ABOUT GREYSTAR

Greystar is a leading, fully integrated global real estate company offering expertise in property management, investment management, development, and construction services in institutional-quality rental housing. Headquartered in Charleston, South Carolina, Greystar manages and operates over $300 billion of real estate in nearly 250 markets globally with offices throughout North America, Europe, South America, and the Asia-Pacific region. Greystar is the largest operator of apartments in the United States, manages over 1,000,000 units/beds globally, and has a robust institutional investment management platform comprised of nearly $78 billion of assets under management, including over $35 billion of development assets. Greystar was founded by Bob Faith in 1993 to become a provider of world-class service in the rental residential real estate business. To learn more, visit www.greystar.com.

JOB DESCRIPTION SUMMARY

JOB DESCRIPTION

KEY RESPONSIBILITIES:

Operational Leadership

• Establish and enforce policies, procedures, and protocols related to security monitoring and incident response.
• Coordinate cross-functional incident response efforts and ensure timely resolution of security incidents.
• Manage relationships and performance of third-party SOC providers, ensuring alignment with internal processes, SLAs, and escalation protocols.
• Foster a culture of continuous learning and operational excellence within the team.

Monitoring & Threat Detection

• Oversee the configuration and optimization of SIEM tools and other security monitoring platforms.
• Ensure 24/7 threat monitoring, detection, triage, and escalation protocols are in place.
• Oversee alert triage processes to ensure timely and accurate investigation and escalation of security events.
• Lead proactive threat hunting initiatives to identify and mitigate advanced threats that evade traditional detection methods.

Incident Response & Investigation

• Lead investigations into security breaches and incidents, perform root cause analysis, and drive corrective actions.
• Develop and execute tabletop exercises and simulations to prepare the organization for various threat scenarios.

Playbooks & Automation

• Develop, maintain, and optimize incident response playbooks and standard operating procedures (SOPs).
• Drive automation of repetitive SOC tasks using SOAR platforms or custom scripting to improve efficiency, consistency, and response times.
• Ensure playbooks align with evolving threat landscapes and integrate with existing tooling and workflows.

Security Metrics & Reporting

• Define KPIs and generate regular reports on incident trends, threat intelligence, and SOC performance.
• Develop dashboards and visualizations to communicate SOC effectiveness to both technical and non-technical stakeholders.
• Present findings and strategic recommendations to executive leadership.

Continuous Improvement

• Continuously evaluate emerging technologies, methodologies, and threats.
• Drive improvement initiatives for tools, processes, and staff training to enhance operational efficiency.

BASIC KNOWLEDGE & QUALIFICATIONS:

• Bachelorâ™s degree in Information Security, Computer Science, or a related field.
• 5+ years of experience in security operations or incident response, including at least 2 years in a leadership role.
• Strong understanding of security technologies (SIEM, IDS/IPS, firewalls, endpoint protection, etc.).
• Proven experience with incident detection, response, forensics, and remediation.
• Demonstrated experience creating and maintaining security playbooks, and automating repetitive SOC tasks using tools such as SOAR platforms or custom scripting.
• Excellent analytical, problem-solving, and organizational skills.

SPECIALIZED SKILLS:

• Professional certifications such as CISSP, CISM, GIAC, or equivalent.

• Experience in a regulated industry (e.g., finance, healthcare, real estate).
• Familiarity with cloud security (AWS, Azure, or GCP) and DevSecOps practices.
• Hands-on experience integrating automation into incident response workflows and security monitoring tools.

TRAVEL / PHYSICAL DEMANDS:

• Team members work in an office or remote work environment. No special physical demands are required.
• Rare or occasional travel may be required to attend business meetings, training programs, or other situations necessary for the accomplishment of some or all of the daily responsibilities of this position.

#LI-Remote

#LI-BB1

Additional Compensation:

Many factors go into determining employee pay within the posted range including business requirements, prior experience, current skills and geographical location.

• Corporate Positions: In addition to the base salary, this role may be eligible to participate in a quarterly or annual bonus program based on individual and company performance.

• Onsite Property Positions: In addition to the base salary, this role may be eligible to participate in weekly, monthly, and/or quarterly bonus programs.

Robust Benefits Offered*:

• Competitive Medical, Dental, Vision, and Disability & Life insurance benefits. Low (free basic) employee Medical costs for employee-only coverage; costs discounted after 3 and 5 years of service.

• Generous Paid Time off. All new hires start with 15 days of vacation, 4 personal days, 10 sick days, and 11 paid holidays. Plus your birthday off after 1 year of service! Additional vacation accrued with tenure.

• For onsite team members, onsite housing discount at Greystar-managed communities are available subject to discount and unit availability.

• 6-Week Paid Sabbatical after 10 years of service (and every 5 years thereafter).

• 401(k) with Company Match up to 6% of pay after 6 months of service.

• Paid Parental Leave and lifetime Fertility Benefit reimbursement up to $10,000 (includes adoption or surrogacy).

• Employee Assistance Program.

• Critical Illness, Accident, Hospital Indemnity, Pet Insurance and Legal Plans.

• Charitable giving program and benefits.

*Benefits offered for full-time employees. For Union and Prevailing Wage roles, compensation and benefits may vary from the listed information above due to Collective Bargaining Agreements and/or local governing authority.

Greystar will consider for employment qualified applicants with arrest and conviction records.