Incident Response & Threat Intelligence Lead

You know the moment. It’s the first notes of that song you love, the intro to your favorite movie, or simply the sound of someone you love saying “hello.” It’s in these moments that sound matters most. 

At Bose, we believe sound is the most powerful force on earth. We’ve dedicated ourselves to improving it for nearly 60 years. And we’re passionate down to our bones about making whatever you’re listening to a little more magical. 

The Information Technology team at Bose exists to deliver valuable and reliable business and technology solutions with an innovative, engaged, and collaborative team focused on contributing to our corporate vision.

Job Description

Incident Response Management:

• Lead the end-to-end cybersecurity incident response process, including detection, triage, containment, eradication, and recovery.
• Develop, maintain, and optimize incident response playbooks and procedures.
• Monitor the digital landscape for activities that could compromise the organization’s brand, including phishing, impersonation, and data leaks.
• Coordinate with cross-functional teams during high-severity incidents to minimize impact.
• Conduct post-incident reviews, including postmortems and Root Cause Analyses (RCAs), to identify root causes, implement lessons learned, and enhance defensive measures.
• Prepare and deliver reports to executive leadership, highlighting trends, metrics, and recommendations for improvements.

Threat Hunting and Detection:

• Lead proactive threat-hunting efforts to identify and mitigate advanced threats before they impact the organization.
• Collaborate with the Security Operations Center (SOC) to enhance threat detection capabilities and close visibility gaps.
• Analyze and correlate data from various sources, including logs, endpoints, and network traffic, to uncover potential security incidents.

Threat Intelligence:

• Oversee the collection, analysis, and dissemination of threat intelligence to preempt and mitigate security threats.
• Produce and distribute a monthly threat intelligence newsletter summarizing key findings, emerging trends, and actionable insights for stakeholders.
• Design and conduct regular incident response tabletop exercises to evaluate the readiness of the incident response team and other stakeholders.
• Integrate threat intelligence insights into the broader security posture, including incident response and monitoring.

Tabletop Exercises:

• Design and conduct regular incident response tabletop exercises to evaluate the readiness of the incident response team and other stakeholders.
• Simulate realistic attack scenarios to identify gaps in processes, communication, and technical capabilities.
• Document outcomes and implement improvements based on lessons learned from exercises.

Technical Leadership:

• Provide expert-level guidance during the investigation of advanced persistent threats (APTs), malware, and other complex attacks.
• Partner with IT and engineering teams to implement security controls and patch vulnerabilities.
• Stay informed about emerging technologies and methodologies to continuously enhance the organization's security defenses.
• Must be willing to be on-call off hours in rotation with other team members (Required)

Bose is an equal opportunity employer that is committed to inclusion and diversity. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status, or any other legally protected characteristics. For additional information, please review: (1) the EEO is the Law Poster (http://www.dol.gov/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf); and (2) its Supplements (http://www.dol.gov/ofccp/regs/compliance/posters/ofccpost.htm). Please note, the company's pay transparency is available at http://www.dol.gov/ofccp/pdf/EO13665_PrescribedNondiscriminationPostingLanguage_JRFQA508c.pdf. Bose is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the application or employment process, please send an e-mail to Wellbeing@bose.com and let us know the nature of your request and your contact information.

Our goal is to create an atmosphere where every candidate feels supported and empowered in the interviewing process. Diversity and inclusion are integral to our success, and we believe that providing reasonable accommodation is not only a legal obligation but also a fundamental aspect of our commitment to being an employer of choice. We recognize that individuals may have different needs and requirements based on their abilities, and we provide reasonable accommodations to ensure ideal conditions are met during the application process.

If you believe you need a reasonable accommodation, please send a note to wellbeing@bose.com