SoFi Technologies

1 month ago

Cybersecurity Incident Commander

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Lead incident command for security events detected by the SOC, managing the full incident lifecycle from triage through containment, eradication, recovery, and closure. Coordinate cross-functional response across technical and business teams while maintaining incident command structure, situational awareness, and executive-ready updates. Ensure consistent documentation, evidence handling, severity classifications, escalation criteria, and drive post-incident reviews with root cause analysis and remediation tracking.

Location: Seattle, San Francisco

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Serve as the primary Security Incident Commander for incidents identified by the SOC.
•Lead and manage the end-to-end incident lifecycle: triage validation, containment, eradication, recovery, and closure.
•Establish and maintain incident command during high-severity or large-scale incidents.
•Drive cross-functional collaboration and decision-making to ensure timely and effective response.
•Coordinate post-incident reviews, including root cause analysis, lessons learned, and remediation action tracking.

Pay and Benefits

Salary: USD 134,400 - 231,000 annually

Key Requirements

•3–7+ years of experience in cybersecurity operations, incident response, or SOC environments.
•Direct experience coordinating or leading security incident response efforts in enterprise environments.
•Strong understanding of the incident response lifecycle and frameworks (e.g., NIST 800-61).
•Experience handling high-severity incidents such as ransomware, business email compromise, insider threats, cloud compromise, or data exfiltration.
•Ability to interpret technical findings and communicate clear, actionable updates to technical and non-technical stakeholders.

Experience:3+ yearsCybersecurity operationsIncident responseSOC

Skills:Exceptional communicationOrganizational skillsCross-functional collaborationAbility to drive accountability

Certifications:GCIAGCIHGCEDCISSPCISM

Languages:English

Tech Stack:NIST 800-61SIEMEDREmail securityIAMAWSGCPAzureCloud-native securityNetwork monitoring toolsMITRE ATT&CK

Company Brief

SoFi Technologies

Industry: Neobanking

Website

Loading job details...

Preparing the role view and application actions.

SoFi Technologies

1 month ago

Cybersecurity Incident Commander

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Location: Seattle, San Francisco

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Serve as the primary Security Incident Commander for incidents identified by the SOC.
•Lead and manage the end-to-end incident lifecycle: triage validation, containment, eradication, recovery, and closure.
•Establish and maintain incident command during high-severity or large-scale incidents.
•Drive cross-functional collaboration and decision-making to ensure timely and effective response.
•Coordinate post-incident reviews, including root cause analysis, lessons learned, and remediation action tracking.

Pay and Benefits

Salary: USD 134,400 - 231,000 annually

Key Requirements

•3–7+ years of experience in cybersecurity operations, incident response, or SOC environments.
•Direct experience coordinating or leading security incident response efforts in enterprise environments.
•Strong understanding of the incident response lifecycle and frameworks (e.g., NIST 800-61).
•Experience handling high-severity incidents such as ransomware, business email compromise, insider threats, cloud compromise, or data exfiltration.
•Ability to interpret technical findings and communicate clear, actionable updates to technical and non-technical stakeholders.

Experience:3+ yearsCybersecurity operationsIncident responseSOC

Skills:Exceptional communicationOrganizational skillsCross-functional collaborationAbility to drive accountability

Certifications:GCIAGCIHGCEDCISSPCISM

Languages:English

Tech Stack:NIST 800-61SIEMEDREmail securityIAMAWSGCPAzureCloud-native securityNetwork monitoring toolsMITRE ATT&CK

Company Brief

SoFi Technologies

Industry: Neobanking

Website