Senior Manager, Security - Detection & Incident Response

The Kraft Heinz Company • Chicago, IL

6d

About The Position

The Senior Manager, Security - Detection & Incident Response leads the security incident detection and response lifecycle and manages the changing threat landscape through effective use of resources, threat intelligence, and training to mitigate the impact of global incidents. The role leads the MSSP Security Operations Center and oversees incident response initiatives across people, processes, and technology. Responsibilities also include program improvement, stakeholder and vendor relationship management, and collaboration with security leadership and technical teams.

Requirements

• 7+ years of relevant information security experience.
• Demonstrated ability to translate technical incidents into business terms.
• Experience creating and presenting technical strategies and technical solution recommendations.
• Thorough understanding of Security Operations Center, incident response, threat hunting, and enterprise digital forensics concepts, including investigation techniques, acquisition, chain of custody, evidence preservation, validation, and sterilization.
• Experience developing automated case management systems.
• Hands-on experience developing incident response programs with Legal and the Chief Privacy Officer.
• Experience working in, leading, or fostering an agile environment for effective and efficient collaboration.
• Experience operating as an incident controller and performing timely escalations.

Nice To Haves

• Scripting experience.

Responsibilities

• Lead and manage the MSSP Security Operations Center, ensuring timely identification, analysis, containment, and remediation of global security events and incidents.
• Create, implement, and maintain a strategic roadmap in collaboration with security leadership, including creating and maintaining KPIs and KRIs.
• Analyze cyber incidents and remediate them or recommend remediation in accordance with established incident response processes, including detection, triage, containment, analysis, remediation, and reporting.
• Conduct technical examinations, analysis, and reporting of computer-based evidence related to security incidents, including intrusion artifacts and indicators of compromise.
• Develop and maintain incident response plans, playbooks, testing, and training for internal and external team members.
• Recommend tuning security tools based on threat feeds, reputation data, events, or vulnerabilities and exploits in downstream systems.
• Recommend ways to resolve or reduce incident impacts and prevent future incidents.
• Collaborate with architecture, development, and engineering teams to identify root causes of recurring incidents and create resolution action plans.
• Drive continuous improvement and program management for detection and incident response initiatives across people, processes, and technology, including training, communication, and relationships with other business areas and vendor partners.
• Identify and recommend opportunities for clean-slate process improvement in incident management.

Benefits

• Medical, dental, and vision coverage.
• 7% 401(k) matching.
• Business Resource Groups supporting diversity, inclusion, and belonging.
• Performance-based bonus eligibility.
• Paid time off and company holidays.
• Leave of absence.
• Flexible work arrangements.
• Recognition and training.
• Employee Assistance Program.
• Wellbeing and family support programs.
• Life, accidental death and dismemberment, and disability coverage.
• Benefits begin immediately upon hire for salaried employees.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed