KKR

4 months ago

Threat Detection & Response - Blue Team Lead

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 42 minutes agoStatus: Live

Job Summary

Senior incident response leader responsible for US regional escalation, incident command, containment strategy, and cross-functional coordination across CIRT, infrastructure, cloud, identity, legal/compliance, and business stakeholders. Shapes readiness, playbooks, and AI-enabled response in a cloud-first, hybrid environment; partners with MSSP ReliaQuest and SOC Engineering to improve detection, response, and post-incident improvements.

Location: New York, Boston

Workplace: Onsite

Employment Type: Full time

Job Function: Administration & Executive Assistance

Seniority: Sr. Manager level

Key Responsibilities

•Act as U.S. escalation lead / incident commander for high-severity incidents, owning response strategy, containment decisions, and coordination through resolution.
•Lead cross-functional response with internal CIRT, infrastructure/platform teams, cloud teams, identity teams, legal/compliance, and business stakeholders.
•Provide executive-ready briefings and situational updates during active incidents, clearly communicating risk, impact, tradeoffs, and next steps.
•Ensure post-incident reviews are completed and translated into measurable remediation and program improvements.
•Own and continuously improve incident response playbooks (e.g., ransomware/extortion, BEC, cloud account compromise, token/key theft, data exfiltration, insider risk).

Pay and Benefits

Salary: USD 150,000 - 180,000 annually

Key Requirements

•6+ years in Incident Response, Security Operations, or Blue Team roles, including leading high-severity incidents end-to-end.
•Proven ability to serve as an escalation lead and incident commander—calm, decisive leadership in ambiguous, high-pressure situations.
•Strong communication skills: able to translate complex technical details into clear, actionable updates for executives and stakeholders.
•Experience operating in cloud-forward enterprises, including hybrid environments spanning SaaS, cloud-native workloads, and on-prem systems.
•Strong familiarity with identity-centric security models and investigations (federated identity, IAM abuse patterns, token theft, conditional access signals).

Experience:6+ yearsCybersecurityCloudHybridSaaSOn-prem

Skills:CommunicationLeadershipCollaborationProblem-solvingStrategic thinking

Languages:English

Tech Stack:KubernetesContainersSOARMITRE ATT&CKAICloudCI/CD

Company Brief

KKR

Global investment firm providing alternative asset management and capital markets services across private equity, credit, real assets, and hedge funds, serving institutional and private clients worldwide.

Industry: Asset Management

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: New York, United States

Founded: 1976

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

KKR