Manager, Cybersecurity SOC and Incident Response

$126,800 - $228,700/Yr

T-mobile/t-mobile West - Overland Park, KS

Full-time - Manager

Overland Park, KS

About the position

The Manager, Cybersecurity - SOC and Incident Response at T-Mobile leads the Cyber Security Incident Response Team (CIRT) within the Cyber Security Operations organization. This role is responsible for overseeing a 24x7 function and team, ensuring effective incident response to cyber threats while fostering a positive team culture. The manager will develop and implement strategies for incident response, serve as incident commander during high-profile incidents, and maintain communication with executives and stakeholders.

Responsibilities

• Build and mentor a high performing team with a passion for creating a positive culture, founded on integrity and equity.
• Develop and implement the TMUS Cyber Incident Response vision, strategy, and roadmap in partnership with appropriate teams across technology and business units.
• Serve as incident commander for high profile cyber incidents using legally sound forensic investigative methods.
• Provide timely and relevant updates to appropriate executives, leaders, and decision makers.
• Test and maintain incident response plans and processes to address existing and emerging threats.
• Organize and maintain documentation for executive and targeted functions for table-top exercises.
• Handle incident response retainers and coordinate third-party engagements.
• Establish meaningful measures and metrics for team performance and SLAs/OLAs.

Requirements

• 5+ years in Cyber Security Operations
• 3+ years leading Cyber Security Operations, including team manager role
• Deep understanding of cyber-security threats, vulnerabilities, controls, and remediation strategies in global enterprise environments
• Knowledge of technologies, systems, and networks, and typical gaps impacting detection and response to cyber attacks
• Ability to communicate complex and technical issues to diverse audiences in an easily understood manner
• Strong organizational skills with the ability to handle multiple high visibility issues simultaneously
• Experience with large scale and complex incidents including Advanced Persistent Threats, DDoS, insider threats, and data exfiltration
• Knowledge of Mitre ATT&CK and the cyber kill chain frameworks

Nice-to-haves

• GCIH, GCIA, GCFA, GCED, GMON, GCDA, GDAT, GCFE, GNFA, or GSE certification(s) preferred

Benefits

• Medical, dental, and vision insurance
• Flexible spending account
• 401(k)
• Employee stock grants
• Employee stock purchase plan
• Paid time off and up to 12 paid holidays
• Paid parental and family leave
• Family building benefits
• Back-up care
• Enhanced family support
• Childcare subsidy
• Tuition assistance
• College coaching
• Short- and long-term disability
• Voluntary AD&D coverage
• Voluntary accident coverage
• Voluntary life insurance
• Voluntary disability insurance
• Voluntary long-term care insurance
• Mobile service and home internet discounts
• Pet insurance
• Access to commuter and transit programs