Manager, Threat Intelligence & IR (Hybrid)
Core
Leads enterprise incident response, vulnerability management, and threat intelligence across multi-cloud environments, serving as incident commander for high-severity events.
Role type
Manager, Threat Intelligence & Incident Response
Builds
Detection, response, and remediation architecture for cloud, on-premises, and SaaS environments.
Domain
Cybersecurity, Cloud Security, Threat Intelligence
Required skills
Incident response leadership, Vulnerability management lifecycle, Threat intelligence analysis, Security solutions architecture, Multi-cloud design (AWS/Azure/GCP), Team leadership, Automation/Scripting
Preferred skills
AI/GenAI security risk analysis, Python/PowerShell/Bash scripting, Regulated environment experience (SOX/PCI)
Technologies
SIEM, SOAR, EDR/XDR, AWS, Azure, GCP, MITRE ATT&CK
Responsibilities
Lead end-to-end incident response as incident commander; Own vulnerability management program and remediation SLAs; Build and operate threat intelligence function; Provide solutions architecture for security platforms; Develop and test incident response plans and playbooks; Lead, coach, and develop a team of analysts and engineers.
Seniority
Manager, hands-on IC with team leadership
