Share this Job

IT Lead - Cybersecurity Incident Response

Auto req ID: 1812 
Title: IT Lead - Cybersecurity Incident Response 
Job Function: Information Technology 
Company: Harley-Davidson Motor Company 
Full or Part-Time: Full Time 
Shift: SHIFT1 


We are paving more roads to Harley-Davidson by developing exhilarating new products, creating broader access to our iconic brand, and building a stronger dealer network. We can’t do it without the best and brightest. Step one of this strategic acceleration is adding talent who can blow the doors wide open with innovation and creativity while staying true to the Harley-Davidson brand and legacy. We are focused on the next 115 years. Are you in?

Job Summary

The Incident Response Lead is responsible for analyzing IT security events, conducting incident response, performing the appropriate incident handling process per process, and identifying remediation activities to mitigate risk and eliminate the threat. The IR Lead works within the detect/respond function, which is responsible for protecting H-D’s IT security globally across a variety of technology platforms including: cloud, on-premise, and hybrid networks. Experience working with a Managed Service Provider (MSP) desired.

Job Responsibilities
  • Lead the triage and management of cybersecurity incidents with an MSP
  • Provide analysis of escalated incidents to determine if it is a true or false positive event
  • Perform subsequent tuning of the tool to minimize false positive notification/alerts
  • Develop, research, and maintain proficiency in tools, techniques, countermeasures, and trends related to all types of security events (malware/DDoS, etc.)
  • Develop and conduct remediation activities in response to security events
  • Ensure the right level of governance is built into the process to manage the MSP
  • Identify root cause of cybersecurity incidents and perform After Action Reviews (AAR) to ensure continuous improvement of our IR process
Education Specifications
  • Bachelor Degree in computer science, MIS, Information Systems or Services, or equivalent
  • Certified Information Systems Security Professional (CISSP) (within 12 months of employment)
  • Other preferred certifications include Security+, CISSP (required within 12 months of employment), CCSP, OSCP, GSEC
Experience Requirements

This role typically requires a minimum of 8 years of related experience highlighting active cyber security and incident reponse experience including:

  • Subject matter expertise across multiple cyber security domains to support a matrixed team environment
  • Working knowledge of the following technologies: Security Information and Event Management (SIEM) tooling, including IBM Q-Radar or other common SIEM platforms. A/V, Advanced Malware Protection, IDS/IPS, Firewalls, Load Balancers, Unix/Windows platform, web servers, database servers, network protocols (HTTP, TLS, DNS), Vulnerability Management tooling, Metasploit, Kali Linux, User Behavior Analysis tooling, data exfiltration tooling
  • Demonstrated proficiency in threat hunting, SIEM tuning, red/blue teaming, log analysis, governance of a MSP

At Harley-Davidson it is not just about the degree you have or what you know. You must also exhibit and demonstrate our valued behaviors in everything you do:

  • Be accountable
  • Model Integrity
  • Value Individuality and Diversity
  • Inspire Teamwork
  • Encourage Creativity


We offer an inclusive compensation package for all full-time salaried employees including, but not limited to, annual bonus programs, health insurance benefits, a 401k program, onsite fitness centers and employee stores, employee discounts on products and accessories, and more. We believe that employees do their best work when they are free to be themselves. This means our dress code is relaxed, and all types of work styles are welcomed.


Applicants must be currently authorized to work in the United States.


Direct Reports: No 
Travel Required: 0 - 10% 
Visa Sponsorship: This position is not eligible for visa sponsorship 
Relocation: This position is eligible for domestic relocation assistance (within posted country) 





Nearest Major Market: Milwaukee

Job Segment: Information Systems, Computer Science, Database, Unix, Technology, Research