Manager, Cyber Incident Response

🔥 3 minutes ago

🐊 Florida – Remote

🐊 Florida – Remote

💵 $110k - $170k / year

⏰ Full Time

🟠 Senior

🔴 Lead

🚨 Incident Response Analyst

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

NBCUniversal

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 2004

📱 Media

Media • Entertainment

NBCUniversal is a leading global media and entertainment company known for creating and distributing content across a variety of platforms. With over 100 years of experience, it is a part of Comcast and encompasses brands like Peacock, NBC Sports, and many others to educate, entertain, and empower audiences around the world. The company is involved in television broadcasting, film production, and theme parks, and is also recognized for its initiatives in technology and corporate social responsibility. NBCUniversal is committed to innovation and social impact, making it a vibrant workplace for media and tech professionals.

📋 Description

• Manage Incident Response operations, including prioritization, resource allocation, shift coverage, tooling requirements, workflow management, and escalation processes • Ensure the NBCUniversal Incident Response Plan and procedures are implemented and followed • Oversee cyber incidents across the enterprise from escalation and validation through containment, remediation, recovery support, and closure • Serve as Incident Handler or Incident Commander for significant incidents • Coordinate response activities with impacted businesses, technical owners, and partner teams • Act as managerial escalation point for potential cyber incidents, responder support needs, and leadership decisions • Participate in the manager on-call rotation for cyber incident escalation and handling in a 24x7x365 global environment • Supervise operational performance across shifts and ensure prioritization, ticket ownership, escalation discipline, and standards adherence • Review shift handovers, queue health, and open incidents for continuity and accountability • Maintain event and incident documentation standards, case-management requirements, KPIs, and process adherence • Monitor operational metrics and trends, identify gaps, and implement improvements • Lead governance of response processes, playbooks, tuning requests, automation opportunities, and technical procedures • Drive the maturity, enhancement, and strategy of the Incident Response program • Partner strategically with Information Security Officers, business stakeholders, and security and technology teams • Develop and maintain process documentation, ownership, review cycles, approvals, and change management • Lead, coach, and develop Incident Response personnel • Create and deliver monthly metrics and executive reporting • Communicate incident status, operational concerns, decisions, and risk to business VIPs and senior leadership

🎯 Requirements

• Bachelor’s degree in an information technology-related field and/or equivalent work experience • Seven or more years of cybersecurity or investigations experience • At least four years in Incident Response, a Security Operations Center, threat intelligence, or a similar function • Previous experience leading incident response operations, cybersecurity personnel, or complex incident coordination • In-depth understanding of cyber threats, adversary techniques, response procedures, network and enterprise architecture, and threat detection • Ability to make evidence-based decisions under uncertainty and coordinate response activities across multiple teams • Willingness to work in a fast-paced, high-demand role that may require nonstandard working hours • Availability to support employee development and accept escalations in a 24x7x365 global environment • Strong organizational skills and ability to manage multiple workstreams, incidents, and escalation paths • Working knowledge of web application architecture, networking, identity, endpoint, email, and cloud services • Experience with host-based and network-based forensic tools and analysis • Knowledge of MITRE ATT&CK, the Cyber Kill Chain, the Diamond Model, and NIST incident response guidance • Experience applying security concepts in AWS, Azure, and/or Google Cloud Platform environments • Knowledge of EDR, XDR, SOAR, case management, and response automation • Experience developing or improving incident-management processes, playbooks, metrics, or automation • Exceptional written and verbal communication skills, including briefing technical professionals, business stakeholders, and senior executives • Strong leadership, coaching, interpersonal, and problem-solving skills • Relevant security certifications such as GCIH, GCFA, GNFA, GCIA, CISSP, or equivalent are desired • Prior experience managing a Cyber Incident Response, Security Operations Center, or related cyber defense function is desired • Experience supporting incident response or SOC operations for a large, complex, or global enterprise is desired • Hands-on familiarity with endpoint detection and response, forensic, network-analysis, email-security, and cloud-security technologies is desired

🏖️ Benefits

• Medical, dental and vision insurance • 401(k) • Paid leave • Tuition reimbursement • Employee discounts and other perks • Bonus eligibility