高级经理，网络安全，AI SOC 与危机管理 - 远程
Senior Manager, Cybersecurity, AI SOC & Crisis Management - Remote
工作灵活性：远程办公
优先考虑居住在东部或中部时区的候选人。
作为高级经理，AI安全运营与危机管理，您将领导企业网络事件响应团队（CIRT），并在事件恢复和关闭过程中进行协调。您将与调查、威胁狩猎与取证以及企业合作伙伴一起推进人工智能支持的运营和危机准备。
您将负责：
技术职责：
•领导全球CIRT运营，包括全天候覆盖、升级、遏制、恢复、关闭以及中断期间的持续性。
•监督托管检测与响应服务提供商，包括准备情况、治理、绩效、升级质量、预算、许可和承诺。
•在监督、审批、可审计性和可逆性的前提下，推动负责任的人工智能辅助分类、调查、决策支持、文档和响应。
•负责网络安全防御数字孪生路线图，并通过定义用例、需求、成功指标、验收、采用和遗留系统退役来实现能力。
•直接负责事件响应；管理非破坏性遏制和自动化操作；必要时与调查、威胁狩猎与取证部门合作。
•监控响应时间、升级和案件质量、自动化效果、队列健康状况、服务级别和纠正措施。
•与检测工程团队合作，负责检测内容生命周期，包括规则开发、调优、覆盖映射和淘汰。
•与网络威胁情报、威胁暴露管理、漏洞管理、安全工程和企业技术部门合作，以提升响应能力。
领导力与人员管理职责：
•负责网络安全危机管理和CIRT启动，包括严重程度标准、升级阈值、领导层通知、治理和操作协调。
•领导高管简报、利益相关者更新、报告、沟通节奏和重大决策的文档记录。
•与危机、公关、法律、隐私、人力资源、采购、连续性及技术运营团队协调响应。
•领导高管桌面演练、功能性和技术性演练；维护路线图并落实纠正措施。
•领导事件后审查，并将技术发现和根本原因教训纳入操作手册和准备活动中。
•通过辅导、演练和战略规划，建立CIRT领导梯队。
查看英文原文
Work Flexibility: Remote
Preference will be given to candidates residing in the Eastern or Central time zones.
As a Senior Manager, AI Security Operations & Crisis Management, you will lead the enterprise Cyber Incident Response Team (CIRT) and coordinate incidents through recovery and closure. You will advance AI-enabled operations and crisis readiness with Investigations, Threat Hunting & Forensics and enterprise partners.
What you will do:
Technical Responsibilities:
•Lead global CIRT operations, including follow-the-sun coverage, escalation, containment, recovery, closure, and continuity during outages.
•Oversee managed detection and response providers, including readiness, governance, performance, escalation quality, budgets, licensing, and commitments.
•Advance responsible AI-assisted triage, investigation, decision support, documentation, and response with oversight, approvals, auditability, and reversibility.
•Own the Cyber Defense digital twin roadmap and operationalize capabilities by defining use cases, requirements, success measures, acceptance, adoption, and legacy retirement.
•Direct incident response; govern non-destructive containment and automated actions; and engage Investigations, Threat Hunting & Forensics when required.
•Monitor response time, escalation and case quality, automation effectiveness, queue health, service levels, and corrective actions.
•Own the detection content lifecycle with Detection Engineering, including rule development, tuning, coverage mapping, and deprecation.
•Partner with Cyber Threat Intelligence, Threat Exposure Management, Vulnerability Management, Security Engineering, and Enterprise Technology to improve response.
Leadership & People Management Responsibilities:
•Own cyber crisis management and CIRT activation, including severity criteria, escalation thresholds, leadership notifications, governance, and operational coordination.
•Lead executive briefings, stakeholder updates, reporting, communication cadence, and documentation of significant decisions.
•Coordinate response with crisis, communications, legal, privacy, human resources, procurement, continuity, and technology operations teams.
•Lead executive tabletop, functional, and technical exercises; maintain the roadmap and close corrective actions.
•Lead post-incident reviews and incorporate technical findings and root-cause lessons into playbooks and readiness activities.
•Build CIRT leadership depth through coaching, exercises, structured development, and clear performance expectations.
Knowledge and Capabilities:
•Apply incident response, recovery, crisis communications, business continuity, and crisis coordination practices during high-pressure events.
•Translate issues into business terms and coordinate concurrent workstreams using risk-based decisions.
•Integrate FDA, HIPAA, SEC cyber disclosure, sanctions compliance, and other reporting considerations into response processes.
•Address threats involving contractors and contingent workers through identity verification and access revocation coordination.
•Participate in after-hours or on-call incident response and crisis management activities as required.
What You Need:
Required Qualifications
•Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Business, or a related field.
•Minimum 10 years of experience in cybersecurity operations, incident response, crisis management, technology operations, or enterprise service delivery.
•Minimum 5 years of leadership experience managing technical teams, global operations, strategic initiatives, or managed services.
•Experience leading significant cybersecurity incidents with technical, business, legal, communications, and executive stakeholders.
•Experience managing a Security Operations Center, CIRT, Managed Detection and Response service, or comparable operational capability.
•Experience implementing or governing AI-enabled workflows, automation, orchestration, or technology-enabled operational transformation.
Preferred Qualifications
•Master's degree in Cybersecurity, Business Administration, Technology Management, or a related discipline.
•Professional certification such as CISSP, CISM, GCIH, ITIL, PMP, or equivalent.
United States of America Pay Ranges:
- USN: $155,900 - $259,700 USD Annual
- US5: $163,700 - $272,700 USD Annual
- US10: $171,500 - $285,700 USD Annual
- US15: $179,300 - $298,700 USD Annual
- US20: $187,100 - $311,600 USD Annual
- US30: $202,700 - $337,600 USD Annual
View the U.S. work location and transparency guide to find the pay range for your location.
Travel Percentage: NoneStryker Corporation is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status. Stryker is an EO employer – M/F/Veteran/Disability.Stryker Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.Originally posted on Himalayas