Operations Lead - Incident Response
Core
Lead organizations through critical cyber incidents, coordinate major incident response engagements, and conduct proactive threat hunting and compromise assessments.
Role type
Senior IC incident response lead (cybersecurity)
Builds
Incident response playbooks, threat detection capabilities, and secure recovery processes for client environments
Domain
Cybersecurity / Incident Response / Threat Intelligence
Deliverable
client delivery
Required skills
Incident response coordination, digital forensics, threat hunting, threat intelligence analysis, NIST/SANS frameworks, stakeholder communication, process improvement
Preferred skills
Mentoring, cross-functional collaboration, continuous improvement
Technologies
Endpoint, network, and cloud environments
Responsibilities
Coordinate major cyber incidents from investigation through containment and recovery; conduct forensic investigations to determine scope and impact; hunt for threats that bypass existing controls; lead compromise assessments to identify intrusion signs; translate technical findings into actionable advice for executives and technical teams; mentor team members and improve incident response processes and playbooks
