Cyber Defense Incident Response Lead

KeyCorp
United States
Workplace: RemoteFull timeUSD 96,000 - 181,000 annuallyFunction: CybersecurityExperience: 8+ yearsEducation: bachelorsSkills: ["Executive communication","Cross-functional coordination","Operational leadership","Documentation","Program management"]

Lead enterprise cybersecurity incident response across KeyBank’s Cyber Defense organization, coordinating triage, escalation, containment, and resolution tracking during high-impact events. Own and mature the incident response program through improved documentation, playbooks/runbooks, tabletop exercises, post-incident reviews, executive reporting, and performance metrics. Partner cross-functionally with technology, business, risk, legal, communications, and SOC teams to keep response capabilities aligned to evolving threats and regulatory expectations.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
KeyCorp
KeyCorp
1 day ago

Cyber Defense Incident Response Lead

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 45 minutes agoStatus: Live

Job Summary

Lead enterprise cybersecurity incident response across KeyBank’s Cyber Defense organization, coordinating triage, escalation, containment, and resolution tracking during high-impact events. Own and mature the incident response program through improved documentation, playbooks/runbooks, tabletop exercises, post-incident reviews, executive reporting, and performance metrics. Partner cross-functionally with technology, business, risk, legal, communications, and SOC teams to keep response capabilities aligned to evolving threats and regulatory expectations.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Lead cybersecurity incident response coordination for significant cyber events, including triage, escalation, containment coordination, and resolution tracking.
  • •Serve as primary incident command lead during active incidents and coordinate across multiple enterprise incident response partners.
  • •Maintain accurate incident documentation and case management, including timelines, actions, decisions, evidence, communications, and lessons learned.
  • •Develop and mature the incident response program through response frameworks, operating models, governance routines, templates, metrics, and continuous improvement.
  • •Design and facilitate tabletop exercises and post-incident reviews, then produce executive-level reporting and drive remediation actions.

Pay and Benefits

Salary: USD 96,000 - 181,000 annually

Key Requirements

  • •Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Business Continuity, Risk Management, or related field (or equivalent practical experience).
  • •8+ years of experience in cybersecurity, incident response, security operations, cyber risk management, or related disciplines.
  • •Demonstrated experience leading or coordinating cybersecurity incidents in complex enterprise environments.
  • •Strong understanding of the incident response lifecycle and ability to develop or maintain incident response plans, playbooks, runbooks, and after-action reports.
  • •Ability to lead cross-functional teams under pressure and communicate clearly with executive stakeholders about business impact and next steps.
Experience:8+ years
Education:Bachelor's
Skills:Executive communicationCross-functional coordinationOperational leadershipDocumentationProgram management
Certifications:CISSPGCIHGCFAGCEDCISMCRISCPMPITIL Foundation
Tech Stack:SIEMEDRXDRSOARServiceNow Security Incident ResponsePalo Alto Cortex XSIAMPalo Alto Cortex XSOARPalo Alto Cortex XDRThreat IntelligenceMITRE ATT&CKNIST CSFFFIEC Cybersecurity Assessment ToolITIL

Company Brief

KeyCorp
KeyCorp operates KeyBank, providing retail and commercial banking, lending, wealth management, and investment services to individuals, businesses, and institutions across the United States.
Industry: Banking
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Cleveland, United States
Founded: 1849
Glassdoor
Glassdoor: 3.6
WebsiteLinkedIn