Manager, Cyber Incident Response

About the role

The team acts as the first line of defense, moving events from detection through containment, remediation and closure. The manager owns readiness, escalation quality and process maturity while coaching responders.

At a glance

What you will do

• Run incident response operations: prioritization, shift coverage, tooling needs, workflows and escalations
• Oversee incidents across the enterprise from validation through containment, recovery and closure
• Act as incident handler or commander on major incidents, coordinating with affected businesses and partner teams
• Review shift handovers, queue health and open cases to keep accountability across operating periods
• Lead process governance, playbooks, tuning and automation, and report monthly metrics to executives

What they look for

• Experience managing incident response operations in a global 24x7 environment
• Ability to is escalation point and make judgment calls during active incidents
• Strength in documentation standards, KPIs and process improvement
• Skill at coaching and developing responders
• Comfort working with senior leadership, security officers and vendors

Nice to have

• Background in threat hunting or event monitoring
• Familiarity with forensic analysis during incidents

Benefits

• Manager on-call rotation for incident escalation