Incident Response Program Lead
$146k - $155k
Senior
Remote in USA
RemoteRemote within the continental United States; Central Time Zone business hours. Remote work is limited to the continental United States.
CybersecuritySecurity Operations & Incident Response
About the job
Requirements
- Five or more years of experience in information security, including substantial experience in incident response, security operations, detection and response, or a related discipline.
- Demonstrated experience leading or coordinating security incidents across technical and business teams, with a strong understanding of the full incident response lifecycle.
- Experience developing, maintaining, and testing incident response plans, procedures, and playbooks.
- Experience working with a managed security service provider, managed detection and response provider, security operations center, or other managed security partner.
- Working knowledge of security monitoring, security information and event management, endpoint security, cloud security, vulnerability management, identity and access management, and network security, with experience using logs and technical evidence to investigate security events.
- Experience with cloud-based environments, particularly Amazon Web Services, and the security considerations associated with multi-account cloud architectures.
- Knowledge of recognized security and incident response frameworks, such as NIST Cybersecurity Framework, NIST SP 800-61, and the SANS incident response process.
- Experience supporting security or compliance programs such as Payment Card Industry Data Security Standard, SOC 2, ISO 27001, or similar frameworks.
- Strong written and verbal communication skills, including the ability to produce clear incident documentation and communicate technical findings, risks, and recommendations to technical responders and business leaders.
- Ability to work independently, establish priorities, and make sound decisions while driving initiatives through completion in high-pressure or time-sensitive situations.
- Experience leading tabletop exercises involving executive leadership, Legal, Compliance, Engineering, and external service providers.
Responsibilities
- Own and continuously improve the Security Incident Response program, including policies, plans, playbooks, severity classifications, escalation criteria, communication protocols, and incident documentation.
- Serve as the incident lead during security and compliance incidents, coordinating investigation, containment, eradication, recovery, evidence preservation, and post-incident activities across technical and business teams.
- Oversee managed security service provider governance and performance, including onboarding, service integration, escalation procedures, service reviews, contractual requirements, service-level agreements, detection coverage, response times, quality standards, and agreed-upon metrics.
- Partner with the managed security service provider and internal teams to improve alert quality, detection rules, investigation procedures, log coverage, threat intelligence, and response automation.
- Hold the managed security service provider accountable for contractual and operational performance, run service reviews, and track deficiencies and corrective actions to closure.
- Lead incident response tabletop exercises and other required testing activities, document lessons learned and corrective actions, and track remediation through completion.
- Maintain incident response readiness through appropriate coverage, escalation capabilities, responder training, and coordination with the managed security service provider and designated internal responders.
- Drive operational reporting on incident trends, response metrics, recurring issues, managed security service provider performance, control gaps, and areas requiring leadership attention.
- Support the Information Security Manager with risk assessments, compliance activities, audit preparation, policy development, control reviews, vendor assessments, and remediation planning.
- Advise leadership and technical teams on security events, emerging risks, operational priorities, and recommended actions, translating technical security issues into clear business risks and decisions.
- Participate in an incident escalation or on-call rotation as required.
Desired Qualifications
- Experience with detection engineering and security operations, including detection coverage and tuning, false-positive reduction, threat hunting, digital forensics, malware analysis, or security automation.
- Hands-on experience with Sumo Logic, AWS Security tools, Cloudflare, Lacework, Sophos, or similar technologies.
- Experience responding to incidents involving payment card data or other regulated or sensitive information.
- Familiarity with PCI DSS 4.0.1 standards and payment-brand notification processes.
- Experience developing or improving a security operations program within a growing or cloud-native organization.
- Experience mentoring security professionals or leading project-based, matrixed, or virtual teams.
About the company
iSeatz provides digital commerce and loyalty technology that helps travel and lifestyle brands drive customer engagement and lifetime value. Its platform enables users to search, book, and receive loyalty rewards through connected experiences for clients like American Express, IHG Hotels & Resorts, and Wyndham Hotels & Resorts. The product combines e-commerce and loyalty features with advanced analytics and travel lifecycle expertise to optimize the customer journey from the initial search through post-booking interactions. Compared with peers, iSeatz differentiates itself with proven deliverability, strong analytics, and deep travel lifecycle know-how, plus a track record of partnering with top brands. The company’s goal is to create a seamless, engaging journey for customers that builds lasting brand loyalty and higher lifetime value for its clients.
Company Size
51-200
Company Stage
N/A
Total Funding
N/A
Headquarters
New Orleans, Louisiana
Founded
1999
Get referred to iSeatz
See people who can refer or advise you
Simplify's Take
What believers are saying
- iSeatz launched LXP in August 2024, then expanded leadership and product investment.
- June 2026 Inc. Best Workplaces recognition supports recruiting and employer brand.
- July 2026 survey of 2,000 travelers validates demand for smarter loyalty redemption tools.
What critics are saying
- LinkedIn posts in February 2025 and May 2026 show layoffs and instability.
- Competitors like Salesforce, Oracle, and Comarch can undercut iSeatz with broader suites.
- If LXP stalls beyond 2026, iSeatz becomes a niche services vendor, not platform winner.
What makes iSeatz unique
- LXP is API-first, multi-tenant, and supplier-agnostic, reducing enterprise integration complexity.
- iSeatz powers American Express, IHG Hotels, and Qantas travel booking and loyalty.
- Alan Josephs joined in December 2024 to deepen product strategy and market expansion.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Health Insurance
- 401(k) Company Match
- 401(k) Retirement Plan
- Unlimited Paid Time Off
- Remote Work Options
- Flexible Work Hours
- Paid Parental Leave