Current jobs related to Cyber Security Incident Response Team Lead - Jersey City - Lamoreaux Search


  • Jersey City, New Jersey, United States Dtcc Full time

    About the RoleWe are seeking a highly skilled Incident Response Senior Associate to join our Cyber Security team at DTCC. As a key member of our Threat Risk Management (TRM) team, you will play a critical role in proactively detecting, analyzing, and responding to cyber security events.Key ResponsibilitiesMonitor and analyze network events, OS log events,...


  • Alexander City, Alabama, United States Nukasani Group Full time

    Job Title: Cyber Security Incident Response Lead DTSJob Summary:The Nukasani Group is seeking a highly skilled Cyber Security Incident Response Lead DTS to join our team. As a key member of our Information Protection and Risk Management team, you will be responsible for leading investigations into information security events and incidents, driving efforts...


  • Alexander City, United States Nukasani Group Full time

    Job Title : Cyber Security Incident Response Lead DTS Location: Charlotte NCHybrid Rate : Best competitive rate Title: Cyber Security Engineer ( Sr. Incident Response Lead) Work Location: Charlotte NC or Detroit MI (Hybrid) Duration: Till 12/31/2026 (with potential extensions or contracttohire) Note: Please review below JD and let me know if you have any...


  • Jersey City, United States Dtcc Full time

    Job Description Are you ready to make an impact at DTCC? Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We're committed to helping our employees grow and succeed. We believe that you...


  • Jersey City, United States Dtcc Full time

    Job Description Are you ready to make an impact at DTCC? Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We're committed to helping our employees grow and succeed. We believe that you...


  • Pearl City, United States TEKsystems Full time

    Description: TEKSystems is seeking a Cyber Security Incident Response Analyst to support a cleared position in the DoD. This position requires a Secret (will be upgraded to Top Secret) or Top Secret level security clearance. In this role, you will identify, isolate, investigate, inform, and implement measures to detect and protect data across a wide...


  • Jersey City, New Jersey, United States Dtcc Full time

    Job Title: Incident Response Senior AssociateAt DTCC, we are seeking a highly skilled Incident Response Senior Associate to join our Threat Risk Management team. As a key member of our Cyber Blue Team, you will play a critical role in proactively detecting, analyzing, and responding to cyber security events.Key Responsibilities:Monitor and analyze network...


  • Jersey City, New Jersey, United States Dtcc Full time

    Job DescriptionAt DTCC, we are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.Key Responsibilities:Monitor and analyze cyber security events, including network...


  • Englewood Cliffs, New Jersey, United States NBCUniversal Full time

    Cyber Security Manager Job DescriptionThe Cyber Security Manager will be a key contributor to the NBC Universal Cyber Security organization, responsible for executing and contributing to the Cyber Security strategy and maintaining operational engagement with key leaders within the Ad Sales & Data businesses, focusing on Data Analytics services and...


  • Jersey City, New Jersey, United States Dtcc Full time

    Position Overview Join DTCC and Shape the Future of Financial Security! At DTCC, we are dedicated to pioneering advancements in the financial sector while fostering an environment that promotes growth and collaboration. Our commitment to employee development ensures that you will have the opportunity to thrive in your career. We strive to create a diverse...


  • new york city, United States Source Technology Full time

    Source Group International is on the lookout for a skilled Incident Response Lead in NYC. You will guide a small team of collaborative people, processes, and technologies with the overarching goal of detecting, investigating, and responding to threats targeting the company's operations and infrastructure.About the Role Developing and maintaining incident...


  • new york city, United States Source Technology Full time

    Source Group International is on the lookout for a skilled Incident Response Lead in NYC. You will guide a small team of collaborative people, processes, and technologies with the overarching goal of detecting, investigating, and responding to threats targeting the company's operations and infrastructure.About the Role Developing and maintaining incident...

  • Incident Response

    2 days ago


    New York City, United States V Group Inc. Full time

    Client:Metropolitan Transportation Authority (MTA)Job Title:Incident Response & Forensics SpecialistDuration:09MonthsStart Date:ASAPLocation:2 Broadway - MTA Headquarters (REMOTE)Position Type:ContractInterview Type:In Person/Web InterviewCeipal ID:MTA_CYBE311_FKPosition ID:4131-1DESCRIPTION:The Metropolitan Transportation Authority (MTA) is seeking a highly...


  • Englewood Cliffs, New Jersey, United States NBCUniversal Full time

    About the RoleThe Sr Cyber Security Manager is a critical member of the NBC Universal Cyber Security organization, responsible for executing and contributing to the Cyber Security strategy and overseeing operational engagement with key leaders within the Ad Sales & Data businesses, across Advertising Sales, Consumer Data, and Data Analytics services and...


  • Kansas City, United States Clarivate Analytics US LLC Full time

    We are looking for an enthusiastic and creative Cyber Security Analyst to join our Cyber Security Team. In this role you will work with industry leading security tools and technologies. The team consists of 33 security professionals That report to the Chief Information Security Officer. Our focus is on many aspects of security, including Security Operations,...


  • Ramsey, New Jersey, United States Konica Minolta Business Solutions, U.S.A., Inc. Full time

    About the RoleWe are seeking a highly skilled Cyber Security Analyst to join our team at Konica Minolta Business Solutions, U.S.A., Inc. As a key member of our Security Operations Center, you will play a critical role in protecting our customers' sensitive information and ensuring the integrity of our systems.Key ResponsibilitiesLead security incident...


  • Jersey City, New Jersey, United States Société Générale Full time

    Job SummaryWe are seeking an experienced Security GRC Specialist - Regulatory Lead to join our team at Societe Generale. The successful candidate will be responsible for managing the regional cyber regulatory compliance program, including assessing requirements, communicating with internal stakeholders, and ensuring required controls are in place.Key...


  • Jersey City, United States TMS LLC Full time

    Job DescriptionJob DescriptionJob DescriptionRole: Senior Cyber Security EngineerLocation: New Jersey (Day 1 Onsite)Duration: 6+ MonthsExperience Needed: 12+ Years Licensure, Registration, and Certifications are Mandatory and try to find someone who have past 2-3 Years of experience in Health Care:·       Certified Information Security Manager...


  • Panama City Beach, Florida, United States Triumph Enterprises Full time

    Triumph Enterprises is seeking a highly proficient and driven Lead Cyber Security Analyst to support a federal government initiative with a critical mission. In this position, you will play a pivotal role in safeguarding the security and integrity of our organization's information systems. Collaborating closely with our IT and security teams, you will...

  • Tech Ops

    3 weeks ago


    New York City, United States M-Logic Full time

    Our client is looking to hire a forward-thinking Risk Manager with a high level of expertise in Cyber and Technology Risk that will join the Operational Risk organization to manage the 2nd line of defense governance, processes, policies and tools. This role is responsible to evaluate and provide an independent assurance over Cyber and Technology risk,...

Cyber Security Incident Response Team Lead

4 months ago


Jersey City, United States Lamoreaux Search Full time

CYBER SECURITY INCIDENT RESPONSE TEAM LEAD

Our global marketing communications client has a rich 100+ year history of excellence in service and growth predominantly through acquisition. Their portfolio of companies reaches over 1,500 agencies in more than 100 countries connected by a parent company dedicated to leveraging their collective and individual offerings.


Our client is seeking a Cyber Security Incident Response Lead (CSIRT) who will act as a regional Incident coordinator during events that require orchestrated responses between business units, executive stakeholders, legal teams, and clients worldwide. This role requires excellent written and verbal communication skills with the ability to train and mentor others. Furthermore, this role also focuses on creating, modifying, and maintaining documented standards that facilitate the repeatable and automatable processes required to adhere to compliance with ISO 27001, GDPR, and US Fed Ramp. The ability to write code and/or scripts that automate common processes is essential. Working knowledge of cloud security in hybrid cloud environments is required.


Key Focus Areas:

· This position is responsible for execution of the Incident Response program for the client. This position reports to the Global Director, CSIRT and Threat Intelligence.

· Design, develop and oversee execution of formal processes to create process lifecycles that ensure the creation of consistent responses that cover up to 80 percent of common incidents.

· Build, lead, and mentor junior CSIRT analysts responsible for the detection, containment, eradication, recovery, and lessons learned associated with high profile incidents.

· Ability to work under pressure with senior executives, clients, and teams responsible for adhering to regulatory obligations during major incidents.

· Serve as liaison between Internal Audit, Legal, and business units to ensure applicable incidents are investigated and resolved within corporate governance guidelines.

· Develop and maintain expertise in trends around cyber security, cyber threats and their tactics, and relevant security technologies.

· Provide monthly, quarterly, bi-annual, and annual metrics to track, validate, and provide continuous improvement to the Incident Response program.

· Leads the development of Security Orchestration Automation and Response (SOAR) playbooks and act as the automation SME to translate manual processes into automated workflows.

· Leads the development of Cloud focused incident response processes across various cloud platforms.

· Assist in and maintenance of information Incident Response framework, including the design and implementation of standards, procedures, and knowledge base articles.

· Develop/maintain security and control framework to ensure compliance with stated metrics and documented controls.

· Proven track record leading third party vendors and contract resources in a global environment.

· Knowledge of techniques used to secure cloud environments through zero trust principles and API based intelligence collection.

· Promotes an ongoing culture of continuous learning and Incident Management through documented procedure and the application of critical thinking against principles within the MITRE framework and equivalent best practice standards.


Qualifications/Experience:

· Bachelor's degree required, preferably in computer science, information systems, engineering, business administration, or related field.

· Authorized to work in the U.S. (or other depending on role location).

· Minimum of 4-6 years of experience required.

· Past Media and Entertainment industry experience a plus.

· Certified in one or more of the following: CISSP, CISM, CISA, CEH, SANS GIAC Security Certifications,

CompTIA Security Certifications, ITIL.

· Subject matter expertise in Incident Response and Cyber Security required.

· Willingness to travel up to 25 percent.

· Knowledge of common information security management frameworks, such as ISO/IEC 27001, ITIL, COBIT and NIST.

· Working knowledge and experience in the MITRE ATT&CK framework.

· Ability to work night, weekends, and holidays during major incidents.



Skills/Abilities:

· Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate security and risk-related concepts to technical and nontechnical audiences.

· Excellent problem solving and analytical skills, individual must be a team player, strategic and analytical thinker, able to think “big picture”, as well as focus on trends and data coupled with industry themes, and able to multitask on projects.

· Ability to build-out security strategy aligned with business objectives that will continually improve and enhance cybersecurity within the organization.

· Demonstrate the ability to manage multiple projects under strict timelines, as well as the ability to work well in a demanding, dynamic environment and meet overall objectives.

· Possess a strong technology background with the ability to challenge or validate technology decisions from a position of knowledge and experience.

· Experience with Endpoint and Network analysis and interpreting artifacts to identify threat behavior and intent.

· Experience with handling evidence using forensically sound methodologies for legal preservation.

· Exposure to cloud architecture concepts such as service principals, serverless functions, and key vaults to enable informed cloud incident response.

· Exposure to Microsoft Active Directory concepts such as domains, group policy objects, and permissions to enable informed on-premise incident response.

· Experience conducting threat hunts and searches in a SIEM technology, articulating a threat story and crafting a SIEM query to detect the presence of said activity.

· Ability to code and/or script in Python 3, JavaScript, PowerShell, .Net, or equivalent integration languages.

· Ability to translate orchestration design documents into SOAR playbooks leveraging preconfigured integrations or developing new integrations with well-defined, documented APIs.

· Ability to understand malicious scripts written in various languages such as VBA, PowerShell, Python, JavaScript, and others.

· Understanding of threat techniques to exploit a system, elevate privileges, and conduct lateral movement, to enable informed Incident Response. Experience with Penetration Testing frameworks such as Cobalt Strike or Participation in Capture The Flag exercises is a plus.

· Possess the ability to rapidly assimilate business strategies, coupled with the insight to seize high impact opportunities by applying creative problem-solving solutions.

· Track record of managing across multiple global locations, with a solid understanding of the challenges and benefits.