Senior Incident Commander, Security Operations & Response

Lowe's Companies, Inc.; Charlotte (NC); On-site; USD 112,000 - 212,000; Full time

Job summary

Lowe’s, a Fortune 100 home improvement company, is seeking a Lead Analyst – Security Operations Incident Response in Charlotte to act as the incident commander for major cybersecurity events. You will translate complex threats into business impact, coordinate cross‑functional teams, and drive automated improvements to speed investigations and response.

You will lead post‑incident reviews, craft playbooks, and deliver concise executive updates on risk, severities, and remediation priorities,

Qualifications

• 7–10+ years in cybersecurity with strong IR/CSOC leadership experience.
• Experience handling high‑severity, enterprise incidents with multiple teams.
• Familiarity with NIST, SANS, MITRE ATT&CK and cloud environments (AWS/Azure/GCP).
• Excellent crisis leadership, stakeholder management, and executive communication.

Responsibilities

• Lead and coordinate response to high‑severity cybersecurity incidents.
• Own lifecycle from identification through recovery and post‑incident review.
• Establish severity, escalation paths, and engagement with stakeholders.
• Act as Incident Commander for major incidents coordinating technical and business teams.
• Maintain timelines, logs, and evidence; deliver executive briefings.

Skills

Security Operations

Incident Response

Threat Management

Crisis leadership

Executive communication

Documentation

Analytical thinking

Tools

SIEM

SOAR

EDR/XDR

IAM

Job description

Lowe’s, a Fortune 100 home improvement company, is seeking a Lead Analyst – Security Operations Incident Response in Charlotte to act as the incident commander for major cybersecurity events. You will translate complex threats into business impact, coordinate cross‑functional teams, and drive automated improvements to speed investigations and response.

You will lead post‑incident reviews, craft playbooks, and deliver concise executive updates on risk, severities, and remediation priorities,