Remote Junior Security Incident Commander

Description:

• ServiceNow’s Security Incident Command (SIC) team is seeking a Junior Security Incident Commander to support the orchestration of incident response strategy and communications during critical information security-related incidents.
• The SIC team maintains and executes the Major Security Incidents (MSI) lifecycle, including Preparation, Response, and Recovery.
• The role involves assisting with the orchestration of response and remediation for high criticality security events and leading responses to low to moderate severity incidents.
• Responsibilities include establishing and maturing documentation surrounding protocols and procedures, preparing and delivering communications to key stakeholders, conducting rapid response and investigations, and partnering with team members globally.
• The position also involves organizing scenario-based exercises, maintaining and developing playbooks, contributing to Post-Incident Reviews (PIRs) and Root Cause Analyses (RCAs), and identifying ways to simplify and refine the major security incident process.

Requirements:

• Candidates must have experience in leveraging or critically thinking about integrating AI into work processes, decision-making, or problem-solving.
• A minimum of 2 years of experience in incident response is required.
• Experience in leading or supporting complex security incidents to resolution is necessary.
• Excellent verbal and written communication skills in English are essential.
• Candidates should be comfortable communicating complex topics clearly to various audiences, including technical and executive levels.
• Strong problem-solving and decision-making skills are required.
• The ability to quickly assess situations, identify risks, and make sound decisions is crucial.
• Familiarity with cybersecurity principles and frameworks, such as MITRE ATT&CK, is needed.
• Knowledge across multiple security domains is a plus, as is experience in planning or orchestrating tabletop exercises.

Benefits:

• ServiceNow offers a flexible work environment, allowing for remote or in-office work depending on the nature of the role.
• The company is committed to creating an accessible and inclusive experience for all candidates.
• ServiceNow is an equal opportunity employer, ensuring all qualified applicants receive consideration without discrimination.
• The organization provides accommodations for candidates who require assistance during the application process.
• Employment is contingent upon obtaining any necessary export control approvals for positions requiring access to controlled technology.