- Stamford, Connecticut, United States
- Manager
- 7+ years
Lead and shape the global SOC and incident response program, driving automation, playbook development, and cross‑functional coordination to improve detection and response capabilities.
Responsibilities
- Lead and continuously improve the SOC and incident response program, including operating model, standard work, and outcomes.
- Serve as incident commander for high‑severity investigations, coordinating cross‑functional response and driving clear decisions, timelines, and communications.
- Lead and develop a distributed team of analysts/engineers; build a strong culture of learning, quality, and operational excellence.
- Own detection and response capability across endpoint, network, cloud, SaaS, and identity telemetry; improve signal quality and reduce noise through tuning and engineering.
- Define, maintain, and test playbooks/runbooks and escalation paths, drive readiness through exercises and continuous improvement.
Requirements
- Degree in a related field or equivalent practical experience
- Advanced professional security certifications (e.g., CISSP, CISM, GIAC)