Cybersecurity Incident Response Team Coordinator

Role Overview

• Act as the primary coordinator for cybersecurity incidents across all product and engineering teams
• Lead real-time incident bridges and war rooms during active security events
• Drive structured execution of the incident response lifecycle (detection, analysis, containment, eradication, recovery, post-incident review)
• Maintain accurate incident documentation, timelines, and impact assessments
• Serve as the security liaison between product teams, engineering, infrastructure, legal, compliance, and executive leadership
• Coordinate directly with cloud and enterprise technology providers, including Oracle environments where applicable
• Align response efforts across multiple products to ensure consistency and minimize business impact
• Participate in a 24/7 on-call rotation for high-severity cybersecurity incidents
• Provide real-time status updates to leadership and stakeholders
• Escalate incidents appropriately based on severity and business impact
• Ensure SLA adherence and timely stakeholder notifications
• Conduct post-incident reviews (PIRs) and drive root cause analysis efforts
• Identify process gaps and recommend improvements to incident response playbooks
• Develop and maintain runbooks for cloud-related and cross-product incidents
• Partner with Security Operations to improve detection, response readiness, and automation
• Support regulatory and customer reporting requirements related to security incidents
• Ensure incident handling aligns with company security policies, industry standards, and audit requirements
• Contribute to audit readiness and documentation efforts

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience)
• 5+ years of experience in cybersecurity, incident response, or security operations
• 2+ years coordinating major security incidents in complex enterprise environments
• Must have experience working with Indian Health Service (IHS)
• Strong understanding of the incident response lifecycle and best practices
• Knowledge of cloud security concepts, including Oracle cloud environments
• Experience with threat detection, containment, and mitigation practices
• Experience working across multiple product or engineering teams in large-scale environments
• Experience participating in 24/7 on-call rotations
• Ability to travel up to 25%

Tech Stack

• Cloud
• Cyber Security
• Oracle

Benefits

• Health insurance
• 401(k) plan
• Paid time off including vacation, sick time, and holidays
• Paid parental leave
• Military leave
• Bereavement leave
• Jury duty leave
• Flex work weeks where possible