Cyber Fusion Lead

Key Responsibilities

• Monitor and assess threat intelligence, security alerts, third-party risk indicators, and potential fraud signals.
• Rapidly evaluate security events to determine their severity, potential business impact, and required response.
• Coordinate with Security Operations, Threat Intelligence, Incident Response, Vulnerability Management, Third-Party Risk, Fraud, and Command Center teams.
• Initiate incident response calls, assign action owners, establish priorities, and track initial response activities.
• Escalate significant security incidents to accountable leaders for containment decisions and business impact assessment.
• Coordinate the transition between outsourced or managed overnight monitoring teams and internal security response teams.
• Ensure critical security events receive timely attention and are not delayed until the next business day.
• Maintain clear incident documentation, escalation records, and status updates throughout the response process.
• Provide concise, timely communications to technical teams, stakeholders, and executive leadership.
• Support continuity of security operations during assigned weekend and rotational coverage periods.

Required Qualifications

• 8+ years of experience in a Security Operations Center (SOC), Cyber Fusion Center, incident response leadership, or incident command role.
• Demonstrated decision-making authority in security event triage, incident escalation, and response coordination.
• Strong understanding of threat intelligence, security monitoring, incident response, vulnerability management, third-party cyber risk, and fraud-related security signals.
• Experience initiating incident response calls, assigning responsibilities, tracking actions, and escalating issues to leadership.
• Experience coordinating with outsourced SOC providers, managed security service providers (MSSPs), or overnight monitoring teams.
• Strong cross-functional coordination and incident management skills.