Cybersecurity Incident Response Manager

Job Overview:

Interested in defending a global tech company from the latest cyber threats? Arm is seeking a passionate, experienced Cyber Incident Response Manager to join our growing Cyber Defence Operations (CDO) team, protecting Arm against current and future cyber-attacks! Situated within Arm's Enterprise Security function in the CDO team, this role will manage security incident & vulnerability response, including acting as a technical SME.

CDO enables Arm to be successful, delivering scalable and defendable security services that not only provide for the protection of Arm, customer & partner data, but that enables advantage in a competitive industry.

Responsibilities:

• You will lead the response to high priority security incidents in conjunction with security stakeholders across the business.
• Facilitate major incident briefing calls, direction of required response tasks and documentation & distribution of incident communications.
• Coordination and engagement with internal partners, contracted security providers and/or law enforcement on larger investigations.
• Update and improve operational response and forensics capability (including process and technology) in line with Security IR requirements, covering Windows, Linux & Mac hosts, networks and cloud environments, while providing recommendations to optimise and evolve the security technology stack.
• Support Arm leaders in planning for security incidents, ensuring that capabilities and procedures are regularly tested to ensure they meet requirements.
• Maintain and improve the post incident review process, including root cause analysis process and control improvements.
• Contribute to the development of policies, standards and guidelines for incident response.
• Maintain knowledge of current threats, possessing the capability to replicate and protect against the techniques used.
• Provide relevant input from Incident Response work to Detection Engineering, Threat Hunting, Exposure Management and other Cyber Defence Operations capabilities.

Required Skills and Experience:

• Demonstrable experience of leading teams of investigators on diverse and complex investigations
• You should have minimum experience of 10 years.
• Proven track record in Information Security with a focus on Incident Response.
• In-depth knowledge of the cyber security threat landscape and experience in bring it to bear in a tailored response to a major incident.
• You should have an extensive, up to date understanding of the tools techniques and tactics of Targeted Threat Actors and insight into present and future trends.
• Solid grasp of CDO and Incident Response (IR) processes and experience with relevant tools (EDR, SIEM, IR management).

“Nice To Have” Skills and Experience: