CSOC Incident Response Lead

This is a Fully Remote Job About Our Client: The organization operates within the cybersecurity sector, focusing on protecting its digital operations through proactive and reactive security measures. It addresses the challenge of cybersecurity threats by maintaining a dedicated Security Operations Center that oversees incident detection, analysis, and response. The company emphasizes robust, strategic cybersecurity practices to minimize risks and ensure operational continuity. About the Opportunity: The CSOC INCIDENT RESPONSE LEAD is responsible for directing and managing cybersecurity incident responses within the organization. This role leads the incident response team, ensures effective use of security tools, coordinates stakeholder communication, and refines response processes. The position plays a critical role in minimizing risk and restoring operations swiftly after security incidents. Responsibilities: Serve as primary decision-maker during cybersecurity incidents. Utilize CSOC tools including SIEM and SOAR to support incident response. Lead and coordinate incident response efforts within the triage and response team. Collaborate with internal and external stakeholders to assess impact and prioritize actions. Communicate updates clearly and timely to stakeholders including executive leadership. Implement and improve analysis, forensics, and incident response procedures. Conduct monthly post-incident reviews to identify lessons and enforce remediation. Monitor emerging threats and collaborate with related cybersecurity teams. Facilitate monthly workshops with IT and OT stakeholders on incident response initiatives. Work with security engineers to enhance detection and automation playbooks. Lead tabletop exercises to train teams and identify gaps. Manage incident response database ensuring audit and compliance adherence. Assist with vendor management related to incident response retainers. Oversee incident response training and utilize retainer credits for training opportunities. Requirements: Bachelor’s degree in computer science, IT, or related field or equivalent experience. Minimum 8 years of IT or cybersecurity experience. Proven leadership in incident response in fast-paced environments. Strong technical knowledge of network security, malware analysis, intrusion detection. Excellent communication skills for diverse stakeholder engagement. Ability to remain calm and focused under pressure. Familiarity with multiple operating systems including z/OS, Windows, UNIX, Linux, AIX. Must be at least eighteen years old. Must be legally authorized to work in the United States without sponsorship. Preferred: Certifications such as GIAC Incident Handler (GCIH). Experience with incident response and cybersecurity frameworks (NIST, GDPR). Knowledge of SIEM/SOAR tools like Splunk and Sumo Logic. Experience with Managed Security Service Providers and Threat Intelligence Platforms. Exposure to Operational Technology incident response. Pay Range and Compensation Package: The pay range and compensation package for this role will be determined based on the candidate's experience, skills, and other relevant factors. Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin. Note: TalentHop is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.