Cybersecurity Incident Manager - Lead
Core
Lead cybersecurity incident response activities, coordinate cross-functional teams during active incidents, and drive the maturity of the Cyber Threat Operations Center.
Role type
Senior IC Cybersecurity Incident Manager (Lead)
Builds
Incident response capabilities, detection processes, and operational resilience for USAA's enterprise environment.
Domain
Cybersecurity / Information Security Operations
Required skills
Incident command, cross-functional team coordination, threat analysis, vulnerability management, penetration testing, digital forensics, malware analysis, threat intelligence, risk management, stakeholder communication
Preferred skills
Ransomware response, credential compromise handling, insider threat mitigation, cloud compromise response, advanced malware analysis, threat hunting, detection engineering, purple teaming, red teaming, adversary emulation, playbook development
Technologies
Security monitoring tools, forensics tools, network analysis tools, endpoint security platforms, cloud security tools
Responsibilities
Act as Incident Commander during active cybersecurity incidents; lead and coordinate response across security, technology, business, and third-party partners; investigate and analyze security anomalies and breaches; drive improvements to incident response processes, playbooks, and training; communicate incident status and business impact to senior leadership; serve as subject matter expert for vulnerability management and security assessments; develop analysts through training; testify as expert witness in court.
Seniority
Senior, hands-on IC with leadership responsibilities
