Principal Incident Response Analyst

at  Moderna

HERE’S WHAT YOU’LL BRING TO THE TABLE:

A minimum of 10 years of experience in cybersecurity with a significant focus on incident response, security operations and threat intelligence.
Proven track record as an incident commander, effectively communicating and delegating tasks to IR analysts of varying levels of expertise.
Experience in developing, refining, and maturing IR playbooks and runbooks, ensuring robust and comprehensive incident management processes.
Demonstrated ability to coordinate and make critical decisions in ambiguous and high-pressure situations.
Technical proficiency in handling complex security incidents, with a deep understanding of the current cybersecurity landscape and threats.
Strong leadership skills with the ability to serve as a change agent within the organization.
Excellent analytical, critical thinking, and problem-solving skills, with a strong attention to detail.
Exceptional communication skills, capable of articulating complex security issues to a diverse range of stakeholders, including C-Suite.
Experience in technology change management, project management, business process management, and system implementation.
Strong organizational and planning skills, with the ability to manage multiple projects and priorities effectively.
Under Washington State law, Moderna is required to provide a reasonable estimate of the salary range for the jobs covered by this description. Base compensation for these positions in Washington State range from $123,500 to $222,500. Actual salary determinations will take into account factors such as work location, prior education and experience, job-related knowledge, and demonstrated skills. Compensation decisions are made on the facts and circumstances of each case.

In addition to base compensation Moderna employees are eligible for a comprehensive incentive compensation package including an annual cash bonus, new hire equity and an annual refresh, 401(k) match, competitive and inclusive medical, dental, and vision coverage options, flexible spending accounts for medical and dependent care, Life, LTD, and STD insurance, paid family leave offerings, including at least 18 weeks of 100% paid parental leave, lifestyle spending account, adoption, surrogacy, and family-planning benefits, generous paid time off, including:

• Vacation, sick time, and observed Company-wide holidays
• Paid volunteer time to participate within your community
• Discretionary winter holiday shut down
• Paid 4-week sabbatical after 5 years, and every 3 years after

Moderna is pleased to provide you and your family with a comprehensive and innovative suite of benefits, including:
Highly competitive and inclusive medical, dental and vision coverage options
Flexible Spending Accounts for medical expenses and dependent care expenses
Lifestyle Spending Account funds to help you engage in personal enrichment and self-care activities
Family care benefits, including subsidized back-up care options and on-demand tutoring
Free premium access to fitness, nutrition, and mindfulness classes
Exclusive preferred pricing on Peloton fitness equipment
Adoption and family-planning benefits
Dedicated care coordination support for our LGBTQ+ community

THE ROLE:

As a Principal Incident Response Analyst, you will serve as a technical subject matter expert and leader in our Incident Response team, operating from Cambridge or Seattle. You will lead as an incident commander, orchestrating the response to complex security threats and enhancing our incident management framework. You will also be responsible for managing investigations sourced from various sources, such as threat intelligence.
Your role is pivotal in making critical decisions, refining IR processes, and communicating with stakeholders at all levels, including the C-Suite. Leveraging your extensive expertise, you will drive initiatives that bolster our cybersecurity defenses and foster a culture of continuous improvement and resilience.

HERE’S WHAT YOU’LL DO:

Serve as a strategic partner and driving key incident response initiatives.
Take charge during critical incidents as the incident commander, leading a team of IR analysts to rapidly triage, contain, and resolve security events.
Develop and implement strategies to enhance in-house efficiency and standardize incident response processes, leveraging AI and digital technologies for improved performance.
Create and maintain a comprehensive IR playbook and runbooks, ensuring continuous improvement and alignment with industry best practices.
Function as a key decision-maker in ambiguous situations, providing clear direction and coordination to resolve incidents effectively.
Collaborate with cross-functional teams to set objectives, drive progress, and achieve meaningful results in the realm of cybersecurity.
Develop and track performance metrics and benchmarks through data analytics to measure the effectiveness of the incident response team.
Manage relationships with security vendors, including the development of KPIs and cost-efficient billing solutions.
Build and maintain internal security knowledge management processes and capabilities.