Lead, Cyber Threat Response

About the role

The Cyber Threat Response (CTR) Lead supports incident coordination, security event investigation, and overall security operations for a global luxury beauty company. Based in New York, the role works closely with Security Operations, IT, Legal, Privacy, and external partners to ensure timely decisions and continuous improvement of response readiness.

Key responsibilities

• Investigate threat activity, assess impact, and document findings.
• Coordinate incident response across triage, containment, remediation, recovery, and closure.
• Lead response efforts for emerging threats such as zero‑day vulnerabilities, third‑party breaches, and threat‑hunting findings.
• Collaborate with internal teams and external partners for escalation and resolution.
• Maintain playbooks, workflows, and response documentation.
• Support tabletop exercises, lessons learned, and after‑action reviews.
• Provide on‑call emergency cyber incident response outside normal business hours.
• Assist with insider‑threat reviews, executive protection, digital forensics, and eDiscovery.
• Contribute to projects that strengthen security operations and response maturity.

Required profile

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Digital Forensics, or a related field (or equivalent experience).
• 3–5 years of experience in threat management, cybersecurity, security operations, incident response, threat hunting, digital forensics, or vulnerability management.
• Working knowledge of cybersecurity concepts and incident‑response processes.

Required skills

• Cyber threat investigation
• Incident response coordination
• Digital forensics
• eDiscovery
• Threat hunting
• Vulnerability management