Director, Dt- Incident Response - Chicago, United States - United Airlines

United Airlines

Verified Company

Chicago, United States

3 weeks ago

Posted by:

Mark Lane

beBee recruiter

Description

Description:

There's never been a more exciting time to join United Airlines. We're on a path towards becoming the best airline in the history of aviation.

Our shared purpose - Connecting People, Uniting the World - is about more than getting people from one place to another.

It also means that as a global company that operates in hundreds of locations around the world with millions of customers and tens of thousands of employees, we have a unique responsibility to uplift and provide opportunities in the places where we work, live and fly, and we can only do that with a truly diverse and inclusive workforce.

And we're growing - in the years ahead, we'll hire tens of thousands of people across every area of the airline.

Our careers include a competitive benefits package aimed at keeping you happy, healthy, and well-traveled.

From employee-run "Business Resource Group" communities to world-class benefits like parental leave, 401k, and privileges like space available travel, United is truly a one-of-a-kind place to work.

Are you ready to travel the world?

We believe that inclusion propels innovation and is the foundation of all that we do.

United's Digital Technology team spans the globe and is made up of diverse individuals all working together with cutting-edge technology to build the best airline in the history of aviation.

Our team designs, develops and maintains massively scaling technology solutions brought to life with innovative architectures, data analytics, and digital solutions.

Job overview and responsibilities:

The
Director of Incident Response will lead our Incident Response and Security Operations Center.

This team will be responsible for detecting and responding to cyber incidents, improving the security posture of United Airlines by keeping our customers and employees safe, as well as helping secure the connected aviation ecosystem from real world threats.

We are looking for someone with the passion for cybersecurity, technology, and travel
- and the wisdom to know that the best security organizations have a people first strategy.

Own the Incident Response (IR) & Security Operations Center (SOC) team, which detects, analyzes, and responds to cyberattacks against United.
Attract, Hire, and Retain top talent for the organization.
Coach and mentor individuals at all levels of the organization, demonstrating tangible results and growth in your people.
Develop and scale processes for an automated Intelligence-Driven Detection and Response program.
Ensure up to date IR plans and playbooks exist and are followed.
Find opportunities to use and operationalize existing security investments while also identifying gaps in our defenses and recommending new technologies.
Perform as the uberIncident Commander for any major event or incident and drive towards resolution across all partners while ensuring communication is delivered in a manner understandable by nontechnical audiences.
Define and build evaluation methods program to track maturity, evolution, and health of the program over time.
Work with external partners such as law enforcement, cyber insurers, lawyers and more, as needed.
Build and define interlocks between internal and external partners and ensure those interlocks remain in working order and are tested over time.

Qualifications:

What's needed to succeed (Minimum Qualifications):

Bachelor's degree.
Industry certifications such as the CISSP, CISM, CISA, GCIH, CFCE, GFCA, and/or GCFE.
12+ years of enterpriselevel incident response experience, with management experience.
Expertlevel understanding of all aspects of incident response, including communication, legal, public relations, cyber insurance, IR plans, IR playbooks, forensics, wargaming, threat hunting, detection technologies, intelligence, attack lifecycles, etc.
Develop and implement roadmaps for cybersecurity initiatives; prevent, manage, and mitigate cybersecurity incidents; identify, analyze, and resolve problems; outstanding communication skills (including to nontechnical audiences); high emotional intelligence; agility.
Must be legally authorized to work in the United States for any employer without sponsorship.
Successful completion of interview required to meet job qualification.
Reliable, punctual attendance is a crucial function of the position.

What will help you propel from the pack (Preferred Qualifications):