Incident Manager
Core
Oversee the Incident Management program and lead the response to cybersecurity incidents to protect infrastructure and data for US federal government clients.
Role type
Senior IC Incident Manager (Cybersecurity)
Builds
Incident response playbooks, automated response tools, and post-incident improvement strategies
Domain
US Federal Government Cybersecurity / Defense
Required skills
Incident lifecycle management, threat analysis, incident response planning, stakeholder communication, post-incident review, compliance reporting, team mentorship, automation scripting
Preferred skills
Advanced Persistent Threats (APT) knowledge, MITRE ATT&CK frameworks, DevSecOps pipelines, SAFe methodology
Technologies
SIEM, Microsoft Security products, Bash, PowerShell, Python
Responsibilities
Develop and maintain incident response plans and playbooks; lead coordination of incident response from detection to recovery; serve as primary point of contact for internal and external stakeholders; conduct in-depth threat analysis and root cause investigations; prepare detailed incident reports for executive leadership; mentor junior team members on incident response best practices; identify and implement automation opportunities to streamline response processes.
Seniority
Senior, hands-on IC with leadership responsibilities