Learn more about and apply for the Principal Incident Response Engineer III, Cybersecurity (Incident Response) at Spectrum here

Principal Incident Response Engineer III, Cybersecurity (Incident Response)

There's a strong connection here.
Full Time Dallas, Texas Posted 08/09/2022 Business unit: Corporate - CCL - CORPL Areas of interest: Cybersecurity, Engineering, Information Technology Requisition Number: 313186BR-3 ISE801
Responsible for leading incident response and forensic investigation for the most complex security incidents, which potentially have a significant impact on the company. The position is also responsible for assessing cybersecurity incident response preparedness with organizations across the company on behalf of the CISO (Chief Information Security Officer). This position is responsible for understanding the root cause of each complex incident and developing recommendations for executive leadership on changes across the company to prevent recurrence, participating in a process of Continuous Improvement.

  • Actively and consistently support all efforts to simplify and enhance the customer experience
  • Successfully lead the response and investigation of major security incidents for Charter’s internal network which includes developing strategy in real time, leading security incident response team actions and responding with VP level+ in Legal, HR and other relevant areas
  • Set standards and provide sign-off on all technical training materials for incident responders and security analysts
  • Work with leaders in other disciplines to design and recommend significant process improvements that will proactively prevent recurrence of major cybersecurity incidents and improve Charter’s overall security posture
  • Provide guidance in the selection of $1M+ security solutions to best address Charter’s most complex threats and vulnerabilities in Cybersecurity, based on Security Incident Response expertise
  • Conduct thorough reviews of cyber threat intelligence reports and develop complex threat-hunting scenarios that represent the greatest risk to the ability of Charter to provide services to customers and protect Charter’s people, process, and technologies
  • Subject Matter Expert in the latest cybersecurity incidents impacting other companies within the industry, and globally, understanding the attack vector and the root cause of the attacker’s success
  • Advise Charter’s executive leadership on the best approaches to prevent incidents or detect them at an early stage
  • Test Charter’s Cybersecurity Incident Response Plan and take the lead on testing those of other areas to ensure preparedness for incidents that cross departmental boundaries
  • Identify implications for the broader company and strategy needed to prevent recurrence
  • Mentor and guide the work of senior technical security staff and work with leadership in defining career development plans
  • Ensure compliance with security standards, policies and procedures
  • Adhere to industry specific local, state, and federal regulations, as applicable.
Required Skills/Abilities and Knowledge
  • Ability to read, write, speak and understand English
  • Advanced expert knowledge of current cybersecurity exploits and vulnerabilities (the cybersecurity landscape)
  • Advanced expert knowledge of early detection techniques
  • Demonstrated ability to be an industry leader in identifying the latest attacks and developing the best ways to identify those families of attacks and conduct incident response against them
  • Advanced expert knowledge of forensic methodologies and best practices to investigate intrusions, preserve evidence and coordinate a unified security response
  • Demonstrated comprehensive knowledge of threat research on current and future security threats that may affect a Service Provider network
  • Substantial experience in developing and implementing a framework for a threat-hunting program.
  • Ability to provide executives with real-time status reports on incident investigations and assess level of severity
  • Demonstrated leadership capabilities under pressure with the ability to work across functional boundaries and coordinate response across many teams from many vectors.
  • Advanced expert knowledge of related industry specifications and standards including NIST, Mitre Att&ck Framework, ITIL, FIRST, PCI, and other industry best practices.
  • Advanced expert knowledge in network security design, network security architecture, and TCP/IP protocols
  • Effective written and verbal communication skills and good presentation skills
  • Ability to solve problems, balance competing priorities and manage through complexity and rapid change
Required Education
Masters or Bachelor's Degree in Computer Science or Information Systems or related field or equivalent combination of education and experience

ISC2 Certification such as Certified Information Systems Security Professional (CISSP)

Certified Industry and vendor specific certifications and training in relevant technologies

Required Related Work Experience and Number of Years
Information security - 12+ years of relevant operational experience
Demonstrated experience in managing information security events and incidents for large and sophisticated networks - 5+
Substantial experience in developing and implementing a framework for a threat-hunting program

Preferred Skills/Abilities and Knowledge

Expertise in Security Information and Event Management (SIEM) and log management tools
Expertise in computer forensics tools
Expertise in Security Orchestration and Automation (SOAR)
Expertise in threat hunting

Preferred Education
PhD. in Cybersecurity or related field
Certified Ethical Hacking (CEH)
SANS Global Information Assurance Certification, such as GCIH, GCIA, GPEN, GCED
Certified Forensics Examiner (CFE)

Preferred Related Work Experience and Number of Years
Experience in Security Incident Response Leadership – 10 years
Experience in Information Security Operations – 10 years
Experience with Threat Intelligence
Experience with Threat Hunting
Experience with Vulnerability Assessment and Remediation
Experience with Security Risk Assessments

Hybrid Office Environment
Minimal Travel Required

ISE801 313186-3 313186BR

Get to Know Us Charter Communications is known in the United States by our Spectrum brands, including: Spectrum Internet®, TV, Mobile and Voice, Spectrum Networks, Spectrum Enterprise and Spectrum Reach. When you join us, you’re joining a strong community of more than 93,000 individuals working together to serve more than 32 million customers in 41 states and keep them connected to what matters most. Watch this video to learn more.

Who You Are Matters Here We’re committed to growing a workforce that reflects our communities, and providing equal opportunities for employment and advancement. EOE, including disability/vets. Learn about our inclusive culture.

Related jobs

View All of Our Available Opportunities

Sign up for job alerts

Sign up to receive the latest career opportunities directly to your inbox. All fields marked with an asterisk (*) are required.

Areas of interestEnter a location and a category, and click "Add" to create your Job Alert.

  • Cybersecurity, Dallas, Texas, United StatesRemove
  • Engineering, Dallas, Texas, United StatesRemove
  • Information Technology, Dallas, Texas, United StatesRemove

Spectrum employeeAre you currently a Spectrum employee?

There's a strong connection here.