Senior Manager, Cyber Incident Response – Threat Management

PayPal

Lead Cyber Incident Response & Threat Management for PayPal's Global Cyber Defense Center, ensuring investigations meet standards and driving strategic improvements.

Posted 4/23/2026full-timeScottsdale • Arizona, Illinois, Texas • 🇺🇸 United StatesSeniorLead💰 $169,500 - $251,900 per yearWebsite

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformPython

About the role

Key responsibilities & impact

Lead a cyber threat management team; set clear priorities and define actionable plans, ensuring alignment with organizational goals
Guide team members through complex challenges, fostering their growth and development while maintaining a focus on high-impact results
Recognized as a cyber threat management expert, independently resolving the most complex challenges, and providing strategic direction on problem resolution across the security domain
Define methods and procedures for new or special assignments, collaborating with cross-functional teams to drive security initiatives that align with business needs and objectives
Lead complex, high-impact security projects of diverse scope, applying an in-depth understanding of business trends and security challenges to develop innovative solutions that strengthen threat management and overall security posture
Possess a keen awareness of the broader impact of decisions, with initiatives often leading to enterprise-wide improvements that enhance security practices, operational efficiency and organizational resilience
act as incident commander for critical events, and ensure investigations meet regulatory and evidentiary standards
translate threats into executive-level risk insights, drive post-incident improvements, and help PayPal stay ahead of evolving threats

Requirements

What you’ll need

8+ years relevant experience and a Bachelor’s degree OR Any equivalent combination of education and experience
Experience leading others
8+ years of experience in cybersecurity, with 4+ years focused on incident response, digital forensics, or security operations — including 2+ years in a team lead or management role
Proven experience leading and developing high-performing DFIR teams in a SOC or equivalent high-tempo security operations environment
Strong hands-on knowledge of SIEM platforms EDR/XDR solutions and forensic tools
Demonstrated ability to manage high-severity incidents under pressure, with executive-quality communication to CISO, Legal, and regulatory audiences
Experience building or significantly maturing an incident response plan and supporting playbook library aligned to NIST, ISO/IEC 27035, and MITRE ATT&CK
Working knowledge of regulatory and compliance requirements in financial services (PCI DSS, GLBA, GDPR, SEC, CISA CIRCIA)
Proficiency in scripting and command-line analysis (Python, Bash, PowerShell) and log correlation across SIEM, EDR, network, VPN, and proxy data sources
Exceptional written and verbal communication skills — capable of translating complex forensic findings into clear narratives for executive and non-technical audiences
Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience
Industry certifications: GCFA, GCFE, GCIH, GCTI, CISSP, or equivalent
Experience with cloud forensics and incident response in AWS, Azure, or GCP environments
Background in threat hunting, red team, or adversary simulation operations
Experience supporting regulatory examinations, external audits, or legal discovery and litigation-support proceedings
Familiarity with financial services threat actor profiles and associated TTPs
Experience with malware analysis beyond basic triage (static and dynamic analysis)

Benefits

Comp & perks

generous paid time off
healthcare coverage for you and your family
resources to create financial security and support your mental health

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

cybersecurityincident responsedigital forensicssecurity operationsSIEM platformsEDR solutionsscriptingcommand-line analysismalware analysislog correlation

Soft Skills

leadershipcommunicationproblem resolutionteam developmentstrategic directionexecutive communicationcollaborationpressure managementanalytical thinkingnarrative translation

Certifications

GCFAGCFEGCIHGCTICISSP