Director, Cybersecurity - Incident Response

Company

Cox Communications, Inc.

Job Family Group

Information Technology

Job Profile

Director, Cybersecurity

Management Level

Director

Flexible Work Option

Hybrid - Ability to work remotely part of the week

Travel %

No

Work Shift

Day

Compensation

Compensation includes a base salary of $159,400.00 - $265,600.00. The base salary may vary within the anticipated base pay range based on factors such as the ultimate location of the position and the selected candidate’s knowledge, skills, and abilities. Position may be eligible for additional compensation that may include an incentive program.

Job Description

Cox Communication's is seeking a Director of Cybersecurity Incident Response, who will be responsible for leading and managing the company’s incident response strategy and operations. You will oversee the response, management, and resolution of cyber security incidents within the organization, ensuring that all incidents are handled effectively and efficiently to mitigate potential impact. This role requires a deep understanding of telecommunications infrastructure, cyber threats, and security operations, combined with strong leadership capabilities to guide a team of security, Legal, and Public Affairs experts.

Key Responsibilities:

• Incident Response Leadership:
  • Lead the incident response team to respond to, contain, and remediate cyber security incidents (e.g., data breaches, ransomware).
  • Develop and implement incident response plans, playbooks, and procedures specific to telecommunications environments.
  • Ensure incidents are prioritized based on severity, and effective triage is conducted.
  • Oversee real-time investigations, managing the collection and analysis of evidence, as well as coordinating recovery efforts.

• Cyber Security Threat Intelligence:
  • Continuously monitor and assess emerging threats and vulnerabilities specific to telecommunications systems and networks.
  • Maintain strong relationships with external threat intelligence providers, industry peers, and government agencies to stay informed about evolving cyber threats.

• Collaboration and Communication:
  • Serve as the primary point of contact during major security incidents, working with the AVP of Cyber Defense and executive leadership to provide updates and guidance on incident response.
  • Coordinate cross-functional efforts during major incidents, including IT, legal, public affairs, and compliance teams.
  • Provide recommendations on improvements to security policies, processes, and tools.

• Post-Incident Reporting & Analysis:
  • Conduct thorough post-incident reviews, ensuring root causes are identified and remediated to prevent recurrence.
  • Prepare and deliver comprehensive incident reports to leadership, and regulatory bodies as needed.
  • Use lessons learned from incidents to improve the company’s incident response procedures and security defenses.

• Team Management and Development:
  • Lead and mentor a high-performing team of incident responders, ensuring that they are equipped with the necessary skills and tools.
  • Manage hiring, training, and performance reviews for the incident response team.
  • Promote a culture of continuous improvement and professional development within the team.

• Regulatory Compliance and Documentation:
  • Ensure incident response activities comply with applicable legal, regulatory, and industry standards.
  • Maintain detailed records of all incident responses and provide documentation for audit and compliance purposes.

QUALIFICATIONS AND EXPERIENCE:

Minimum Education and Experience:

• BS/BA degree in a related discipline with 10+ years of experience in a related field, OR a MS/MA degree in a related discipline with 8+ years of experience in a related field, OR a Ph.D. in a related discipline with 5+ years of experience in a related field OR 22 years experience in related field.
• 5+ years in a management of leadership role.

Technical Skills:

• Extensive experience with incident response frameworks (e.g., NIST, SANS, ISO/IEC 27001).
• Proficiency with SIEM tools (e.g., Splunk, ArcSight, or similar) and forensic investigation tools (e.g., EnCase, FTK).
• Expertise in network security, endpoint security, and threat detection technologies.
• Familiarity with cloud security and advanced persistent threat (APT) mitigation.

Leadership and Soft Skills: