Cyber Security Incident Response Manager

Staples Inc. • Framingham, MA

1d

About The Position

Staples is business to business. You’re what binds us together.

Our digital solutions team is more than a traditional IT organization. We are a
team of passionate, collaborative, agile, inventive, customer-centric,
results-oriented problem solvers. We are intellectually curious, love
advancements in technology and seek to adapt technologies to drive Staples
forward. We anticipate the needs of our customers and business partners and
deliver reliable, customer-centric technology services

We are seeking a decisive and highly experienced Cyber Security Incident
Response Manager to lead the strategy, execution, and continuous improvement of
our organization’s incident response capabilities. You will play a critical role
in coordinating cybersecurity incidents across business units, directing
tactical response activities, and partnering with internal and external
stakeholders to minimize business impact and strengthen resilience.

As the Incident Response Manager, you will act as the primary authority during
cyber incidents—leading investigations, managing communications, and driving
remediation efforts. This is a highly visible leadership role that requires calm
under pressure, strong communication, and deep technical expertise in detecting,
containing, and eradicating sophisticated threats.

Requirements

• Proven ability to lead high-stakes, high-pressure cybersecurity incidents with calm and effective decision-making.
• Deep knowledge of attacker tactics, techniques, and procedures (TTPs) across various threat landscapes.
• Strong experience with security tooling (e.g., SIEM, EDR, forensic tools) and investigation methods such as log analysis and memory forensics.
• Skill in managing internal and external communications during incidents, including with executive leadership, legal, and regulatory bodies.
• Demonstrated success in building and refining incident response programs, including playbook development and IRP documentation.
• Excellent interpersonal and communication skills; able to act as a trusted advisor to technical teams and business leaders alike.
• Proven experience leading incident response in large, complex environments.
• 7+ years of experience in cybersecurity operations, with at least 3+ years in a leadership role focused on incident response.
• Deep understanding of cyber threat landscapes, attack vectors, malware behaviors, and forensic methodologies.
• Hands-on experience with industry-standard frameworks (NIST, MITRE ATT&CK, etc.), regulatory and compliance programs (GDPR, HIPAA, PCI-DSS, SOX), and incident detection, containment, and remediation tools and techniques (SIEM, SOAR, EDR, forensics).

Nice To Haves

• Bachelor’s degree in Computer Science, Cybersecurity, Information Assurance, or related field (or equivalent experience).
• Industry-recognized certifications such as GCIA, GCFA, GCIH, CISSP, CISM, or equivalent.
• Experience with high-impact threats (ransomware, BEC, nation-state attacks).
• Consulting or client-facing experience in cybersecurity advisory or incident response services.
• Experience with regulatory reporting and legal/forensics coordination is a plus.

Responsibilities

• Lead the organization’s incident response efforts across all business units, from detection through containment, remediation, and recovery.
• Act as the primary authority during cybersecurity incidents—investigating, managing communications, and driving remediation efforts.
• Coordinate cross-functional teams, including Security Operations Center, Engineering, Legal, Communications, and external partners to ensure timely response and clear, accurate reporting.
• Develop, maintain, and enhance the Incident Response Plan (IRP) in alignment with policies, regulatory requirements, and industry frameworks (NIST, ISO 27035, MITRE ATT&CK, etc.).
• Deliver detailed post-incident reports, root cause analyses, executive summaries, and lead lessons-learned sessions to strengthen organizational resilience.
• Plan and execute tabletop exercises and red/blue team simulations to test readiness and train staff.
• Build robust playbooks for diverse cyber threats, such as ransomware, BEC, insider threats, and supply chain compromises.
• Champion process improvements, automation, and knowledge sharing to accelerate detection and response times.
• Mentor and lead a team of incident responders and analysts, fostering a culture of resilience, accountability, and continuous learning.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees