Information Technology Manager II

About Our Client

This organization operates within the cybersecurity and information technology sector. It addresses challenges related to cyber threats, incident response, threat detection, and digital forensics across diverse environments including enterprise networks, cloud platforms, and hybrid systems. The team focuses on improving security monitoring, incident investigation, and response capabilities to protect organizational assets and data.

About the Opportunity

The Information Technology Manager II leads complex cybersecurity incident investigations and enhances threat detection and response strategies. This role is responsible for overseeing comprehensive incident response activities, digital forensics, threat hunting, security engineering, automation, and mentorship within the cybersecurity operations domain. The position is critical for advancing the organization's ability to detect, analyze, and respond to cyber threats effectively.

Responsibilities

• Lead cyber incident investigations across enterprise, cloud, hybrid, and on-premises environments.
• Conduct incident response from triage to post-incident reporting.
• Investigate network intrusions, ransomware, insider threats, and advanced attacks.
• Preserve evidence and manage forensic chain-of-custody.
• Produce investigative findings, root cause analyses, and remediation recommendations.
• Perform digital forensics and malware analysis across multiple platforms.
• Conduct proactive threat hunting and develop detection rules and alerts.
• Collaborate with security operations and engineering teams to improve visibility and incident response.
• Support security tool administration, log onboarding, and use-case development.
• Utilize AI and automation to enhance investigation efficiency and reporting.
• Apply offensive security knowledge to support threat emulation and detection validation.
• Mentor security teams and contribute to operational documentation and procedures.

Requirements

• 5 to 10+ years of experience in cybersecurity disciplines including incident response, DFIR, threat hunting, or detection engineering.
• Proven leadership in enterprise-level cyber incident investigations.
• Hands-on experience with digital forensics, malware analysis, and investigative reporting.
• Experience with cloud, hybrid, identity, endpoint, network, and on-premises environments.
• Ability to develop detections, automations, playbooks, and security engineering solutions.
• Strong knowledge of Microsoft Entra ID, Active Directory, Azure, Microsoft 365, and enterprise authentication.
• Familiarity with Windows OS telemetry, forensic artifacts, and persistence tactics.
• Understanding of cloud security across Azure, AWS, GCP, and SaaS platforms.
• Proficient with incident response frameworks, cyber kill chain, MITRE ATT&CK, and threat intelligence.
• Experience with enterprise security operations tools including SIEM, EDR, NDR, SOAR, and vulnerability management.