Sr. CSIRT Commander

The Challenge 

Join the Adobe Cyber Defense Center as a Senior Incident Response Commander. With your extensive experience in incident response, digital forensics, investigative skills, and process improvement, you'll play a key role in minimizing damage, protecting sensitive data, and ensuring business continuity. You'll manage and investigate complex incidents, drive investigations to successful conclusions, and enhance our processes. Collaborate with senior staff to execute strategies and elevate our Incident Response program. Are you ready to leverage your expertise and make a significant impact?

What You Will Do 

• Incident Response: Confidently lead incident response activities, ensuring stakeholder alignment for efficient responses. Collaborate with leadership to implement strategic initiatives and foster continuous learning to enhance incident response capabilities organization-wide.

• Investigations: Analyze data points from past or current cases using critical thinking and investigative skills. Identify indicators of compromise, potential attack vectors, and root causes to guideeffectiveresolution steps and discover new connections.

• Reporting: Keep detailed incident records and provide clear, concise reports to leadership. Ensure timely updates and communicate critical information effectively to stakeholders.

• Technical Expert: Provide technical support for incidents, guide team members, and offer technical direction. Use your expertise to troubleshoot and resolve issues, assisting in the technical aspects of incident response.

• Continuous Improvement: Enhance incident response through post-incident retrospectives and security, engineering, and partner team feedback.

• Training and Presentations: Develop and present comprehensive reports, training sessions, and presentations for both technical and non-technical audiences.

• Process Development: Assist in designing, documenting, and reporting on incident response processes, procedures, and metrics to optimize efficiency and effectiveness.

• Threat Awareness: Stay updated on emerging threats and attack vectors to maintainexpertise in the evolving cyber landscape.

What You Need to Succeed 

• Incident Response Expertise: Bring at least 8+ years of hands-on experience managing the end-to-end incident response lifecycle, including detection, analysis, and post-incident activities. Demonstrate proficiency in incident response and digital forensics, particularly in responding at scale.

• Technical Proficiency: Possessing a robust understanding of threat intelligence, malware analysis, and network security concepts, complemented by practical expertise in digital forensics across operating systems, memory analysis, and handling malicious files.Experiencedin utilizing EDR (Endpoint Detection and Response) tooling for effective incident response and management at scale. Knowledge of reverse engineering or scripting or programming languages is a plus.

• Investigation Background: Strong investigative skills and incident response expertise to effectively manage and resolve complex cases. Previous government or law enforcement experience with large-scale investigations is a plus.

• Analytical Skills: Excellent at analyzing large data sets under pressure, with strong multitasking abilities to address complex challenges and prioritize tasks effectively.

• Communication Skills: Clear and effective communication with diverse stakeholders and engineering teams. Strong in both written and verbal communication to deliver reports and updates and present technical findings to leadership.

• Curiosity and Learning: Stay updated on emerging technologies and evolving attack methods. Actively explore and master new tools to enhance investigative capabilities, proactively sharing knowledge to strengthen incident response effectiveness.

• Security and Compliance Knowledge: Solid understanding of security fundamentals and familiarity with regulatory frameworks such as FedRAMP, ISO 27001, SOC2, HIPAA, FERPA, GDPR, and PCI-DSS.

• Collaborative Mindset: Embrace collaboration, building team relationships to drive projects and provide incident support. Encourage innovative problem-solving and solutions-driven thinking.

Why Join Us?

• Innovation: Be part of a team that fosters a culture of experimentation, innovation, and continuous learning.

• Impact: Play a key role in safeguarding our enterprise from advanced cyber threats and improving our overall security posture.

• Growth: Opportunities for professional growth and development through challenging projects and ongoing training.

• Collaboration: Work in a collaborative environment that values relationships and teamwork.