Lead, Cyber Threat Response

The Estée Lauder Companies Inc.; New York (NY); On-site; USD 105,100 - 172,600; Full time

Benefits offered by this job

Health insurance

Retirement savings plans

Paid holidays

Job summary

The Estée Lauder Companies Inc. in New York City is seeking a CTR Lead to coordinate incident response, investigate threats, and guide containment, remediation, and recovery during active security events.

You will collaborate with Security Operations, IT, Legal, Privacy, and external partners to ensure timely decisions and consistent execution. This junior leadership role supports playbooks, tabletop exercises, and after‑action reviews, with on‑call responsibilities outside normal hours to

Qualifications

• Bachelor’s degree in Cybersecurity, IT, CS, or related field; equivalent experience considered.
• 3–5 years in threat management, cybersecurity, incident response, or related work.
• Working knowledge of cybersecurity frameworks and incident response best practices.
• Ability to assess event criticality and business impact with context and detail.

Responsibilities

• Coordinate incident response activities across triage, containment, remediation, recovery, and closure.
• Investigate threat activity by reviewing evidence, assessing impact, and documenting findings.
• Lead response efforts for emerging threats including zero‑day vulnerabilities and third‑party breaches.
• Collaborate with internal teams and external partners for timely decision‑making and escalation.
• Maintain playbooks, workflows, and response documentation for consistent actions.
• Support tabletop exercises, lessons learned, and after‑action reviews to improve readiness.
• Lead or support on‑call emergency cyber incident response outside normal hours.

Skills

Threat management

Incident response

Security operations

Threat hunting

Digital forensics

Vulnerability management

Education

Bachelor's degree in Cybersecurity

Tools

SIEM

EDR

SOAR

Case management

Digital forensic tools

Job description

The Estée Lauder Companies Inc. is one of the world’s leading manufacturers, marketers, and sellers of quality skin care, makeup, fragrance, and hair care products, and is a steward of luxury and prestige brands globally. The company’s products are sold in approximately 150 countries and territories under brand names including: Estée Lauder, Aramis, Clinique, Lab Series, Origins, M·A·C, La Mer, Bobbi Brown Cosmetics, Aveda, Jo Malone London, Bumble and bumble, Darphin Paris, TOM FORD, Smashbox, AERIN Beauty, Le Labo, Editions de Parfums Frédéric Malle, GLAMGLOW, KILIAN PARIS, Too Faced, Dr.Jart+, the DECIEM family of brands, including The Ordinary and NIOD, and BALMAIN Beauty.

Job Overview

The Cyber Threat Response (CTR) Lead is a junior leadership role supporting incident coordination, security event investigation, and security operations. The CTR Lead coordinates triage, containment, remediation, recovery, and closure activities during active security events while keeping stakeholders informed and documenting actions, findings, and outcomes. The CTR Lead partners with Security Operations, IT, Legal, Privacy, and external partners to support timely decisions, consistent execution, and continuous improvement of response readiness. This position is based in NYC and collaborates with global teams across the company.

Responsibilities

• Cyber Threat Response
  • Investigate threat activity by reviewing evidence, assessing impact, and documenting findings.
  • Coordinate incident response activities across triage, containment, remediation, recovery, and closure.
  • Lead response efforts for emerging threats, including zero‑day vulnerabilities, third‑party breaches, and threat hunting findings.
  • Collaborate with internal teams and external partners for timely decision‑making, escalation, and resolution.
  • Maintain playbooks, workflows, and response documentation to support consistent execution.
  • Support tabletop exercises, lessons learned, and after‑action reviews to improve response readiness.
  • Lead or support on‑call emergency cyber incident response activities outside normal business hours, including nights and weekends during active incidents.
• Other Support Activities
  • Support insider threat reviews, threat hunting, and executive protection activities by analyzing security data and presenting findings.
  • Assist with digital forensics and eDiscovery through evidence collection, preservation, analysis, and documentation.
  • Contribute to projects and assessments that strengthen security operations and response maturity.
  • Support forensics lab maintenance and case management improvements.

Qualifications

• Education & Experience
  • Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Digital Forensics, or a related field; equivalent experience will be considered.
  • 3–5 years of experience in threat management, cybersecurity, security operations, incident response, threat hunting, digital forensics, vulnerability management, or related technical work.
  • Working knowledge of cybersecurity frameworks, standards, and incident response best practices.
  • Ability to assess event criticality and business impact with attention to detail and operational context.

Technical Skills

• Knowledge of incident response, threat detection, security monitoring, and cyber investigations.
• Experience with SIEM, EDR, SOAR, case management, and digital forensic tools.
• Familiarity with MITRE ATT&CK, the NIST Cybersecurity Framework, and incident response methodologies.
• Knowledge of operating systems, cloud, networking, identity, endpoint security, and logging concepts.
• Ability to explain findings, risks, and recommended actions to technical and non-technical audiences.

Certifications (Preferred)

• GCIH, GCFA, GCIA, GCTI, OSCP, CHFI, or other relevant cybersecurity certifications

Soft Skills

• Analytical, organized, detail-oriented, and able to follow structured processes.
• Communicates clearly with technical and non-technical audiences.
• Collaborates effectively across technical, business, and vendor teams.
• Demonstrates developing leadership, sound judgment, accountability, and ownership.
• Manages priorities, remains calm during active events, and escalates appropriately.

Pay Range

Anticipated Base Salary Range $105,100.00 to $172,600.00 (Depending on qualifications, skills, experience and/or budget), based on a 40 hour work week (range to be scaled accordingly). In addition, The Estée Lauder Companies offers a variety of benefits to eligible employees, including health insurance coverage (medical, dental, and vision insurance), wellness and family support programs, life and disability insurance, retirement savings plans, education-related programs, paid holidays and vacation time. In addition, the Company maintains highly competitive incentive compensation programs (role eligibility may vary based on terms of the respective plan(s)).

You may be eligible to participate in the applicable Commission/Bonus Plan, under the plan guidelines in effect at the time of hire. Additional details regarding the commission plan will be provided as part of your onboarding.

Equal Opportunity Employer

We are an equal-opportunity employer. Minorities, women, veterans, and individuals with disabilities are encouraged to apply. Accommodations for job applicants with disabilities are available on request.

Artificial Intelligence is used to compare and screen an applicant’s resume as against the posted job description.