Principal, Incident Response Lead | Principal, Incident Response Lead

Archer; Jersey City (NJ); On-site; USD 140,000 - 190,000; Full time

Job summary

Archer, in collaboration with Verisk, seeks a Principal, Incident Response Lead to join the Enterprise Incident Response team. You will guide incident handling, mentor junior staff, and drive threat hunting across Verisk systems.

You will coordinate incident response activities, oversee investigations of alerts, and collaborate with Legal, Privacy, and Threat Management teams to improve tooling and processes. Prior experience in leadership and IR lifecycle required.

Qualifications

• Bachelor's degree in Information Systems, Cyber Security, or related sciences preferred.
• 5+ years of information security experience (with 2+ in incident response) or equivalent.
• Familiar with SIEM, EDR, IPS, email security, eDiscovery, and forensic tools.

Responsibilities

• Respond to security incidents following the incident response cycle.
• Investigate alerts to identify potential security incidents.
• Serve as incident lead on medium to high severity incidents when needed.
• Mentor junior team members through the incident response process.
• Coordinate incident response projects such as tabletop exercises with business leaders.
• Track, execute, and report lessons learned and post-incident activities.
• Assist in tuning and improving incident response tools and processes.
• Collaborate with Threat Management, Legal, and Privacy teams as needed.

Skills

Incident response

Threat hunting

Leadership

Stakeholder comms

Cloud/virtualization

Education

Bachelor's degree in Information Systems, Cyber Security, or related fields

Tools

SIEM

EDR

IPS

eDiscovery

Forensic tools

Job description

Archer is collaborating with Verisk to connect them with exceptional professionals for this role.

Description

Verisk is seeking a Principal, Incident Response Lead to join the Enterprise Incident Response team. The successful candidate will work as a team lead on the incident response team to identify and respond to information security incidents and proactively hunt for potential threats and intrusions to Verisk systems.

Responsibilities

• Respond to security incidents while following the incident response cycle.
• Investigate user reported and system generated alerts to identify potential security incidents.
• Be able to serve as incident lead as needed on medium to high severity incidents.
• Mentor junior members of the team throughout the incident response process.
• Coordinate and lead incident response adjacent projects such as tabletop exercises with business leaders.
• Follow through with the tracking, execution, and reporting of the lessons learned and post incident activities portion of the incident response cycle.
• Assist in the tuning and improvement of incident response tools and processes.
• Collaborate with and support other members of the larger Threat Management, Legal, and Privacy teams as needed.

Qualifications

• Bachelor's degree in Information Systems, Cyber Security, or related sciences preferred.
• 5+ years of information security experience (with 2+ of those in incident response) or the equivalent combination of education, technical training, or work/military experience. Information Security certifications a plus.
• Must have an understanding of operating systems, networking, information systems and technology, cloud and virtualization concepts as well as strong knowledge of common security tools including SIEM, EDR, IPS, email security, eDiscovery, and forensic tools.
• Must have a thorough understanding of incident response processes and procedures.
• Must be familiar with various threat actor methodologies, tactics, techniques, and procedures.
• Must be able to multi-task and work independently, or as a team lead, on moderate to complex assignments using independent professional discretion and judgment as well as transition quickly between projects.
• Demonstrated ability to communicate complex subjects regarding strategic and tactical processes of incident response to stakeholders of varying technical levels.