Senior Manager - CSIRT Cybersecurity Defense
Core
Lead a shift of CSIRT analysts in alert intake, triage, and response for a retail organization's security operations.
Role type
Senior Manager, Cybersecurity Incident Response
Builds
Incident response capabilities and operational maturity for a retail company
Domain
Retail / Cybersecurity
Deliverable
client delivery
Required skills
Incident response lifecycle management, team leadership, process development, threat intelligence integration, automation (SOAR), cross-functional coordination, metrics reporting, technical coaching
Preferred skills
Digital forensics, reverse engineering, threat hunting, network security controls, host-based security, cloud environments, Cyber Fusion Center experience
Technologies
SOAR platforms
Responsibilities
Direct all phases of the incident response lifecycle; Establish and update incident response policies and playbooks; Coordinate cross-functional efforts during major security incidents; Report incident trends and risk insights to senior leadership; Train and mentor incident responders; Conduct tabletop exercises and red team engagements; Leverage threat intelligence to inform response strategies; Identify opportunities for automation and process optimization
Seniority
Senior, hands-on IC with management responsibilities
