What are the responsibilities and job description for the Cyber Security Incident Response Leader - Philly position at Motion Recruitment?
Cyber Security Incident Response Leader
As a Cyber Security Incident Response Leader, you will manage the daily operations of the Security Incident Response Team, ensuring all security incident processes align with industry and company standards. You’ll be responsible for leading complex cyber security projects from design to implementation, monitoring, and responding to critical cybersecurity incidents, as well as driving operational and financial objectives.
This position is hybrid 4 days a week on-site in their Philly location.
Key Responsibilities
This position doesn’t provide sponsorship.
Posted By: Carly Thomas
As a Cyber Security Incident Response Leader, you will manage the daily operations of the Security Incident Response Team, ensuring all security incident processes align with industry and company standards. You’ll be responsible for leading complex cyber security projects from design to implementation, monitoring, and responding to critical cybersecurity incidents, as well as driving operational and financial objectives.
This position is hybrid 4 days a week on-site in their Philly location.
Key Responsibilities
- Lead the Security Incident Response Team's daily operations and serve as the incident commander for major incidents.
- Communicate incident status clearly to key stakeholders, including Cyber Security, Operations, Legal, and Communications teams.
- Partner with other monitoring, detection, and response functions to ensure comprehensive coverage.
- Own and maintain essential documentation for significant incidents.
- Mentor and support the development of a highly technical incident response team.
- Drive the development of key metrics, KPIs, and reports for continuous improvement.
- Lead the creation and development of a strategic roadmap, enhancing the program’s capabilities.
- 10 years of experience in Cyber Security, with at least 5 years focused on leading large-scale incident investigations.
- At least 3 years of leadership or management experience within a Security Operations team.
- Proven experience in incident investigation, including the ability to present complex technical findings to both technical and business audiences.
- In-depth understanding of the Incident Response process and the ability to lead discussions across business units during the incident lifecycle.
- Familiarity with major threat actor groups, their tactics, techniques, and procedures (TTPs).
- Proficiency with enterprise-grade endpoint and network defense tools.
- Experience working with logging technologies and handling large data sets.
- Knowledge of major cloud platforms (AWS, Azure, GCP) and their security challenges.
- Ability to mentor and develop team members with varying skill levels.
This position doesn’t provide sponsorship.
Posted By: Carly Thomas
