Senior Security Incident Response Lead

Hyundai Autoever America; Irvine (CA); On-site; USD 119,000 - 183,000; Full time

Benefits offered by this job

Medical/dental coverage

Generous PTO

Education assistance

Annual merit increase eligibility

Job summary

Hyundai AutoEver America is seeking an experienced Incident Response Manager to coordinate enterprise-wide cybersecurity incident response activities across our technology environment in Irvine, CA. This senior role partners with internal teams, vendors, and MSSPs to ensure timely and effective responses to incidents.

The position requires 8+ years in cybersecurity operations and incident response, with both foundational and advanced knowledge of threat detection, SIEM/EDR tools, and incident

Qualifications

• 8+ years in cybersecurity operations, incident response, or related security functions.
• Experience coordinating investigations with internal teams, vendors, and MSSPs.
• Knowledge of threat landscapes, attack vectors, and MITRE ATT&CK.
• Ability to analyze security events and communicate findings to stakeholders.

Responsibilities

• Lead enterprise-wide incident response activities across the IT environment.
• Coordinate investigations with internal teams, vendors, and MSSPs.
• Monitor and analyze security event data to identify threats.
• Maintain and improve the SIRP aligned with NIST/ISO 27035/MITRE ATT&CK.
• Support tabletop exercises and readiness assessments.
• Track incident response metrics and reporting requirements.

Skills

Cybersecurity operations

Incident response

Threat detection

Security monitoring

Stakeholder communication

Education

Bachelor's degree in Cybersecurity/IT/CS or related

Master's degree or higher (preferred)

Tools

SIEM

EDR

Threat intelligence platforms

Job description

Hyundai AutoEver America is seeking an experienced Incident Response Manager to coordinate enterprise-wide cybersecurity incident response activities across our technology environment in Irvine, CA. This senior role partners with internal teams, vendors, and MSSPs to ensure timely and effective responses to incidents.

The position requires 8+ years in cybersecurity operations and incident response, with both foundational and advanced knowledge of threat detection, SIEM/EDR tools, and incident