Cyber Incident Manager

Responsibilities

• Incident Leadership: Takes command during cybersecurity events, orchestrates response efforts, and promptly addresses incidents.
• Strategic Planning and Preparedness: Develops, maintains, and updates incident response plans, conducts risk assessments, and conducts scenario planning.
• Cohesive Coordination: Coordinates with various internal departments and external entities for a holistic approach to incident management.
• Technical Expertise and Analysis: Understands the cyber threat landscape, analyzes incident patterns, and offers insights to improve the organization's cybersecurity posture.
• Stakeholder Engagement: Communicates with stakeholders, advises on the impact of incidents, and translates technical incidents into understandable terms.
• Continuous Improvement and Learning: Reviews and refines incident response strategies, integrates new technologies and methodologies, and stays informed about cybersecurity advancements.
• Regulatory Compliance and Documentation: Maintains comprehensive records of incidents, responses, and outcomes for compliance purposes.
• Risk Mitigation: Manages cyber incidents to reduce risk and impact on the organization.
• Operational Continuity: Ensures rapid and efficient response to incidents to minimize downtime and maintain business operations.

Qualifications

• Bachelor's degree from four-year college or university.
• 3-5 years of related experience.
• Technical Skills: Digital Forensics & Incident Response (DFIR), Security Information and Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), Endpoint Detection & Response (EDR), Network Traffic Analysis & Packet Capture, Malware Analysis & Reverse Engineering, Log Correlation and Threat Hunting, Firewall, Proxy, and IDS Log Analysis, Threat Intelligence Integration and Analysis, Email Header and Phishing Analysis, Security Orchestration, Automation, and Response (SOAR) platforms, Forensics Tools, Threat Intel Platforms, Ticketing Systems, Regulatory, Compliance, and Privacy Awareness, Cyber Insurance (CLI), Legal Considerations in Breach Response, Chain of Custody and Evidence Handling, Leadership and Management Skills.