Lead Security Operations & Incident Response – Hybrid NY

Davis Polk & Wardwell LLP; New York (NY); Hybrid; USD 240,000 - 300,000; Full time

Job summary

Davis Polk & Wardwell LLP in New York is seeking a Manager of Security Operations & Incident Response to lead detection, response, and governance across the Firm’s security program. This hands-on leadership role requires incident command experience and the ability to coordinate with legal counsel and external partners.

You will own the detection program, manage the MSSP relationship, and drive remediation of vulnerabilities and exposure, while building and mentoring a small senior team in a

Qualifications

• Minimum of 8 years’ experience in information security, including at least 3 years leading incident response or security operations.
• A Degree in Information Technology, Engineering or a related field.
• Key industry certifications such as GCIH, GCFA, GCIA, CISSP or CISM preferred.
• Hands-on depth with SIEM, endpoint detection and response; this is not a purely supervisory role.
• Experience governing a managed security service provider and reviewing provider output.

Responsibilities

• Serve as incident commander for security incidents, directing containment, evidence preservation, scope determination, eradication and recovery.
• Operate the incident response framework, triage events, incidents, severities and escalation.
• Produce incident documentation to evidentiary standards and coordinate with counsel and stakeholders.
• Lead post-incident reviews and drive root cause remediation and tabletop exercises.
• Own the detection program across SIEM, endpoint, identity, email and browser telemetry.
• Manage the relationship with the managed detection and response provider, including service levels and expansion of scope.
• Translate threat intelligence into detections, hunts and briefings; monitor threats relevant to the legal sector.
• Build, develop and grow a small senior security team; set priorities and on-call expectations.

Skills

Incident command

SIEM expertise

EDR / detection engineering

Threat detection

Communication with counsel

Governance & compliance

Vulnerability remediation

Education

Degree in IT/Engineering or related field

Industry certifications (GCIH/GCFA/GCIA/CISSP/CISM) preferred

Tools

SIEM platforms

EDR tools

Job description

Davis Polk & Wardwell LLP in New York is seeking a Manager of Security Operations & Incident Response to lead detection, response, and governance across the Firm’s security program. This hands-on leadership role requires incident command experience and the ability to coordinate with legal counsel and external partners.

You will own the detection program, manage the MSSP relationship, and drive remediation of vulnerabilities and exposure, while building and mentoring a small senior team in a