Senior Cyber Security Incident Handler

Cyber Security Incident Handler: Become the Newest Member of the VF Family

As technology continues to advance so does the threat landscape. Attackers are now using more sophisticated tactics to evade security controls. As a result, VF must also continue to advance its capabilities in threat detection and monitoring systems.

The Senior Incident Handler is responsible for leading and coordinating the response to high-severity cybersecurity incidents across the global retail organization. This role involves managing the incident lifecycle, enhancing advanced threat detection capabilities, and collaborating with various teams to ensure effective incident resolution and mitigation. The Senior Incident Handler will also play a key role in developing and implementing strategic incident response plans, training programs, and improving overall security posture.

How You Will Make a Difference: 

• Incident Response Leadership:

• • Lead and coordinate incident response efforts for complex and high-severity incidents across multiple geographic locations, ensuring timely and effective communication and resolution.

  • Serve as the primary escalation point for high impact, and sensitive cybersecurity incidents, providing expert guidance and ensuring consistency in response quality.

  • Conduct comprehensive post-mortem analysis to identify root causes and recommend strategic improvements to prevent future incidents.

• Advanced Threat Detection and Analysis:

• • Oversee the monitoring and analysis of logs, alerts, and external data sources to determine security and operational impacts.

  • Collaborate with Detection Engineers to enhance detections, alerts, and cyber event correlation rules within the SIEM to reduce false positives and improve accuracy.

  • Lead proactive threat hunting activities to identify advanced threats and vulnerabilities within the network.

• Research and Threat Intelligence:

• • Direct research on security events and threat intelligence using internal and open-source tools.

  • Validate and analyze security event data, providing actionable insights to improve threat detection and mitigation capabilities.

  • Stay updated on emerging threats and vulnerabilities, integrating relevant threat intelligence into incident response strategies to improve security posture.

• Incident Lifecycle Management:

• • Manage the incident lifecycle, ensuring all incidents are up-to-date and complete. Collect relevant evidence (artifacts) for each incident in the incident tracking system.

  • Coordinate with technical teams to remediate incidents, including malware eradication and containment of incidents along the cyber kill chain.

• Documentation and Reporting:

• • Develop and track incident response metrics, providing regular reports to senior management on the effectiveness of the incident response program.

  • Document event analysis and record data within the Incident Tracking tool, ensuring all relevant data is captured.

• Training and Development:

• • Train and mentor Incident Handlers, SOC Analysts, and other team members on advanced security tools and incident response procedures.

  • Represent the Security Operations team in various SOC, Incident Response, and Cyber Security projects.

  • Optimize and fine-tune security tools and systems to improve detection and response capabilities.

• Policy and Plan Ownership:

• • Own and maintain the Incident Response (IR) Policy and Incident Response Plan, ensuring they are up-to-date and effective.

  • Develop and implement strategic improvements to the IR Policy and IR Plan based on lessons learned from incidents and emerging threats.

  • Develop and maintain Incident Response playbooks, standard operating procedures (SOPs) and escalation workflows to ensure consistent and efficient handling of security incidents.

• Relationship Management:

• • Manage relationships with internal and external counsel, HR, and Employee Relations to ensure coordinated and compliant incident response efforts.

  • Collaborate with these