Sr Director, Incident Response

Overview & Responsibilities 

Paramount is seeking a Senior Director of Incident Response to join its Global Information Security Group.  This position will be a vital leader of the Threat Response team, leading the Cyber Security Incident Response Team (CSIRT) activities and capabilities development with the support of SOC analysts and incident responders globally using a wide variety of tools.   

As the CSIRT leader, the candidate will be responsible for maturing and maintaining a global program that aligns with leading industry standards, advice, and direction.  This involves operating and continually improving existing CSIRT processes, as well as the development of new processes in response to evolving threats and business requirements.   

Responsibilities Include: 

•    Provide leadership and guidance, acting as the primary contact for senior management, being the 24/7 senior focal point for incident management within the enterprise, directing the CSIRT in appropriate response and actions 
•    Oversee the continuous monitoring, identification, intake, triage, response, remediation and resolution of security incidents while prioritizing incidents based on risk or exposure 
•    Lead a team of managers and SOC analysts who continuously perform monitoring and triage of collected information and alerts to determine what is actionable  

•    Ensure continual development of full security incident management lifecycle, from incident analysis, coordination, response to remediation and reporting with planned table top exercises 
•    Leverage input from Cyber Threat Intelligence (CTI) team, including strategic, operational and tactical intelligence to benefit SOC tuning and incident response 
•    Direct activities of service providers to deliver cost-effective and efficient SOC operations and incident response while ensuring fulfilment of SLAs 
•    Work closely with other senior information security, privacy and business leaders on potential data breaches and other security or privacy incidents 
•    Develop and mentor staff through open communication, training and development opportunities, and performance management processes 
•    Build and maintain documentation/knowledgebase of playbooks, processes, procedures and archival of security incidents 
•    Production of quality incident reports, briefings and on-demand assessments to be consumed both at the executive and technical practitioner level 
•    Develop and maintain objectives, metrics and KPIs supporting the department’s strategic direction and continuously improve SOC capabilities
•    Be available during off-hours and holidays 

Basic Qualifications: 

• 7+ years of technical security experience, with 5+ years of experience leading a cyber incident response or security operations team within a large enterprise organization 

• Deep technical understanding of SIEM, SOAR, EDR, firewalls, network and email security tools with a variety of enterprise IT and cloud-based architectures and technologies, such as networking, server infrastructure, operating systems, web applications, databases, containerization and mobile 

• Minimum of one of the following certifications: SANS GCIH, GSOC, GSOM, GCIA, GPEN, GMON, GCDA, GDAT or certifications relating to security operations or incident response    Strong understanding of incident response processes, workflows, communications and reporting, escalations and cross-department collaboration 

Additional Qualifications: 

• Exceptional operational rigor with extensive real-world experience leading and responding to large scale, complex incidents 

• Ability to create shift schedules to ensure 24/7 availability and coverage by support personnel during off hours 

• Solid grasp of common cyber frameworks and models such as the MITRE ATT&CK, Cyber Kill Chain, Diamond Model, Pyramid of Pain, DeTT&CT and modern penetration testing techniques 

• Experience working in a security operations center, red team or blue team operations and ability to think both like an attacker and defender 

• Strong leadership and communication skills with executive management 

• Exceptional organizational skills with ability to handle multiple high visibility issues simultaneously 

• Ability to communicate complex and technical issues to diverse audiences, verbally and in writing, in an easily understood, authoritative, and actionable manner 

• Familiarity of the cyber threat landscape including threat actors, tactics, tools and procedures, and effective countermeasures.  Additionally, knowledge of common techniques used by malware and threat actors and industry standard lexicon 

• Knowledge of digital cybersecurity and data privacy laws 

• Be a self-starter, work independently and able to quickly adjust to changing priorities 

• Strong verbal and written communication skills with ability to analyze, summarize, and communicate large volumes of information in a clear and succinct manner with careful attention to detail 

• Some travel may be required for major events or incidents. 

Paramount Global (NASDAQ: PARA, PARAA) is a leading global media and entertainment company that creates premium content and experiences for audiences worldwide. Driven by iconic studios, networks and streaming services, Paramount's portfolio of consumer brands includes CBS, Showtime Networks, Paramount Pictures, Nickelodeon, MTV, Comedy Central, BET, Paramount+, Pluto TV and Simon & Schuster, among others. Paramount delivers the largest share of the U.S. television audience and boasts one of the industry's most important and extensive libraries of TV and film titles. In addition to offering innovative streaming services and digital video products, the company provides powerful capabilities in production, distribution and advertising solutions.

ADDITIONAL INFORMATION

Hiring Salary Range: $220,000.00 - 240,000.00. 

The hiring salary range for this position applies to New York City, California, Colorado, Washington state, and most other geographies. Starting pay for the successful applicant depends on a variety of job-related factors, including but not limited to geographic location, market demands, experience, training, and education.  The benefits available for this position include medical, dental, vision, 401(k) plan, life insurance coverage, disability benefits, tuition assistance program and PTO or, if applicable,  as otherwise dictated by the appropriate Collective Bargaining Agreement. This position is bonus eligible.  

https://www.paramount.com/careers/benefits

Paramount is an equal opportunity employer (EOE) including disability/vet.

At Paramount, the spirit of inclusion feeds into everything that we do, on-screen and off. From the programming and movies we create to employee benefits/programs and social impact outreach initiatives, we believe that opportunity, access, resources and rewards should be available to and for the benefit of all. Paramount is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ethnicity, ancestry, religion, creed, sex, national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity, gender expression, and Veteran status.

If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to use or access https://www.paramount.com/careers as a result of your disability. You can request reasonable accommodations by calling 212.846.5500 or by sending an email to paramountaccommodations@paramount.com. Only messages left for this purpose will be returned.