Cyber Incident Manager

About the role

The Salvation Army, an evangelical part of the universal Christian Church, seeks a Cyber Incident Manager to lead the response to cyber incidents. This role plays a pivotal role in coordinating with various internal and external stakeholders to manage the incident lifecycle.

Responsibilities

• Taking command during cybersecurity events, orchestrating response efforts, and promptly addressing incidents.
• Developing, maintaining, and regularly updating incident response plans.
• Conducting risk assessments and scenario planning (tabletop exercises).
• Coordinating with various internal departments and external entities.
• Analyzing incident patterns and weaknesses.
• Communicating with stakeholders, including executive leadership.
• Reviewing and refining incident response strategies.
• Maintaining comprehensive records of incidents, responses, and outcomes.
• Maintaining compliance with legal and regulatory requirements.
• Ensuring operational continuity and minimizing downtime.

Requirements

• Bachelor's degree from four-year college or university.
• 3-5 years of related experience.
• Technical Skills: Digital Forensics & Incident Response (DFIR), Security Information and Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), Endpoint Detection & Response (EDR), Network Traffic Analysis & Packet Capture, Malware Analysis & Reverse Engineering, Log Correlation and Threat Hunting, Firewall, Proxy, and IDS Log Analysis, Threat Intelligence Integration and Analysis, Email Header and Phishing Analysis, Security Orchestration, Automation, and Response (SOAR) platforms, Forensics Tools, Incident Response Lifecycle, MITRE ATT&CK Framework, Vulnerability Management & Prioritization, Disaster Recovery & Business Continuity Planning, Risk Assessment & Gap Analysis, Change Control and Root Cause Analysis (RCA), Regulatory, Compliance, and Privacy Awareness, Cyber Insurance (CLI) & Legal Considerations in Breach Response, Chain of Custody and Evidence Handling.

Qualifications

• Relevant certifications (e.g., CISSP, CISM, GCIH, GCFA, CRISC).
• Leadership and Management Skills: Collaboration, Confluence, MS Teams, Slack, Monday.com, Telegram (war room coordination), Strong leadership and decision-making, Excellent communication and interpersonal skills, Deep understanding of cybersecurity frameworks and standards, Ability to work under pressure and handle crises effectively.

Skills

• Collaboration: Confluence, MS Teams, Slack, Monday.com, Telegram (war room coordination).
• Leadership: Strong leadership and decision-making, Excellent communication and interpersonal skills, Deep understanding of cybersecurity frameworks and standards, Ability to work under pressure and handle crises effectively.

Benefits

• Generous Medical, Dental, Vision Benefits
• TSA paid Life Insurance for Employees
• Additional life insurance options for employees
• Paid Time Off - Vacation, Sick, Personal day
• 403(b) retirement savings plan
• Non-contributory Pension Plan
• Professional Development
• Free, on-site Fitness Center
• Federal holidays
• Opportunities to give back and support our communities

Pay

Details TBD

Schedule

Hybrid work arrangement (3 days onsite/ 2 days remote) after three months of employment.