Principal Engineer - Cyber Incident Coordinator

AmerisourceBergen • Conshohocken, PA

78d • Remote

About The Position

The Principal Cyber Incident Coordinator is responsible for leading and coordinating the organization's response to significant cybersecurity incidents. This role ensures timely, effective incident handling, clear stakeholder communication, and continuous improvement of incident response processes. The Principal Coordinator will act as a senior escalation point, partnering with technical and business stakeholders to manage crisis events, maintain compliance, and strengthen the company's security posture.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent work experience; Master's degree preferred.
• Deep understanding of incident response processes and cybersecurity frameworks (e.g., NIST CSF, ISO 27035).
• Familiarity with ITIL or other service management frameworks.
• 8-10+ years of progressive cybersecurity experience, with at least 5 years in incident response or crisis management.
• Demonstrated experience coordinating enterprise-wide incident response efforts.
• Strong communication skills with the ability to brief technical and executive stakeholders.
• Experience with regulatory frameworks such as GDPR, HIPAA, or PCI-DSS.
• Proven ability to manage multiple incidents simultaneously under high-pressure conditions.

Nice To Haves

• Certified Information Security Manager (CISM)
• Certified Information Systems Security Professional (CISSP)
• GIAC Certified Incident Handler (GCIH)

Responsibilities

• Manage and coordinate major cyber incident response activities, including detection, containment, eradication, and recovery.
• Serve as a central point of contact for incident communications, ensuring timely updates to internal and external stakeholders.
• Develop and maintain incident response documentation, reports, and after-action reviews.
• Drive lessons learned initiatives to enhance response playbooks, processes, and detection strategies.
• Collect, analyze, and report incident response metrics to support operational improvements and executive decision-making.
• Lead and contribute to cyber crisis exercises, tabletop simulations, and readiness drills.
• Ensure all incident response activities comply with applicable laws, regulations, and internal policies.
• Coordinate urgent remediation activities for vulnerabilities and high-risk findings.
• Collaborate with SOC, incident responders, threat intelligence, legal, HR, and corporate security functions during crisis events.

Benefits

• We provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members' ability to live with purpose every day.
• In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness.
• This encompasses support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave.
• To encourage your personal growth, we also offer a variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and much more.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal
• Number of Employees: 5,001-10,000 employees