Lead Security Operations & Incident Response

McKinsey & Company; Boston (MA); On-site; USD 174,000 - 178,000; Full time

Benefits offered by this job

Competitive salary

Comprehensive benefits package

Mentorship program

Job summary

McKinsey & Company is seeking an experienced security leader to direct incident response within the Americas SOC. You will mentor analysts, own end-to-end incident management, and act as incident commander for high-impact events across endpoint, network, and cloud environments.

The role emphasizes leadership, cross-functional collaboration, and strengthening detection capabilities while representing the SOC to internal stakeholders. US citizenship is required.

Qualifications

• 5+ years of hands-on experience in Security Operations, Cyber Defense, Incident Response, or Threat Detection.
• 2+ years in a people-management or team-lead capacity.
• US Citizenship is required due to the nature of this role.
• Industry certifications such as GCIH, GCFA, GCFE, CISSP, CEH, or equivalent are preferred.
• Strong understanding of security monitoring and incident response across enterprise and multi-cloud environments (AWS, Azure, GCP).
• Hands-on experience with EDR/XDR, SIEM, and cloud security tools; knowledge of Defender EDR and Cortex XSIAM preferred.
• Proficiency in using AI/LLM tools to build automations and scripts.

Responsibilities

• Lead incident response operations within our SOC for the Americas time zones.
• Own end-to-end management of cybersecurity incidents and their resolution.
• Act as incident commander for high-impact security events.
• Direct log analysis across endpoint, network, and cloud environments.
• Mentor and develop a team of security analysts and drive SOC process improvements.

Skills

Incident Response

Security Operations

People Leadership

Cloud Security

AI/LLM Security

Communication

Threat Detection

Education

GCIH

GCFA

GCFE

CISSP

CEH

Tools

EDR/XDR

SIEM

Microsoft Defender EDR

Cortex XSIAM

Job description

McKinsey & Company is seeking an experienced security leader to direct incident response within the Americas SOC. You will mentor analysts, own end-to-end incident management, and act as incident commander for high-impact events across endpoint, network, and cloud environments.

The role emphasizes leadership, cross-functional collaboration, and strengthening detection capabilities while representing the SOC to internal stakeholders. US citizenship is required.