactive planning and prevention, as well as reactive detection and remediation. Responsibilities include developing operational playbooks, managing the incident response process, driving SIEM technology, and ensuring proper logging and monitoring across the company's infrastructure and applications. The role involves leading critical incident response steps and applying lessons learned to enhance proactive security measures.

Major Duties

1. Incident Response Process: Own detection, validation, containment, remediation, and communication for security events such as malware infections, potential compromises, and DDoS attacks.
2. Security Incident and Event Management (SIEM): Lead strategy and oversee the effectiveness of SIEM technology and processes, including tuning, log correlation, and reporting.
3. CITSIRT Team Lead: Respond to critical security incidents and lead escalation teams for containment and remediation.
4. Security Operations Playbooks: Create and maintain playbooks in collaboration with IT teams to ensure effective incident response.
5. Logging and Monitoring: Manage current logging and monitoring practices, develop a vision for the ideal state, and prioritize improvements.
6. Internal / External Engagements: Serve as an Information Security & Risk consultant for various projects and operations.

Qualifications

• Bachelor's or Master's Degree in Computer Science, Information Systems, or equivalent experience
• 8+ years of related experience in Threat Management
• Deep technical skills in IDS/IPS, logging, and incident management
• Experience with incident response processes and SIEM
• Ability to develop and socialize security playbooks across IT teams
• Strong communication skills to articulate risks and priorities effectively
• Organizational skills for tracking issues and actions
• Based in Colorado Springs, Santa Clara, or Singapore
• Experience in high-tech manufacturing organizations, focusing on Intellectual Property
• Proven success in developing operational strategies in complex environments
• Ability to collaborate with diverse teams and communicate effectively with both technical and non-technical audiences

All information will be kept confidential according to EEO guidelines.

Direct Staffing Inc