Incident Commander
Core
Lead and coordinate the management, supervision, and response to high-impact cyber security incidents for New York City systems, acting as the critical bridge between executive leadership and technical response teams.
Role type
Senior Incident Commander (Cyber Security)
Builds
City-wide cyber incident response capabilities and operational readiness
Domain
Public Sector / Cyber Security / Incident Response
Deliverable
client delivery
Required skills
Incident command and control, rapid decision-making in high-stress environments, cross-agency coordination, incident response playbook development, after-action report leadership, stakeholder communication, strategic guidance on security posture
Preferred skills
NIST framework alignment, tabletop exercise leadership, liaison with external partners, special initiatives in cyber resilience
Technologies
NIST SP 800-61, NIST CSF
Responsibilities
Lead significant cyber security incidents including validation, prioritization, and escalation; Provide off-hours leadership and executive communication during active incidents; Exercise rapid decision-making for incidents affecting critical infrastructure; Track tools, visibility, and capability gaps impacting security posture; Act as primary liaison between SOC and impacted agency teams; Coordinate efforts among analysts, responders, forensics, legal, and external partners; Deliver briefings to executive leadership; Lead After-Action Reports and lessons-learned activities; Test and improve incident response plans and playbooks.
Seniority
Senior, hands-on IC with executive communication duties
