Senior Manager, Cybersecurity Incident Response
Job Description
The Senior Manager for Cybersecurity Operations and Incident Response will manage the deliverables and actions of our cybersecurity operations center (managed by a Managed Security Services Provider) and is responsible for driving enhancements in gaining visibility, detection and response of events, communicating, handling, documenting and recovering from, and most importantly learning from security incidents.
We're looking for someone with expertise in incident handling and thorough documentation, threat hunting, threat intelligence, system security monitoring and creating a feedback loop with our engineers to ensure we don’t have the same incident twice. This role is an Individual Contributor role to start and this person will provide leadership and direction on how to expand the team and capabilities. This role can be a hands on technical role.
Job Responsibilities
- Cyber Incident Management: Lead the response to cyber incidents, including breaches, malware outbreaks, and other security events. Coordinate with the MSSP and internal stakeholders to ensure timely detection, analysis, containment, and eradication of threats.
- Strategic Oversight: Develop and implement strategies to enhance the efficiency and effectiveness of cyber operations and incident response processes for Aramark. Continuously evaluate and improve capabilities and procedures.
- Vendor Management: Serve as the primary point of contact for the MSSP, overseeing their performance, adherence to service level agreements (SLAs), and alignment with organizational security objectives. Provide guidance and direction to optimize the partnership and maximize value.
- Threat Intelligence: Stay abreast of emerging cyber threats, attack techniques, and industry trends. Leverage threat intelligence to inform decision-making, enhance proactive defense measures, and mitigate risks effectively.
- Cross-functional Collaboration: Collaborate closely with internal teams, including IT, legal, compliance, and business units, to ensure alignment of security initiatives with organizational goals and regulatory requirements. Communicate effectively with executive leadership on the status of cyber operations and incident response activities.
- Incident Response Planning: Develop and maintain comprehensive incident response plans, playbooks, and procedures. Conduct regular tabletop exercises and simulations to test the effectiveness of response strategies and identify areas for improvement.
#FS-500
Qualifications
- 8+ years of experience in cybersecurity, with a focus on incident response, security operations, and threat management.
- Proven experience managing Security Operations Centers (SOCs) and incident response teams.
- Strong knowledge of cybersecurity principles, frameworks, and best practices (e.g., NIST, ISO 27001, MITRE ATT&CK).
- Experience working with Managed Security Services Providers (MSSPs) and overseeing vendor relationships.
- Excellent leadership, communication, and interpersonal skills, with the ability to collaborate effectively across departments and influence stakeholders at all levels.
- Demonstrated experience in managing complex cyber incidents, including ransomware attacks, data breaches, and advanced persistent threats (APTs).
- Proven track record in developing and implementing incident response playbooks, procedures, and escalation paths to streamline response efforts and minimize impact.
- Strong technical proficiency in cybersecurity technologies and tools, including SIEM (Security Information and Event Management), EDR (Endpoint Detection and Response), IDS/IPS (Intrusion Detection/Prevention Systems), and threat hunting platforms.
- Experience conducting post-incident reviews (PIRs) and root cause analyses (RCAs) to identify lessons learned and drive continuous improvement in incident response capabilities.
Benefits
• Flexible work arrangements
• Paid Time Off (PTO), Vacation, nine (9) paid holidays
• Volunteer days, community partnerships, Employee Assistance Program
• Your choice of three medical plans, two carriers to choose from & My Healthy Changes well-being program
• Adoption Assistance & Paid Parental Leave
• Tuition Funding Sources and Scholarship Programs
• Retirement plan with match on annual contributions
#LI-Remote
Compensation
COMPENSATION: The salary rate for this position ranges from $132,000 to $166,000 depending on circumstances including an applicant's skills and qualifications, certain degrees and certifications, prior job experience, market data, and other relevant factors. Additional compensation may include a bonus or commission (if relevant). This is Aramark's good faith and reasonable estimate of the range of compensation for this position as of the time of posting.
If hired, employee will be in an “at-will position” and Aramark reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time AND FOR ANY REASON, including, BUT NOT LIMITED TO for reasons related to individual performance, Aramark or individual department/team performance, and market factors.
Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
About Aramark
Our Mission
Rooted in service and united by our purpose, we strive to do great things for each other, our partners, our communities, and our planet.
At Aramark, we believe that every employee should enjoy equal employment opportunity and be free to participate in all aspects of the company. We do not discriminate on the basis of race, color, religion, national origin, age, sex, gender, pregnancy, disability, sexual orientation, gender identity, genetic information, military status, protected veteran status or other characteristics protected by applicable law.
About Aramark
The people of Aramark proudly serve millions of guests every day through food and facilities in 15 countries around the world. Rooted in service and united by our purpose, we strive to do great things for each other, our partners, our communities, and our planet. We believe a career should develop your talents, fuel your passions, and empower your professional growth. So, no matter what you're pursuing - a new challenge, a sense of belonging, or just a great place to work - our focus is helping you reach your full potential. Learn more about working here at http://www.aramarkcareers.com or connect with us on Facebook, Instagram and Twitter.