SOC Incident Commander

Optimum; Bethpage (NY); On-site; USD 82,000 - 137,000; Full time

Job summary

Optimum is seeking a Cyber Security Incident Commander to safeguard digital assets by quickly identifying, analyzing, and responding to cyber incidents. You will minimize breach impact and improve future response through proactive measures and program enhancements.

You will lead cross-functional teams, coordinate with executives, and drive incident response playbooks, tabletop exercises, and readiness drills to strengthen defenses across the enterprise.

Qualifications

• Bachelor’s degree in Computer Science or related field is required.
• 5+ years IT experience; 3+ years in Cyber Security/Incident Response.
• Experience with event/log analysis and security tools in large enterprise environments.
• Ability to communicate complex technical information clearly to leadership.
• Knowledge of networking, SIEM/EDR, encryption, and security tooling.

Responsibilities

• Lead incident command for mid-tier and major incidents; direct cross-functional teams.
• Monitor alerts and triage incidents by severity and business impact.
• Execute incident response playbooks to contain and remediate breaches.
• Prepare incident reports and lead post-incident reviews with lessons learned.
• Coordinate with law enforcement, regulators, and vendors; drive IR metrics.

Skills

Incident command

Forensics analysis

Threat hunting

AI tools

MITRE ATT&CK

Education

Bachelor's degree in CS

CISSP/GIAC

Tools

SIEM

EDR

Network security

Cloud forensics

Job description

Select how often (in days) to receive an alert:

SOC Incident Commander

Location: Bethpage, NY, US, 11714

Brand: Optimum

Requisition #: 12440

Are you looking to Optimize your life? Start your exciting path to a rewarding career today!

We are Optimum, a leader in the fast-paced world of connectivity, and we're seeking driven and enthusiastic professionals to join our team, empower lives, fuel businesses, and drive innovation. Connectivity is now longer a luxury, but a necessity. A career at Optimum means you'll be enabling progress and enhancing lives by providing reliable, high-speed connectivity solutions that keep the world connected. Our successes, now and in the future, are powered by our amazing product, a commitment to our people and culture, and the connections we make in our communities.

If you are resourceful, collaborative, and passionate about delivering consistent excellence, Optimum is for you!

Job Summary

As a Cyber Security Incident Commander, you will be responsible for safeguarding our organization's digital assets by promptly identifying, analyzing, and responding to cyber security incidents. You will play a critical role in minimizing the impact of security breaches and preventing future incidents through proactive measures and continuous improvement of our incident response processes.

Responsibilities

• Incident command & response
• Serve as incident commander for mid-tier and major incidents: own the full lifecycle and direct cross-functional workstreams (IT, Legal, Communications/PR, Engineering, executives).
• Monitor alerts and logs; triage and prioritize incidents by severity, criticality, and business impact.
• Execute incident response playbooks to contain, mitigate, and remediate breaches, then restore affected systems and close off unauthorized access.
• Act as primary point of contact to executive leadership and the CISO, translating technical events into business-impact briefings.
• Forensics & analysis
• Conduct host, network, memory, and cloud/hybrid forensics to determine root cause, scope, and extent of compromise — preserving evidence and maintaining chain of custody to legal and regulatory standards.
• Perform malware triage and static/dynamic analysis, including sandbox detonation, to establish capability and indicators of compromise.
• Integrate threat intelligence and proactively hunt for adversary TTPs mapped to MITRE ATT&CK.
• Leverage AI-enabled tooling to accelerate triage, enrichment, and investigation (AI First mindset).
• Readiness & continuous improvement
• Own post-incident reviews and root cause analyses; capture lessons learned and drive remediation to closure.
• Develop and mature incident-response playbooks, tabletop exercises, and readiness drills.
• Organize and execute security exercises including Purple Team Exercises, penetration tests, and audits.
• Define and report IR metrics (MTTD, MTTR) and major-incident tracking to leadership.
• Prepare detailed incident reports covering timeline, impact, remediation, and lessons learned.
• Coordinate with external parties including law enforcement, regulators, and third-party vendors.
• Develop security policies, procedures, and best practices; perform risk assessments and audits for compliance with industry standards.
• Evaluate and recommend security technologies, partnering with IT to design and implement solutions.
• Lead and mentor junior analysts, fostering continuous learning.
• Stay current on emerging threats, vulnerabilities, and industry trends.

Qualifications

• Bachelor’s degree in Computer Science or related field.
• Advanced certifications such as CISSP or incident-response/forensics GIAC certifications (GCIH, GCFA, GCFE, GNFA) are preferred
• Minimum five years experience in Information Technology
• Minimum three years of direct IT Security experience in Cyber Security operations and Incident Response
• Experience performing event and log analysis including one or more of the following: Anti-Virus, Intrusion Detection Systems, Firewalls, Active Directory, Web Proxies, Data loss prevention tools and other security tools found in large enterprise network environments; along with experience working with Security
• Ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means
• Solid working knowledge of networking technology and tools, firewalls, proxies, IDS/IPS, encryption, SIEM and EDR
• Experience writing scripts, tools, or methodologies to enhance the investigative process
• Working knowledge of the MITRE ATT&CK framework and the NIST incident response lifecycle (NIST SP 800-61).
• Hands-on experience with industry-standard forensic toolsets and with cloud forensics across major cloud and productivity platforms.
• Familiarity with AI tools and an AI First mindset.

At Optimum, every action and interaction we take part in, is driven by our three Guiding Principles: Do What’s Right, Drive One Optimum, and Make It Happen. These aren’t just words, they help us build trust, create real community, and embrace new ways of thinking. Our employees are empowered to do the right thing for our customers and co-workers and to recognize and reward these behaviors when we see them. It’s all part of the bigger picture of "Be The Difference" where each employee knows they have the power to enact real change, share new ideas, and understand that learning never stops.

If you have the drive to succeed and are ready to embark on a thrilling career, seize this opportunity today, and join our winning team. Together, we'll shape the future of connectivity.

All job descriptions and required skills, qualifications and responsibilities for a particular position are subject to modification by the Company from time to time, in the Company’s discretion based on business necessity.

We are an Equal Opportunity Employer committed to recruiting, hiring and promoting qualified people of all backgrounds regardless of gender, race, color, creed, national origin, religion, age, marital status, pregnancy, physical or mental disability, sexual orientation, gender identity, military or veteran status, or any other basis protected by federal, state, or local law.

The Company collects personal information about its applicants for employment that may include personal identifiers, professional or employment related information, photos, education information and/or protected classifications under federal and state law. This information is collected for employment purposes, including identification, work authorization, FCRA-compliant background screening, human resource administration and compliance with federal, state and local law.

Applicants for employment with The Company will never be asked to provide money (even if reimbursable) as part of the job application or hiring process. Please review your Fraud FAQ for further details.

Pay is competitive and based on a number of job-related factors, including skills and experience. The starting pay rate/range at time of hire for this position in the posted location is $83,538.00-$137,241.00/ year. The rate/range provided herein is the anticipated pay at the time of hire, and does not reflect future job opportunity.

Nearest Major Market: Long Island
Nearest Secondary Market: New York CIty