Manager, Cyber Incident Response - ADM
Erlanger, KY
About the Job
81917BR
Job Title:
Manager, Cyber Incident Response
Department/Function:
Information Technology
Job Description:
Manager, Cyber Incident Response – On-site, Erlanger, KY
Position Summary:
ADM is looking for a Cyber Incident Response Manager to lead the global Cyber Incident Response team. This role will report to the Director of Global Cyber Defense Operations within the Global Information & Cyber Security function. The candidate should have experience in dealing with complex cyber security incidents at scale and driving continuous improvement. This candidate will partner with peers in Security, Application, and Technical Operations to maintain a highly effective team within the Global Cyber Defense Operations.
Job Responsibilities:
+ Applies comprehensive knowledge and a thorough understanding of Incident Response concepts, principles, and technical capabilities
+ Recruit, develop, and operationalize a highly effective Incident Response team
+ Collaborating across Information Security and business partners to ensure effective, precise, and rapid response
+ Ensures consistent department priorities, policies, procedures for continuous process improvement globally.
+ Manage IT Partner(s) services and outcomes related to cyber security services, i.e. directs the appropriate response to security alerts. Accountable for ensuring vendor performance meets agreed SLAs.
+ Point of escalation from within the Incident Response team to drive all cyber incidents managed by the team partner closely with Enterprise Crisis Mgmt.
+ Staying up to date with new security capabilities and providing recommendations best suited and prioritized for appropriate cyber response.
+ Influencing strategic and tactical direction of the Information Security program.
+ Perform and provide oversight of analysis and trending of security log data from enterprise security devices & systems
+ Provide Incident Response (IR) support when analysis suspects security incident to help contain and eradicate threats;
+ Perform incident triage, incident response, and forensic investigations across endpoints and cloud environments
+ Conduct technical examinations of computer based evidence include logs, packet captures, SIEM & IDS events, disk forensics, malware analysis, and more
+ Document incidents from initial detection through final resolution, and present the findings
+ Investigate, document, and report on cyber security issues
+ Integrate and share information with other analysts and other teams
+ Work with SIEM administrators and security tool SMEs to build detections to help proactively identify real world threats across a broad range of technologies and log sources
+ Creating and continuous improvement of standard processes and operating procedures and incident response playbooks
+ Ability to work in a hybrid managing services environment utilization various partners
Required Skills:
+ Excellent verbal and written communication skills, including ability to effectively communicate with internal and external customers
+ Ability to communicate and collaborate effectively with other team members in a geographic and culturally diverse workforce
+ Ability to work independently and prioritize work using the guidance of leadership.
+ Strong knowledge of IT, computer science concepts
+ 5+ years’ experience in cyber incident response, or similar cyber field, including experience with security principles, and defense-in-depth techniques.
+ Bachelors’ degree in IT related major, Information Security Major, or equivalent work experience.
+ Possess functional knowledge and administrative experience on Windows and Unix/Linux Platforms.
+ Proficiency and understanding of SIEM, Endpoint Detection and Response, Identity, Cloud, and Network technologies
+ Proven experience in disk forensics, static and dynamic malware analysis, packet analysis.
+ Proven experience in technical and non-technical techniques used by cyber adversaries to attack and achieve their cyber goals.
+ Strong sense of professionalism and ethics.
+ Expected to work occasional nights, weekends, holidays, and overtime.
+ Expected to perform on-call duties
Desired Skills:
+ CISSP, SANS certifications, or security related CompTIA certifications, or other industry certifications a plus
+ Experience with incident response in SCADA, DCS, or PLC environments is a plus
+ Experience with incident response in SAP is a plus
+ Experience with Microsoft Defender Suite is a plus
Leadership Traits:
WE are owners
WE help each other thrive
WE continuously learn
WE create the environment for diversity, equity and inclusion to strengthen us.
Education Requirements:
Bachelor’s Degree in related Cyber studies or 5+ years of equivalent experience.
Required Experience:
I
+ Prior leadership experience preferred
+ Experience in Security Operations in medium to large enterprise
+ Knowledge and execution of cyber incident response
+ Experience and understanding of best-in-class Security Operations Center (SOC) operates
Desired Experience:
+ Experience in leading teams as manager or individual contributor/lead capacity
+ Demonstrated Information Security understanding and specifically industry best practices for Incident Response
+ One or more Information Security Certifications preferred, but not required: CISSP or CISM
+ Bachelor’s degree in related field, or equivalent work experience.
Physical Requirements:
+ Ability to safely and successful perform the essential job functions consistent with qualitative and/or quantitative productivity standards
+ Ability to lift and carry up to 50 pounds
+ Must be able to stand for periods longer than two hours
+ Ability to detect color coded events
Additional information:
Occasional Travel required.
.
Relocation assistance is available with this position.
This position offers a complete benefit package, including 401K/ESOP, pension, health, life and dental insurance.
ADM is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age disability and veteran status.
“AJCIND” REF: 81917BR
Req/Job ID:
81917BR
City:
Erlanger
State:
KY - Kentucky
Ref ID:
#LI-SU1
:
About ADM
At ADM, we unlock the power of nature to provide access to nutrition worldwide. With industry-advancing innovations, a complete portfolio of ingredients and solutions to meet any taste, and a commitment to sustainability, we give customers an edge in solving the nutritional challenges of today and tomorrow. We’re a global leader in human and animal nutrition and the world’s premier agricultural origination and processing company. Our breadth, depth, insights, facilities and logistical expertise give us unparalleled capabilities to meet needs for food, beverages, health and wellness, and more. From the seed of the idea to the outcome of the solution, we enrich the quality of life the world over. Learn more at www.adm.com.
:
#LI-Onsite
t:
#IncludingYou
Diversity, equity, inclusion and belonging are cornerstones of ADM’s efforts to continue innovating, driving growth, and delivering outstanding performance. We are committed to attracting and retaining a diverse workforce and create welcoming, truly inclusive work environments — environments that enable every ADM colleague to feel comfortable on the job, make meaningful contributions to our success, and grow their career. We respect and value the unique backgrounds and experiences that each person can bring to ADM because we know that diversity of perspectives makes us better, together.
We are committed to ensuring all qualified applicants receive consideration for employment regardless of race, color, ethnicity, disability, religion, national origin, gender, gender identity, gender expression, marital status, sexual orientation, age, protected veteran status, or any other characteristic protected by law.
We welcome everyone to apply, especially those individuals who are underrepresented in our industry, as we strive to ensure our workforce represents the world that we help to feed: people of color, women, gender non-conforming, LGBTQIA+, veterans and persons with disabilities. For more information regarding our efforts to advance Diversity, Equity, Inclusion & Belonging, please visit our website here: Diversity, Equity and Inclusion | ADM. (https://www.adm.com/en-us/culture-and-careers/diversity-equity-inclusion/)
:
Benefits and Perks
Enriching the quality of life for the world begins by taking care of our colleagues. In addition to competitive pay, we support your diverse needs with a comprehensive total rewards package to enhance your well-being, including:
+ Physical wellness – medical/Rx, dental, vision and on-site wellness center access or gym reimbursement (as applicable).
+ Financial wellness – flexible spending accounts, health savings account, 401(k) with matching contributions and cash balance plan, discounted employee stock purchasing program, life insurance, disability, workers’ compensation, legal assistance, identity theft protection.
+ Mental and social wellness – Employee Assistance Program (EAP), Employee Resource Groups (ERGs) and Colleague Giving Programs (ADM Cares).
Additional benefits include:
+ Paid time off including paid holidays.
+ Adoption assistance and paid maternity and parental leave.
+ Tuition assistance.
+ Company-sponsored training and development resources, such as LinkedIn Learning, language training and mentoring programs.
*Benefits may vary for bargained locations, confirm benefit eligibility with your recruiter.
Job Title:
Manager, Cyber Incident Response
Department/Function:
Information Technology
Job Description:
Manager, Cyber Incident Response – On-site, Erlanger, KY
Position Summary:
ADM is looking for a Cyber Incident Response Manager to lead the global Cyber Incident Response team. This role will report to the Director of Global Cyber Defense Operations within the Global Information & Cyber Security function. The candidate should have experience in dealing with complex cyber security incidents at scale and driving continuous improvement. This candidate will partner with peers in Security, Application, and Technical Operations to maintain a highly effective team within the Global Cyber Defense Operations.
Job Responsibilities:
+ Applies comprehensive knowledge and a thorough understanding of Incident Response concepts, principles, and technical capabilities
+ Recruit, develop, and operationalize a highly effective Incident Response team
+ Collaborating across Information Security and business partners to ensure effective, precise, and rapid response
+ Ensures consistent department priorities, policies, procedures for continuous process improvement globally.
+ Manage IT Partner(s) services and outcomes related to cyber security services, i.e. directs the appropriate response to security alerts. Accountable for ensuring vendor performance meets agreed SLAs.
+ Point of escalation from within the Incident Response team to drive all cyber incidents managed by the team partner closely with Enterprise Crisis Mgmt.
+ Staying up to date with new security capabilities and providing recommendations best suited and prioritized for appropriate cyber response.
+ Influencing strategic and tactical direction of the Information Security program.
+ Perform and provide oversight of analysis and trending of security log data from enterprise security devices & systems
+ Provide Incident Response (IR) support when analysis suspects security incident to help contain and eradicate threats;
+ Perform incident triage, incident response, and forensic investigations across endpoints and cloud environments
+ Conduct technical examinations of computer based evidence include logs, packet captures, SIEM & IDS events, disk forensics, malware analysis, and more
+ Document incidents from initial detection through final resolution, and present the findings
+ Investigate, document, and report on cyber security issues
+ Integrate and share information with other analysts and other teams
+ Work with SIEM administrators and security tool SMEs to build detections to help proactively identify real world threats across a broad range of technologies and log sources
+ Creating and continuous improvement of standard processes and operating procedures and incident response playbooks
+ Ability to work in a hybrid managing services environment utilization various partners
Required Skills:
+ Excellent verbal and written communication skills, including ability to effectively communicate with internal and external customers
+ Ability to communicate and collaborate effectively with other team members in a geographic and culturally diverse workforce
+ Ability to work independently and prioritize work using the guidance of leadership.
+ Strong knowledge of IT, computer science concepts
+ 5+ years’ experience in cyber incident response, or similar cyber field, including experience with security principles, and defense-in-depth techniques.
+ Bachelors’ degree in IT related major, Information Security Major, or equivalent work experience.
+ Possess functional knowledge and administrative experience on Windows and Unix/Linux Platforms.
+ Proficiency and understanding of SIEM, Endpoint Detection and Response, Identity, Cloud, and Network technologies
+ Proven experience in disk forensics, static and dynamic malware analysis, packet analysis.
+ Proven experience in technical and non-technical techniques used by cyber adversaries to attack and achieve their cyber goals.
+ Strong sense of professionalism and ethics.
+ Expected to work occasional nights, weekends, holidays, and overtime.
+ Expected to perform on-call duties
Desired Skills:
+ CISSP, SANS certifications, or security related CompTIA certifications, or other industry certifications a plus
+ Experience with incident response in SCADA, DCS, or PLC environments is a plus
+ Experience with incident response in SAP is a plus
+ Experience with Microsoft Defender Suite is a plus
Leadership Traits:
WE are owners
WE help each other thrive
WE continuously learn
WE create the environment for diversity, equity and inclusion to strengthen us.
Education Requirements:
Bachelor’s Degree in related Cyber studies or 5+ years of equivalent experience.
Required Experience:
I
+ Prior leadership experience preferred
+ Experience in Security Operations in medium to large enterprise
+ Knowledge and execution of cyber incident response
+ Experience and understanding of best-in-class Security Operations Center (SOC) operates
Desired Experience:
+ Experience in leading teams as manager or individual contributor/lead capacity
+ Demonstrated Information Security understanding and specifically industry best practices for Incident Response
+ One or more Information Security Certifications preferred, but not required: CISSP or CISM
+ Bachelor’s degree in related field, or equivalent work experience.
Physical Requirements:
+ Ability to safely and successful perform the essential job functions consistent with qualitative and/or quantitative productivity standards
+ Ability to lift and carry up to 50 pounds
+ Must be able to stand for periods longer than two hours
+ Ability to detect color coded events
Additional information:
Occasional Travel required.
.
Relocation assistance is available with this position.
This position offers a complete benefit package, including 401K/ESOP, pension, health, life and dental insurance.
ADM is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age disability and veteran status.
“AJCIND” REF: 81917BR
Req/Job ID:
81917BR
City:
Erlanger
State:
KY - Kentucky
Ref ID:
#LI-SU1
:
About ADM
At ADM, we unlock the power of nature to provide access to nutrition worldwide. With industry-advancing innovations, a complete portfolio of ingredients and solutions to meet any taste, and a commitment to sustainability, we give customers an edge in solving the nutritional challenges of today and tomorrow. We’re a global leader in human and animal nutrition and the world’s premier agricultural origination and processing company. Our breadth, depth, insights, facilities and logistical expertise give us unparalleled capabilities to meet needs for food, beverages, health and wellness, and more. From the seed of the idea to the outcome of the solution, we enrich the quality of life the world over. Learn more at www.adm.com.
:
#LI-Onsite
t:
#IncludingYou
Diversity, equity, inclusion and belonging are cornerstones of ADM’s efforts to continue innovating, driving growth, and delivering outstanding performance. We are committed to attracting and retaining a diverse workforce and create welcoming, truly inclusive work environments — environments that enable every ADM colleague to feel comfortable on the job, make meaningful contributions to our success, and grow their career. We respect and value the unique backgrounds and experiences that each person can bring to ADM because we know that diversity of perspectives makes us better, together.
We are committed to ensuring all qualified applicants receive consideration for employment regardless of race, color, ethnicity, disability, religion, national origin, gender, gender identity, gender expression, marital status, sexual orientation, age, protected veteran status, or any other characteristic protected by law.
We welcome everyone to apply, especially those individuals who are underrepresented in our industry, as we strive to ensure our workforce represents the world that we help to feed: people of color, women, gender non-conforming, LGBTQIA+, veterans and persons with disabilities. For more information regarding our efforts to advance Diversity, Equity, Inclusion & Belonging, please visit our website here: Diversity, Equity and Inclusion | ADM. (https://www.adm.com/en-us/culture-and-careers/diversity-equity-inclusion/)
:
Benefits and Perks
Enriching the quality of life for the world begins by taking care of our colleagues. In addition to competitive pay, we support your diverse needs with a comprehensive total rewards package to enhance your well-being, including:
+ Physical wellness – medical/Rx, dental, vision and on-site wellness center access or gym reimbursement (as applicable).
+ Financial wellness – flexible spending accounts, health savings account, 401(k) with matching contributions and cash balance plan, discounted employee stock purchasing program, life insurance, disability, workers’ compensation, legal assistance, identity theft protection.
+ Mental and social wellness – Employee Assistance Program (EAP), Employee Resource Groups (ERGs) and Colleague Giving Programs (ADM Cares).
Additional benefits include:
+ Paid time off including paid holidays.
+ Adoption assistance and paid maternity and parental leave.
+ Tuition assistance.
+ Company-sponsored training and development resources, such as LinkedIn Learning, language training and mentoring programs.
*Benefits may vary for bargained locations, confirm benefit eligibility with your recruiter.
Source : ADM