Threat Response Manager, Cyber Defense Operations
US-CO-Littleton
Attract-careers1
Req #: 95369
Type: Fulltime-Regular
|
|
||||||||||
|
|||||||||||
Overview: Our Technology teams challenge the status quo and reimagine capabilities across industries. Whether through research and development, technology innovation or solution engineering, our team members play a vital role in connecting consumers with the products and platforms of tomorrow. Responsibilities: EchoStar is seeking a decisive and experienced Threat Response Manager to lead our multi-tiered Threat Response team. This is a critical leadership role that requires an equal blend of technical execution, strategic process refinement, and people development. You will be the execution driver for all incident response activities, responsible for ensuring the team has the skills, resources, and tactical readiness to deliver best-in-class response during high-stakes cyber incidents. Key Responsibilities: * Lead talent development; manage performance, conduct reviews, establish clear career progression paths, and actively mentor analysts to ensure the team maintains expert-level skills and readiness * Cultivate high-performance culture; nurture a calm, collaborative, and decisive team environment, serving as the primary example of composed leadership during high-pressure incidents * Own the team's operational capacity by monitoring staffing, tools, and training needs; lead hiring efforts; and coordinate external services to supplement capabilities as required * Incident Commander (IC) accountability; serve as the primary Incident Commander during complex, high-severity incidents, coordinating technical containment and ensuring continuous, effective communication with all stakeholders and leadership * Define and track operational metrics; establish Key Performance Indicators (KPIs) and drive continuous improvement in critical metrics such as Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR) * Define the tactical and operational steps for incident handling; ensure strict adherence to incident response plans and governance frameworks (NIST) to maintain an audit-ready posture * Drive operational improvements in the threat detection pipeline, actively reducing alert noise and optimizing the performance of the core security ecosystem (SIEM, UEBA, EDR, IDS/IPS, etc.) * Threat Modeling; apply in-depth knowledge of adversary and cyber defense models (MITRE ATT&CK and MITRE D3FEND) to tactically refine detection rules and inform proactive threat hunting strategies * Review and analyze post-incident reports to identify patterns, trends, and systemic vulnerabilities; clearly and effectively translate complex technical findings into actionable recommendations for security leadership Qualifications: Education & Experience: * Bachelor's Degree or equivalent work experience. * 5+ years experience in Information Security, preferably in one of the following areas: * Computer Incident Response Team (CIRT) * Computer Security Incident Response Center (CSIRC) * Security Operations Center (SOC) * GIAC Certified Incident Handler (GCIH) (or equivalent incident-focused certification) preferred * (ISC) Certified Information Systems Security Professional (CISSP) preferred Skills and Qualifications: * Experience with various security technologies (SIEM, UEBA, EDR, IDS/IPS, etc.) * Experience with leading cyber security investigations and incident response * Experience in communicating complex technical information clearly and effectively to both technical and non-technical audiences * Management experience with operations teams preferred * Experience with digital forensic analysis preferred Visa sponsorship not available for this role Candidates must be willing to participate in at least one in-person interview, which may include a live whiteboarding or technical assessment session.
Share this job:
