CSOC Incident Response Lead

Job Description

• Remote, full-time CSOC Incident Response Lead role at Sherwin-Williams, supporting cybersecurity operations for a paints, coatings, and industrial solutions company.
• Lead cybersecurity incident response as the primary decision-maker, coordinating triage, response plans, analysis, forensics, communications, post-incident reviews, and remediation.
• Use SIEM/SOAR, sandbox, email security, endpoint detection and response, threat intelligence, and related CSOC tools; improve detection, automation, procedures, playbooks, and tabletop exercises.
• Requires a bachelor’s degree in computer science, information technology, or a related field—or equivalent experience—and 8+ years of IT/Cybersecurity experience, including incident response leadership.
• Requires U.S. work authorization without current or future sponsorship; criminal-history review is required. GCIH certification and experience with NIST, GDPR, Splunk, Sumo Logic, managed security providers, TIPs, and OT incident response are preferred.