Senior Global Incident Response Lead

Check Point Software; Chicago (IL); On-site; USD 120,000 - 180,000; Full time

Job summary

Check Point Software in Chicago is seeking an experienced SOC professional to lead incident response on a global scale. You will analyze compromises, coordinate across teams, and develop playbooks to rapidly stop threats.

You will perform security reviews, run tabletop exercises, and guide teams through enterprise environments. The role requires a decade of cybersecurity experience and willingness to travel to client sites.

Qualifications

• 10+ years of cybersecurity experience with incident response focus.
• Experience with security reviews and vulnerability risk assessments.
• Experience with enterprise security solutions and crisis management.
• Experience with attack simulations for training security teams.
• Ability to participate in on-call rotation, including weekends.
• Domestic and international travel may be required.
• Must be eligible to work in the US without sponsorship.

Responsibilities

• Manage daily incident handling for customer incidents globally.
• Perform incident response and forensic analysis of compromises.
• Direct incident response, prioritize efforts, and craft reports.
• Coordinate with teams to manage complex global incidents.
• Conduct large-scale compromise assessments for customer environments.
• Develop incident response plans and playbooks.
• Create attack scenarios for tabletop exercises with customers.
• Produce detailed incident reports and communicate findings.
• Maintain sandbox/test lab environments to analyze malware.
• Collaborate within a team to coordinate work actions.

Skills

Incident response

Forensic analysis

Vulnerability risk assessments

Security reviews

Attack simulation

Global incident management

On-call rotation

Tools

Automated analysis tools

Job description

Check Point Software in Chicago is seeking an experienced SOC professional to lead incident response on a global scale. You will analyze compromises, coordinate across teams, and develop playbooks to rapidly stop threats.

You will perform security reviews, run tabletop exercises, and guide teams through enterprise environments. The role requires a decade of cybersecurity experience and willingness to travel to client sites.