Job Description

We have a wide variety of career opportunities around the world come find yours.

Technology/IT




The United IT team designs, develops and maintains massively scaling technology solutions that are brought to life with innovative architectures, data analytics and digital solutions.

Job overview and responsibilities




The Incident Commander will work within established methodologies and processes to perform a variety of Incident Response related activities for United that will include commanding emergency response to cyber incidents, leading threat hunts, driving resolution for high profile events, and much more. This role will report to the Director of Incident Response.

* Command cross-functional efforts for emergency response to cyber incidents and drive towards resolution
* Command cross-functional response efforts to high profile cyber events
* Command cross-functional response efforts for proactive hunting engagements
* Ensure up to date IR plans and playbooks exist and are followed
* Clearly and concisely document and communicate findings for all efforts
* Work with external stakeholders such as law enforcement, cyber insurers, lawyers and more, as needed
* Refine interlocks between internal and external stakeholders and ensure those interlocks remain in working order and are tested over time

Required

* Bachelors degree
* 9+ years of enterprise-level incident response experience
* Industry certifications such as the CISSP, CISM, CISA, GCIH, CFCE, GFCA, and/or GCFE
* Expert level understanding of all aspects of the interconnected Intel-Detect-Analyze-Respond ecosystem to include Communication, Legal, Public Relations, Cyber Insurance, IR Plans, IR Playbooks, Forensics, War Gaming, Threat Hunting, Detection Technologies, Intelligence, Attack Lifecycles, and much more are required
* Demonstrated a high sense of urgency with strong pragmatic problem-solving skills and the ability to identify, analyze, and resolve problems
* Lead cross-functional response to drive initiatives to completion
* Successfully prevented, managed, and mitigated cybersecurity events and incidents at all levels and cross functionally; preferably in large and complex business environments
* Demonstrated ability to map technical findings to business impacts and communicate those in a manner which is understandable by non-technical audiences
* Worked with executives to enhance cybersecurity programs, incident response and other activities
* Worked with law enforcement, regulators, lawyers and/or other external organizations
* Achieved objectives by contributing information and recommendations to strategic plans, identifying trends and driving change
* Built relationships with stakeholders across all levels and all parts of the organization
* Must be legally authorized to work in the United States for any employer without sponsorship
* Successful completion of interview required to meet job qualification
* Reliable, punctual attendance is an essential function of the position



Preferred

* Masters degree


Equal Opportunity Employer Minorities/Women/Veterans/Disabled/LGBT