Incident Operations Lead
$100k - $166k/yr
Mid
Bachelor's
Salt Lake City, UT, USA+4 moreMore locations: Long Island City, Queens, NY, USA | Boston, MA, USA | Orlando, FL, USA | Washington, DC, USA
HybridHybrid work arrangement.
CybersecuritySecurity Operations & Incident Response
No H1B Sponsorship
About the job
Requirements
- A bachelor's degree in Cyber Security, Information Technology, Computer Science, Business, Emergency Management, or another relevant discipline; alternatively, a high school diploma/GED and at least four years of relevant experience in cybersecurity operations, incident response, technology incident management, enterprise IT operations, or a related field.
- Four years of experience coordinating or supporting cybersecurity incidents, technology incidents, security operations, or similar high-priority operational response activities.
- Demonstrated security fluency, including understanding incident response concepts, common security events, severity and risk, containment, remediation, evidence handling, and escalation needs.
- Experience managing incident calls, operational bridges, action trackers, status updates, stakeholder communications, or cross-team response coordination.
- Strong written and verbal communication skills, including the ability to summarize complex technical information clearly for technical and non-technical audiences.
- Ability to organize ambiguous information into clear priorities, owners, actions, timelines, risks, and decisions during time-sensitive events.
- Ability to work effectively with technical responders without micromanaging investigation steps, while ensuring response activity remains structured, documented, and progressing.
- Strong problem-solving, judgment, ownership, and follow-through skills in a fast-paced operational environment.
- Ability to manage multiple priorities, stakeholders, issues, and deadlines simultaneously.
- Ability to pass a live scenario-based interview or skills demonstration with JetBlue Crew Members.
- Availability and willingness to participate in periodic on-call duties and off-hours incident response as required.
- Availability for occasional overnight travel (10%).
- Must pass a pre-employment drug test.
- Must be legally eligible to work in the country where the position is located; authorization to work in the United States is required.
- Must be eligible to hold a U.S. government security clearance if JetBlue deems it relevant to the role.
Responsibilities
- Lead operational coordination of cybersecurity incidents, including bridge management, stakeholder communication, action tracking, handoffs, documentation, and leadership-ready status updates.
- Coordinate response activity across Incident Response, Threat Intelligence, Detection Engineering, Security Monitoring, IT Operations, Identity, Infrastructure, application teams, Legal, Communications, vendors, and other stakeholders as needed.
- Support incident declaration, escalation, severity alignment, communication cadence, and response workflow execution according to established incident response procedures.
- Translate technical findings, timelines, risks, containment actions, and remediation status into clear summaries for leadership and non-technical stakeholders.
- Maintain accurate incident records, including timelines, key decisions, attendees, action items, evidence references, follow-up owners, and closure documentation.
- Convert lessons learned, gaps, and corrective actions into tracked issues with owners, due dates, updates, and closure evidence.
- Identify gaps in incident readiness, including access, tooling, logging, escalation paths, contact lists, documentation, playbooks, templates, evidence handling, and cross-team dependencies.
- Develop, maintain, and improve incident response procedures, bridge guidance, communication templates, after-action processes, tabletop materials, and response readiness documentation.
- Coordinate tabletop exercises, readiness reviews, control tests, and follow-up tracking to improve the organization's ability to respond to cybersecurity incidents.
- Support operational prioritization during high-volume periods or active incidents by organizing response activity, reducing coordination friction, and maintaining visibility into outstanding work.
- Provide guidance to analysts and stakeholders on incident documentation, communication expectations, escalation hygiene, and action tracking during response activities.
- Fulfill safety accountabilities prescribed by JetBlue's Safety Management System and adhere to applicable laws, regulations, company policies, procedures, and risk controls.
- Help ensure crewmembers have the training, resources, and support needed to achieve safety objectives.
- Identify and report safety and security concerns, issues, incidents, or hazards through available channels, including JetBlue's confidential reporting systems.
Desired Qualifications
- Five or more years of experience in cybersecurity operations, incident response, security operations, technology incident management, crisis management, or a similar operational leadership function.
- Experience serving as an Incident Commander, Incident Manager, Cyber Incident Coordinator, Response Lead, Major Incident Manager, CSIRT Coordinator, or similar role.
- Experience working in or closely with a SOC, Incident Response team, Threat Detection team, managed security provider, or enterprise cybersecurity organization.
- Familiarity with SIEM, EDR, SOAR, case management, ticketing, identity, email security, cloud security, endpoint security, and network security concepts.
- Experience with platforms such as Splunk, Microsoft Defender, SentinelOne, XSOAR, ServiceNow, Jira, or similar investigation, response, and work-tracking tools.
- Experience developing or maintaining incident response playbooks, runbooks, communication templates, after-action reports, tabletop exercises, metrics, dashboards, or process documentation.
- Familiarity with cybersecurity incident response frameworks or practices such as NIST SP 800-61, CSIRT operating models, MITRE ATT&CK, ITIL Major Incident Management, or similar guidance.
- Experience coordinating legal, communications, executive leadership, vendor, or external partner involvement during significant incidents or operational events.
- Experience tracking corrective actions, remediation items, issue backlogs, control gaps, or cross-team dependencies to closure.
- Airline, transportation, critical infrastructure, or large-enterprise experience in Security Operations, Incident Response, Threat Detection, Technology Operations, or Crisis Management.
- Relevant certifications such as Security+, CISSP, GCIH, GCIA, GCFA, PMP, ITIL, or similar security, incident management, or project management credentials.
About the company
JetBlue operates as a low-cost airline focused on better passenger experience. It offers affordable air travel with extra amenities such as seat-back in-flight entertainment and, on certain routes, a premium Mint cabin, including transcontinental flights and some transatlantic services. JetBlue’s product combines low fares with higher service standards and differentiated features to attract both leisure and business travelers. Its approach stands out from competitors by pairing budget pricing with added comfort, a track record of profitability through industry downturns, and targeted product upgrades like Mint and transatlantic expansions. The company aims to broaden its network while holding costs steady, extending its reach to Europe and other markets and continuing to optimize operations for sustainable growth.
Company Size
10,001+
Company Stage
IPO
Headquarters
New York City, New York
Founded
1999
Get referred to JetBlue
See people who can refer or advise you
Simplify's Take
What believers are saying
- FLL departures rose over 75% year over year, with nearly 150 daily flights coming.
- JetBlue added Barranquilla October 1 and Cali October 15, expanding Colombia traffic.
- JetForward has delivered $470 million cumulative EBIT through June 2026, tracking to $1.2 billion in 2028.
What critics are saying
- BlueFirst cuts Main legroom to 30 inches, risking backlash from loyal economy flyers.
- JetBlue lost $141 million operatingly in Q2 2026, despite $2.7 billion revenue.
- Spirit's 2026 collapse removes a smaller rival, but entrenched majors still crush JetBlue pricing.
What makes JetBlue unique
- BlueHouse lounges opened at JFK and Boston in 2026, deepening premium control.
- BlueFirst launches a domestic first-class layer across non-Mint aircraft in 2026.
- JetBlue still markets Fly-Fi, seatback screens, and customer service as core brand moats.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Health Insurance
- 401(k) Retirement Plan
- 401(k) Company Match
- Short-term Disability Insurance
- Long-term Disability Insurance
- Basic Life Insurance
- Flexible Work Hours
- Travel Benefits