Senior Manager: Incident Response
Core
Lead complex cyber incident investigations (ransomware, BEC, insider threat) and manage the incident response team day-to-day.
Role type
Senior Manager, Incident Response
Builds
Defensible investigation reports, executive summaries, and forensic evidence for legal/insurance proceedings
Domain
Cybersecurity / Digital Forensics
Required skills
Windows/Linux/Cloud forensics, memory analysis, log/timeline analysis, EDR investigations, forensic tooling (EnCase, Volatility, etc.), Python/PowerShell scripting, legal report writing, team management, performance management
Preferred skills
Malware analysis, mobile forensics, expert witness testimony, OT/ICS incident experience
Technologies
Magnet AXIOM, EnCase, X-Ways, Velociraptor, KAPE, Volatility, Microsoft 365, Entra ID, Azure, AWS, EDR suites, SOAR
Responsibilities
Lead high-severity investigations hands-on, manage IR team allocation and performance, maintain IR methodology and playbooks, serve as senior technical point of contact for clients, prepare expert reports and affidavits
Seniority
Senior, hands-on IC with management responsibilities
