Senior Manager, Information Security, CSIRT
Core
Senior leader accountable for leading the cyber incident response capability, coordinating technical containment and recovery, and translating incident observations into stronger detections and controls.
Role type
Senior Manager, Information Security (CSIRT)
Builds
An intelligence-led, risk-informed, and repeatable incident response model for the enterprise.
Domain
Financial Services / Cybersecurity
Deliverable
Production ML models | product features | dashboards & analysis | client delivery | infrastructure | physical/clinical work
Required skills
Incident response lifecycle management, technical investigation and forensics, malware analysis, threat hunting, SIEM/SOAR/EDR/XDR expertise, cross-functional stakeholder partnership, strategic roadmap planning, team leadership and coaching.
Preferred skills
Fusion-style cross-domain security model experience, ransomware and cloud compromise response, response automation and playbook development, relevant certifications (GCIH, GCFA, CISSP, CISM).
Technologies
SIEM, SOAR, EDR/XDR, cloud security, network telemetry, case management, digital forensics tools.
Responsibilities
Lead triage, scoping, containment, eradication, and recovery for significant cyber incidents; oversee technical investigations across endpoint, cloud, and network environments; drive development of response playbooks and automation; establish operational metrics for CSIRT effectiveness; lead and develop a high-performing incident response team.
Seniority
Senior Manager, hands-on leadership
