Security Incident Response Leader at Sonos Inc in Seattle, Washington

Job Description:

At Sonos we want to create the ultimate listening experience for our customers and know that it starts by listening to each other. As part of the Sonos team, you'll collaborate with people of all styles, skill sets, and backgrounds to realize our vision while fostering a community where everyone feels included and empowered to do the best work of their lives.

You will be building and leading our security incident response program to ensure rapid and effective response to security threats that affect Sonos' systems, services, or products. In doing so, you will be helping to protect customers and enable Sonos to continue to deliver delightful sound experiences to our customers worldwide.

What You'll Do

• Build a robust and effective security incident response program that helps protect Sonos, its employees, business, brands, and customers from cybersecurity threats targeting Sonos or its offerings.




• Drive security incidents to closure, working with engineering teams, legal, customer support, and public relations to ensure comprehensive mitigation.




• Communicate complex and technical issues to diverse audiences, verbally and in-writing, in an easy-to-understand, authoritative, and actionable manner.




• Drive insights and learnings from security incidents into concrete actions that will prevent or mitigate against future incidents, right across the company.




• Work across the security organization and company to help mature security policies and practices.

What You'll Need

Basic Qualifications

• 5+ years of professional work experience in a technology field where you solved complex problems through influence and strong organizational skills.




• 3+ years of security experience in cyber incident response, software vulnerability management, secure coding (SDL), penetration testing, red teaming, security operations, or security assurance.




• The ability to maintain a professional approach and organize your work and that of others while under pressure.




• Be able to communicate complex and technical issues to diverse audiences, verbally and in-writing, including in ways that a non-security technical audience can easily understand.

Preferred Qualifications

• Experience with cyber security incidents of different types, including malware compromise, adversary investigations, malicious insider, web application attacks, and data breaches.




• Experience in leading incidents or projects through the entire lifecycle while maintaining strong situational awareness and communication with direct stakeholders and leadership.




• Significant knowledge in one or more information technology related fields that include cloud services, authentication, PKI, system administration, software development, networking, or security architecture.




• Working knowledge of a range of security-related subjects such as threat hunting, threat modeling, digital forensics, reverse engineering, phishing, and penetration testing.

#LI-Remote