Full-Time Junior Security Incident Commander

• Assist with the orchestration of response and remediation of incident response for highest criticality security events.
• Take ownership and lead response to low to moderate severity incidents.
• Establish and mature documentation surrounding protocols and procedures governing the security incident command team.
• Help prepare and deliver communications, including executive summaries and incident briefings, to key stakeholders during and after incident response.
• Conduct rapid response, mitigation, and investigations on the highest priority cases impacting ServiceNow and user data.
• Partner with the team members across multiple regions to drive response and investigations globally.
• Assist with the organization and conduct of scenario-based exercises to test and improve incident management and response strategies.
• Assist with maintaining existing playbooks and procedures, as well as developing new ones, to further standardize SIC and its partners' responses when verifying MSIs.
• Contribute to the organization and conduct of Post-Incident Reviews (PIRs) and Root Cause Analyses (RCAs) following major security incidents.
• Assist in identifying new ways to simplify, integrate, automate and refine the major security incident process to better support internal and external stakeholders.

• Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving.
• 2 or more years of experience in incident response.
• Experience leading or supporting complex security incidents to resolution end-to-end.
• Excellent verbal and written communication skills (English)
• Comfort communicating complex topics in a clear and concise manner to different tiers of audiences (highly technical, less technical, executives, practitioners)
• Problem-solving and decision-making skills
• Ability to quickly and accurately assess a situation, identify and prioritize risks, and make sound decision
• Familiarity with cybersecurity principles and frameworks (e.g. MITRE ATT&CK).
• Knowledge across multiple security domains is a plus.
• Experience planning and/or orchestrating tabletop exercises is a plus.

What is the last date for applying to the job?

Which countries are accepted for this remote job?