Incident Response Analysis Manager
About The Position
The Incident Response Analysis Manager works within Cisco’s product security incident response team (PSIRT), part of the security and trust organization. The team provides vulnerability management and incident response services and ensures customer reports concerning vulnerabilities or Cisco product issues receive a timely response. In this role, you will lead cybersecurity incident response efforts, analyze threat data, and implement solutions to mitigate risks. You will monitor, identify, investigate, and analyze incident response activities; evaluate event flows and incident trends to identify risks and underlying problems; and support security audits, network forensics, and validation of security fix information. You will also follow incident response procedures, maintain ticketing-system updates, respond to compliance requests, and collaborate with Incident Managers, product engineering, content writers, and security teams to meet SLAs and KPIs, manage change and risk, and prepare recovery plans.
Requirements
- Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
- At least 5 years of experience in incident response, vulnerability management, security operations, or related roles.
- Proficiency with IT Service Management (ITSM) tools such as ServiceNow or Jira Service Management.
- Demonstrated experience leading critical incident response engagements and threat analysis in high-pressure environments.
- Applied knowledge of cybersecurity incident response and threat detection and analysis.
Nice To Haves
- Advanced expertise in vulnerability management and penetration testing methodologies.
- Proven ability to manage the complete incident lifecycle from detection to resolution.
- Strong background in risk management, vulnerability scoring systems such as CVSS or EPSS, and deploying network-device and/or cloud remediations and security controls.
- Experience preparing detailed incident reports and technical briefs for IT security teams and leadership.
- Track record of establishing SLAs/KPIs and developing continuous improvement plans with cross-functional stakeholders.
Responsibilities
- Monitor, identify, investigate, and analyze cybersecurity incident response activities, addressing security flaws and vulnerabilities.
- Evaluate event flows to identify common risks and develop solutions.
- Assist with security audits and network forensics, and validate security fix information.
- Log, track, and analyze data for proactive and reactive incident resolution, identifying underlying problems from incident trends.
- Follow and implement incident response procedures, maintain regular updates to ticketing systems, and respond to compliance requests.
- Collaborate with Incident Managers, product engineering teams, content writers, and other security teams to meet SLAs and KPIs, manage change and risk, and prepare recovery plans to protect against future incidents.
Benefits
- Medical, dental, and vision insurance
- 401(k) plan with Cisco matching contribution
- Paid parental leave
- Short- and long-term disability coverage
- Basic life insurance
- Paid holidays and a floating holiday for non-exempt employees
- Birthday day off, year-end holiday shutdown, and personal wellness days
- Paid vacation time for non-exempt employees or flexible vacation time off for eligible exempt employees
- Paid sick time
- Additional paid time away may be requested for critical or emergency family issues
- Optional paid volunteer days
- Annual bonuses for eligible non-sales employees
- Potential grants of Cisco restricted stock units
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Manager
