Senior Cyber Defense Lead: Incident Response & Automation

NBMBAA; Chicago (IL); Hybrid; USD 133,000 - 218,000; Full time

Benefits offered by this job

Hybrid work environment (up to 2 days/

Tuition Reimbursement

Student Loan Repayment Assistance

Technology Stipend

Generous PTO and Parental leave

401k Employer Match

Health benefits

Job summary

The Options Clearing Corporation (OCC) is seeking a Lead Associate Principal to direct cyber incident response, security monitoring, and digital forensics across the enterprise. You will champion automation, alert optimization, and continuous improvement of SOC processes, supported by strong project management experience.

You will supervise incident management, security analysis, and forensic investigations, ensuring regulatory compliance and thorough documentation while enabling 24x7 on-call

Qualifications

• 7+ years hands-on security operations experience including interdisciplinary experience in multiple domains.
• Familiarity with threat actor capabilities and network security methodologies.
• Strong communication, judgment and consultation skills, plus project management ability.
• Shift work and 24x7 on-call responsibilities are required.

Responsibilities

• Lead cyber security incident responders in response activities including investigation, coordination, review, closure, and reporting.
• Provide Tier-2 support for alert tuning and validation, and drive automation/AI to optimize SOC efforts.
• Deploy and maintain digital forensic solutions and lead investigations while preserving evidence for regulatory requirements.
• Develop and enhance SOC processes, procedures, and SOAR/AI-driven automation; participate in post-incident reviews.

Skills

Team Leadership

Incident Response

SIEM

SOAR

EDR

Regulatory Controls

Project Management

Communication

Tools

SIEM

SOAR

EDR

DLP

Job description

The Options Clearing Corporation (OCC) is seeking a Lead Associate Principal to direct cyber incident response, security monitoring, and digital forensics across the enterprise. You will champion automation, alert optimization, and continuous improvement of SOC processes, supported by strong project management experience.

You will supervise incident management, security analysis, and forensic investigations, ensuring regulatory compliance and thorough documentation while enabling 24x7 on-call