Sr. Incident Response Analyst

The Role:As a Principal Incident Response Analyst, you will serve as a technical subject matter expert and leader in our Incident Response team, operating from Cambridge or Seattle. You will lead as an incident commander, orchestrating the response to complex security threats and enhancing our incident management framework. You will also be responsible for managing investigations sourced from various sources, such as threat intelligence.Your role is pivotal in making critical decisions, refining IR processes, and communicating with stakeholders at all levels, including the C-Suite. Leveraging your extensive expertise, you will drive initiatives that bolster our cybersecurity defenses and foster a culture of continuous improvement and resilience.Here’s What You’ll Do:Serve as a strategic partner and driving key incident response initiatives.Take charge during critical incidents as the incident commander, leading a team of IR analysts to rapidly triage, contain, and resolve security events.Develop and implement strategies to enhance in-house efficiency and standardize incident response processes, leveraging AI and digital technologies for improved performance.Create and maintain a comprehensive IR playbook and runbooks, ensuring continuous improvement and alignment with industry best practices.Function as a key decision-maker in ambiguous situations, providing clear direction and coordination to resolve incidents effectively.Collaborate with cross-functional teams to set objectives, drive progress, and achieve meaningful results in the realm of cybersecurity.Develop and track performance metrics and benchmarks through data analytics to measure the effectiveness of the incident response team.Manage relationships with security vendors, including the development of KPIs and cost-efficient billing solutions.Build and maintain internal security knowledge management processes and capabilities.Here’s What You’ll Bring to the Table:A minimum of 10 years of experience in cybersecurity with a significant focus on incident response, security operations and threat intelligence.Proven track record as an incident commander, effectively communicating and delegating tasks to IR analysts of varying levels of expertise.Experience in developing, refining, and maturing IR playbooks and runbooks, ensuring robust and comprehensive incident management processes.Demonstrated ability to coordinate and make critical decisions in ambiguous and high-pressure situations.Technical proficiency in handling complex security incidents, with a deep understanding of the current cybersecurity landscape and threats.Strong leadership skills with the ability to serve as a change agent within the organization.Excellent analytical, critical thinking, and problem-solving skills, with a strong attention to detail.Exceptional communication skills, capable of articulating complex security issues to a diverse range of stakeholders, including C-Suite.Experience in technology change management, project management, business process management, and system implementation.Strong organizational and planning skills, with the ability to manage multiple projects and priorities effectively.

#J-18808-Ljbffr