Senior Incident Response Lead - Cybersecurity

November 9

Apply Now

Receive Emails with Similar Jobs

IDEXX

WebsiteLinkedInAll Job Openings

Diagnostics • Software • Veterinary

10,000+ employees

Founded 1983

⚕️ Healthcare Insurance

🧬 Biotechnology

💰 Seed Round on 1984-01

Description

• Serve as top-tier technical escalation resource for Security Operations during incident investigation and response • Direct complex forensic investigations and evidence collection according to forensically sound procedures • Coordinate with Legal and Privacy teams on regulatory compliance reporting requirements • Perform damage assessments and guide mitigation strategies • Manage relationships with the Security Operations Center (SOC) provider • Lead proactive threat hunting program development and execution • Monitor external threat intelligence sources • Coordinate purple team exercises • Analyze network alerts and security events • Develop and maintain IR playbooks and standard operating procedures • Create and lead IR tabletop exercises • Write and publish after-action reviews and incident reports • Present IR metrics and KPIs to executive leadership • Mentor and guide security team members • Drive risk mitigation strategies across business units • Build and maintain relationships with key security partners

Requirements

• 7+ years of hands-on incident response experience • 3+ years leading IR teams and/or programs • Demonstrated expertise with IR tools and frameworks • Strong forensics and malware analysis capabilities • Experience with enterprise security technologies • Relevant security certifications (e.g., GCIH, GCFA, CISSP) • Deep understanding of network security architecture and protocols (TCP/IP, DNS, etc.) • Communicate effectively with technical and non-technical stakeholders • Expertise in intrusion detection methodologies and techniques • Knowledge of system administration and hardening techniques • Strong background in malware analysis and containment • Understanding of cloud service models and their IR implications • Proficiency with security event correlation tools • Expertise in various attack classes, stages, and methodologies • Knowledge of vulnerability types and associated attacks