Senior Cyber Incident Response Lead

KeyBank; Brooklyn (OH); On-site; USD 96,000 - 181,000; Full time

Job summary

KeyBank is seeking an experienced Cyber Incident Response Lead to join the Cyber Defense team within Corporate Information Security in Brooklyn, OH. You will lead high-impact incident response activities, coordinating across Cyber Defense, technology, business, risk, legal, communications, and executives, while maturing the incident response program.

The role requires strong incident response experience, executive communication skills, and the ability to drive playbooks, tabletop exercises,

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Business Continuity, Risk Management, or related field - or equivalent practical experience.
• 8+ years of experience in cybersecurity, incident response, security operations, cyber risk management, technology incident management, or related disciplines.
• Strong executive communication skills and ability to translate technical incidents into business impact, risk, actions taken, and next steps.
• Experience leading cross-functional teams during high-pressure situations and driving clarity, accountability, and timely decision-making.
• Experience developing incident response plans, playbooks, runbooks, procedures, executive summaries, or after-action reports.

Responsibilities

• Lead cybersecurity incident response coordination for significant cyber events, ensuring triage, escalation, containment coordination, stakeholder engagement, and resolution tracking.
• Serve as the primary Cyber Defense incident response lead during active incidents, coordinating with multiple enterprise partners.
• Ensure accurate, timely incident timelines, actions taken, evidence, communications, and lessons learned.
• Develop, mature, and maintain the Cyber Defense incident response program, including frameworks, operating models, governance, templates, metrics, and improvements.
• Create and maintain incident response playbooks and runbooks to support consistent execution during events.
• Design, facilitate, and evaluate tabletop exercises and simulations to test readiness and drive remediation actions.
• Lead post-incident reviews, documenting root cause, response effectiveness, and ownership of actions.
• Develop concise executive reporting for Cyber Defense leadership and board-level audiences as appropriate.
• Establish and track incident response metrics, including timelines, documentation quality, and program maturity.
• Engage stakeholders across business, technology, risk, legal, compliance, communications, and third-party teams.

Skills

Incident response experience

Executive communication

Tabletop exercises

Cross-functional leadership

Documentation & reporting

Threat intelligence familiarity

Security operations basics (SIEM/EDR/S

Education

Bachelor's degree in Cybersecurity or related field

Tools

ServiceNow Security Incident Response

Palo Alto Cortex XSIAM/XSOAR

Job description

KeyBank is seeking an experienced Cyber Incident Response Lead to join the Cyber Defense team within Corporate Information Security in Brooklyn, OH. You will lead high-impact incident response activities, coordinating across Cyber Defense, technology, business, risk, legal, communications, and executives, while maturing the incident response program.

The role requires strong incident response experience, executive communication skills, and the ability to drive playbooks, tabletop exercises,