Cybersecurity Incident Manager
Core
Lead technical response to high-severity security incidents, guiding Level 2 analysts and coordinating cross-team mitigation efforts to protect client systems and data.
Role type
Senior IC Cybersecurity Incident Manager (Managed Services)
Builds
Incident response playbooks, remediation actions, and strategic guidance for client security operations
Domain
Cybersecurity / Managed Security Services (MSSP)
Deliverable
client delivery
Required skills
Incident Response and Management, Security Tool proficiency (SIEM, EDR), Threat Vector analysis, Risk Management, Team Leadership, Performance Evaluation, Training Development, Vendor Management, KPI/SLA Monitoring, Report Validation
Preferred skills
CISSP/GIAC/EC-Council certifications, MSSP environment experience, OS knowledge (Windows, Linux, Unix), Application/Databases/Middleware security
Technologies
SIEM, EDR, Windows, Linux, Unix
Responsibilities
Serve as escalation contact for high-impact incidents; oversee technical investigations and coordinate response activities; take technical ownership of Level 2 senior security analysts' team; provide guidance on troubleshooting and resolution of complex issues; coordinate incident response and recovery actions; review and validate security incident reports; conduct QA reviews and provide feedback; collaborate on complex incidents requiring intervention; conduct performance evaluations and identify training needs; develop and deliver training/mentoring programs; offer strategic/technical guidance to clients; monitor and report on team KPIs and SLAs; maintain communication with shift leads on daily metrics.
Seniority
Manager, hands-on IC with team leadership
