.png)
As an Incident Response (IR) Lead, you will be a hands-on incident responder actively investigating cases involving end points SaaS, public cloud, and hybrid environments. When not actively leading or participating in an incident, you will be threat hunting. Due to the nature of IR, we are looking for someone who is technically proficient and can effectively communicate with leadership, managers and individual contributors during an IR situation. In addition, you will be responsible for the strategic direction of the IR function, working closely with the Privacy and Legal teams.
Reporting into the Director of Security Engineering, the ideal candidate will be responsible for responding to security threats against our enterprise and production environments. This is a lead role, which is involved in all aspects of the incident response life cycle and the process of responding to a security incident. You will also help with detection engineering to improve logging coverage, security tools tuning, suggest ideas and contribute to the new signals development process and automation to detect and respond to threats automatically and at scale.
- Manage investigations including organizing unstructured work and engaging resources across the company.
- Manage urgency and visibility to ensure timely response by all involved parties.
- Conduct IR analysis, network log and network PCAP analysis, and other investigation related activities in support of IR.
- Respond to critical incidents, threats, vulnerabilities and bring these issues to resolution.
- Communicate/coordinate with internal and 3rd party teams during high severity incidents.
- Orchestrate & conduct table-top exercises.
- Develop incident playbooks and repeatable methods for managing and responding to malicious activities across networks, systems, and products.
- Design, document, and implement IR processes, procedures, guidelines, and solutions.
- Deliver technical and executive level reports and metrics on IR issues.
- Work together with the Cyber Defense and Cyber Detect teams.
- Forensically analyze end user systems and servers found to have possible indicators of compromise.
- Identify security incidents through threat hunting operations within a SIEM and other relevant tools.
- Perform basic programming and script development in support of/as needed for IR
- Ability to work in a dynamic, on call environment.
- 7+ years of professional experience in cybersecurity and/or information security or demonstrated equivalent capability.
- 3+ years hands-on working in Cyber incident analysis and/or response in medium to large organizations with cloud and forensics components.
- Experience working with global IR operations using a follow the sun model.
- Strong analytical, documentation, and communication skills.
- In-depth experience with all facets of IR.
- Solid experience applying all facets of IR to Windows, Linus, macOS and public cloud environments.
- Demonstrated threat hunting experience with Python, SIEM, and EDR solutions.
- Ability to successfully facilitate collaboration across multiple functions, departments, and levels.
- Familiarity with SOAR (Security Orchestration, Automation and Response) software with an emphasis on building complex playbooks for automating routine incidents
- SaaS / FinTech / anti-fraud experience a plus
- Digital Forensics experience in public cloud (AWS, Azure, GCP)
- Security certifications (e.g., CISSP, GCIH, GCFA, etc.)
- Advanced Python, Go, and/or Powershell
The posted pay range represents the anticipated low and high end of the compensation for this position and is subject to change based on business need. To determine a successful candidate’s starting pay, we carefully consider a variety of factors, including primary work location, an evaluation of the candidate’s skills and experience, market demands, and internal parity.
For roles with on-target-earnings (OTE), the pay range includes both base salary and target incentive compensation. Target incentive compensation for some roles may include a ramping draw period. Compensation is higher for those who exceed targets. Candidates may receive more information from the recruiter.
Pay Range
$150,000—$265,000 USD
What the Team is Saying
What We Do
Navan is the all-in-one super app that makes travel and expense easy so you can focus on being there, not getting there. Say goodbye to spending hours on the phone trying to change your flight or saving stacks of receipts to manually input expenses. From EAs and finance teams to travel managers and employees, Navan empowers people to focus on the things that matter most to them — all while providing companies with real-time visibility, savings, and control.
Navan’s investors include visionaries like Andreessen Horowitz, Lightspeed Ventures, Greenoaks, Zeev Ventures, and entrepreneurs Lee Fixel, Adam Bain, and Elad Gil. In Oct 2022, Navan announced its Series G upround at a post-money valuation of $9.2B to help accelerate future growth plans.
In April 2023, Navan expanded in the Indian market with the acquisition of Tripeur, a modern, people-centric corporate travel and expense management company. The group’s fifth acquisition in under two years, Tripeur joined the Navan Group alongside Spanish meetings and events specialists, Atlanta Events & Corporate Travel Consultants; Berlin-based modern travel management company, Comtravo; leading Scandinavian travel agency Resia AB; and London-based high-touch TMC, Reed & Mackay.
Why Work With Us
At Navan, we’re never satisfied with the status quo, and we know breakthrough ideas come from diverse perspectives. We are committed to cultivating a workplace that reflects the diversity of the customers we serve while fostering leadership and innovation.
Gallery
Navan Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
In-person connections is the foundation of Navan, the connections forged through face-to-face interactions improve company culture and what we can achieve together. We operate on a hybrid working model, which we define as three days a week in-office.
