Director of Threat, Vulnerability and Incident Response

In the role of Director - Threat, Vulnerability and Incident Response, you will leverage your deep understanding of both existing and emerging threat actors (as well as experience identifying rapidly changing tools, tactics and procedures of attackers).

Job Responsibilities:

1. Manage engagements with a focus on incident response and forensics
2. Direct litigation support efforts by acquiring, minimizing, searching and producing electronic evidence for legal counsel as well as serving as an expert witness as needed
3. Assist with scoping prospective engagements, participating in engagements from kickoff through full remediation, and mentoring less experienced staff
4. Supervise staff, including providing development and coaching
5. Identify improvements to business processes and methodologies
6. Successfully interface with clients (internal and external)
7. Document and explain technical details in a concise, understandable manner
8. Provide public speaking engagements or present to an audience
9. Lead multiple projects and manage tight deadlines
10. Leverage project management skills to effectively budget, scope, and execute engagements

Job Qualifications

Education

1. Bachelors Degree in Cybersecurity (or related field) or equivalent work experience required. Equivalent years of experience are determined as one year of technical experience for every year of college requested.

Experience

1. 10 years of incident response and/or information security experience
2. 5 years of management and consulting experience
3. Technical experience in the following:

• Windows disk and memory forensics
• Network Security Monitoring (NSM), network traffic analysis, and log analysis
• Unix or Linux disk and memory forensics
• Static and dynamic malware analysis
• Forensic and malware analysis
• Threat management/hunting
• Threat analysis
• Vulnerability management and analysis
• Experience with a Managed Security Services (MSS)

Skills/Certifications

1. Applied knowledge in at least one scripting or development language (such as Python)
2. Thorough understanding of enterprise security controls in Active Directory / Windows environments
3. Must be able to see the big picture, understanding evolving attacker behavior and motivations, participate and direct large projects, and help to train/mentor other security team members
4. Possess sound business acumen, strong consulting skills, current technical skills and be adept in leading multiple projects under tight deadlines
5. CISSP or CISA certifications

Number of Openings Available:

1

Worker Type:

Employee

Company:

BCBST BlueCross BlueShield of Tennessee, Inc.