Cyber Incident Response Leader
Harman · Łódź
A Career at HARMAN
As a technology leader that is rapidly on the move, HARMAN is filled with people who are focused on making life better. Innovation, inclusivity and teamwork are a part of our DNA. When you add that to the challenges we take on and solve together, you’ll discover that at HARMAN you can grow, make a difference and be proud of the work you do every day.
Introduction: A Career at HARMAN Corporate
We’re a global, multi-disciplinary team that’s putting the innovative power of technology to work and transforming tomorrow. At HARMAN Corporate, you are integral to our company’s award-winning success.
- Enrich your managerial and organizational talents – from finance, quality, and supply chain to human resources, IT, sales, and strategy
- Augment your comprehensive skillset with expert training across decision-making, change management, leadership, and business development
- Obtain 360-degree support throughout your career life cycle, from early-stage to seasoned leader
What You’ll Be Part Of
As the Incident Response Leader, you will serve as HARMAN’s primary authority for enterprise cyber incident response, leading the coordination, investigation, containment, and recovery of cybersecurity incidents across the organization. This is an individual contributor role reporting to the Director of Cybersecurity Operations. You will be responsible for establishing and evolving incident response capabilities, driving response readiness, and ensuring effective execution during security events. Working closely with Cyber Security Operations, Infrastructure, Legal, Privacy, Compliance, and business stakeholders, you will play a critical role in protecting HARMAN’s global technology environment and reducing organizational risk.
How You’ll Make An Impact
- Lead the end-to-end management of cybersecurity incidents, including triage, investigation, containment, eradication, recovery, and post-incident activities.
- Serve as the incident commander for major cybersecurity events, coordinating technical and business stakeholders throughout the response lifecycle.
- Develop, maintain, and continuously improve incident response processes, playbooks, escalation procedures, and communication frameworks.
- Coordinate response activities across Cyber Security Operations, Infrastructure, Cloud, End User Services, Legal, Privacy, Human Resources, and external partners.
- Conduct detailed incident analysis to determine root cause, business impact, and corrective actions.
- Lead post-incident reviews and drive remediation efforts to strengthen HARMAN’s security posture and operational resilience.
- Develop and execute incident response tabletop exercises, simulations, and readiness assessments.
- Establish metrics, reporting, and executive dashboards to measure incident response effectiveness and program maturity.
- Partner with threat intelligence, vulnerability management, and security operations teams to proactively identify and mitigate emerging threats.
- Manage relationships with external incident response partners, cybersecurity vendors, and service providers supporting incident response activities.
- Provide guidance to leadership during significant security events and communicate incident status, risks, and recovery plans to stakeholders.
- Stay current on emerging threats, attack techniques, industry trends, and best practices to continuously enhance HARMAN’s incident response capabilities.
What Makes You A Strong Fit
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or equivalent experience.
- 5+ years of experience in cybersecurity, security operations, incident response, digital forensics, or related disciplines.
- Demonstrated experience leading complex cybersecurity investigations and coordinating enterprise incident response activities.
- Strong understanding of cyber threat actor tactics, techniques, and procedures (TTPs) and modern attack methodologies.
- Experience with incident response frameworks, security operations processes, and cyber crisis management.
- Knowledge of enterprise security technologies, including SIEM, EDR, identity security, cloud security, email security, and network security platforms.
- Ability to independently lead high-severity incidents while coordinating diverse technical and business stakeholders.
- Strong analytical and problem-solving skills with the ability to make effective decisions in high-pressure situations.
- Experience developing incident response playbooks, operational procedures, and security governance standards.
- Excellent written, verbal, and presentation skills with the ability to communicate effectively with both technical teams and executive leadership.
Bonus Points if You Have
- GIAC Certified Incident Handler (GCIH), GCFA, GCFE, or similar incident response and forensics certifications.
- CISSP, CISM, or equivalent cybersecurity certification.
- Experience supporting incident response activities within global enterprise environments.
- Knowledge of digital forensics, malware analysis, and threat hunting methodologies.
- Experience leading cyber crisis exercises and executive tabletop simulations.
- Familiarity with regulatory, privacy, and breach notification requirements across multiple jurisdictions.
Things To Know
- This role is based in Łódź, Poland and follows a hybrid work model, requiring 3 days per week in our Łódź office.
What You Can Expect
- A hybrid work environment that balances flexibility with in-person collaboration, with most office-based roles onsite three days a week.
- Access to employee discounts on HARMAN and Samsung products (including JBL, Harman / Kardon, AKG, and others)
- Learning and development opportunities through our award-winning HARMAN University programs
- Wellness benefits designed to support your overall well-being
- Tuition reimbursement support
- Access to the HARMAN campus fitness center and cafeteria, where available
- An inclusive and diverse work environment that supports both your professional and personal development
HARMAN is proud to be an Equal Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.