Comcast Cybersecurity: Sr. Manager Security Incident Response

Profile

**MEMBERS ONLY**SIGN UP NOW***.'s Technology, Product & Experience organization works at the intersection of media and technology. Our innovative teams are continually developing and delivering products that transform the customer experience. From creating apps like TVGo to new features such as the Talking Guide on the X1 platform, we work every day to make a positive impact through innovation in the pursuit of building amazing products that are enjoyable, easy to use and accessible across all platforms. The team also develops and supports our evolving network architecture, including next-generation consumer systems and technologies, infrastructure and engineering, network integration and management tools, and technical standards. We offer a flexible working environment to balance the need to work independently wherever you choose, with days that require collaboration at one of our offices. Our roles primarily reside inside or around one of our Tech Hubs (Philadelphia and surrounding suburbs, Denver, Austin, Silicon Valley, Washington DC/N. Virginia). Some roles can work virtual full-time if they are not near a Tech Hub, but that is dependent upon the needs of the position and amount of collaboration required.

Job Summary

Job Description

Role Overview

The **MEMBERS ONLY**SIGN UP NOW***. Cyber Security Operations Center needs a strong candidate to lead the Security Incident Response Team. The candidate should have a solid background in dealing complex cyber security incidents at scale. They will be a strong, positive people leader that understands there is a clear need for ongoing process improvement and sees the bigger picture in improving Incident Response by forming close relationships with all of CSOC and other key stakeholders.Responsible for protecting the Corporate Information Systems data from unauthorized access, corruption, use, disclosure or interruption. Develops financial and operational objectives. Ensures operational plans are aligned with business objectives. Contributes to functional strategy development. Has a greater degree of impact on business results and typically manages one or more groups of professional employees.

Key Responsibilities


Point of escalation from within the SIRT team to drive all cyber incidents managed by the SIRT team and will work closely with the Incident Problem and Coordination team on closely following incident playbooks that stand up to audit requirements post incident.
Working closely with technical leads and team members, being able to effectively question/challenge decision making but also not get to hands on/deep into the incident response.
Work closely with supporting functions within the CSOC to continuously improve incident response and prevent recurrence of incidents
Have experience with data analytics and Security Incident and Event Monitoring (SIEM) tooling
Be proficient with and fully understand Endpoint Detection and Response tooling capability as well as being familiar with most well know security toolsets across Identity, Cloud, Network
Forensic background experience is a plus
Well versed in articulating high quality incident reports that can be positioned to either a technical or executive audience
Have an overall understanding of what key metrics and reports should be created in order to manage the SIRT team against the highest levels of efficiency without creating a call center feel to incident response. Such as tracking and improving Mean Time To Respond.


Requirements


A minimum 8 years relevant working experience, 5 years within cybersecurity and preferably at a large corporate scale.
Familiar with risk management and controls frameworks, cyber kill chain and NIST incident response life cycle
Understanding of Security Governance, Risk & Compliance
4 years of experience with leading incident response
Experienced in dealing with multiple complex cyber incidents simultaneously
Proven experience in security operations and monitoring
General knowledge about SIEM architecture
Being able to work with a diverse set of stakeholders in the organization from technical through executive management. Strong report writing and communication skills.
Strong written and verbal communication in English
Experience working with and motivating geographically dispersed teams
Understanding crisis management, business continuity and disaster recovery procedures
Ability to understand technical topics dealing with technical teams and explain and present them to management level executives
Being very well organized and able to handle multiple competing priorities in a fast-paced environment to proceed high priority tasks to a resolution
Familiarity with related publications such as: NIST 800-61(Incident Handling), NIST 800-30(Risk Assessment), NIST 800-52(Security Controls)
Any experience with Red, Purple or Blue Teaming within a Security Operations Center


**MEMBERS ONLY**SIGN UP NOW***. is proud to be an equal opportunity workplace. We will consider all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other basis protected by applicable law.

Education

Bachelor's Degree

While possessing the stated degree is preferred, **MEMBERS ONLY**SIGN UP NOW***. also may consider applicants who hold some combination of coursework and experience, or who have extensive related professional experience.

Relevant Work Experience

7-10 Years

Salary:

Pay Range: $122,409.56 - $183,614.34

**MEMBERS ONLY**SIGN UP NOW***. intends to offer the selected candidate base pay dependent on job-related, non-discriminatory factors such as experience.

Base pay is one part of the Total Rewards that **MEMBERS ONLY**SIGN UP NOW***. provides to compensate and recognize employees for their work. Most sales positions are eligible for a Commission under the terms of an applicable plan, while most non-sales positions are eligible for a Bonus. Additionally, **MEMBERS ONLY**SIGN UP NOW***. provides best-in-class Benefits. We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That's why we provide an array of options, expert guidance and always-on tools, that are personalized to meet the needs of your reality - to help support you physically, financially and emotionally through the big milestones and in your everyday life. Please visit the compensation and benefits summary (****on our careers site for more details.

Company info

Sign Up Now - WashingtondcCrossing.com