Senior Manager, Security - Detection & Incident Response

About the role

Kraft Heinz is looking for a Senior Manager, Security focused on detection and incident response, based in Chicago. The role leads the security incident detection and response lifecycle and manages the changing threat landscape through effective use of resources, threat intelligence and training. It also leads and manages the MSSP Security Operations Center.

Key responsibilities

• Lead and manage the MSSP SOC, ensuring timely identification, analysis, containment and remediation of global security events and incidents.
• Create, implement and maintain a strategic roadmap with security leadership, including KPIs and KRIs.
• Analyze cyber incidents and remediate or recommend remediation following incident response processes (detection, triage, containment, analysis, remediation and reporting).
• Conduct technical examination and reporting of computer-based evidence such as intrusion artifacts and IOCs.
• Develop and maintain incident response plans, playbooks, testing and training for internal and external team members.
• Recommend tuning of security tools based on threat feeds, reputation data, events or vulnerabilities.
• Collaborate with architecture, development and engineering teams to find root causes of recurring incidents and create action plans.
• Drive continuous improvement of detection and incident response programs across people, process and technology, including training, communication and relationships with business areas and vendors.

Required profile

• 7+ years of relevant information security experience.
• Ability to translate technical incidents into business terms and to present technical strategies and recommendations.
• Thorough understanding of SOC, incident response, threat hunting and enterprise digital forensics, including investigation techniques, evidence acquisition, chain of custody and preservation.
• Experience developing automated case management systems; scripting experience preferred.
• Hands-on experience building incident response programs with Legal and Chief Privacy Officer.
• Experience in an agile environment and as an incident controller performing timely escalations.

What we offer

• Medical, dental and vision coverage, plus prescription drug coverage.
• 7% 401(k) matching and a performance-based bonus.
• Paid time off, company holidays, leave of absence and flexible work arrangements.
• Employee assistance program, wellbeing programs and family support programs.
• Life, accidental death and disability insurance and disability coverage.