Manager, Incident Response

About the role

The successful candidate will be responsible for the people leadership and operational management of the CIRT, ensuring consistent, high-quality execution across active cyber security incidents and customer engagements. As an Incident Response Manager, you will lead and develop squads of analysts across CIRT while remaining technically engaged as a senior escalation point for complex and high-severity incidents.

What you'll do

• Lead and develop squads of analysts across CIRT; set clear expectations, provide coaching and feedback, support career development, and build an inclusive
• Own day-to-day CIRT operations across multiple squads, ensuring appropriate staffing, coverage, workload balancing, prioritization
• Provide senior technical leadership and act as Incident Commander for complex or high-severity engagements, coordinating investigation, containment, eradication
• Establish and maintain operational and investigative quality standards, ensuring teams follow approved processes and playbooks and that engagement documentation
• Use engagement, quality, response-time, capacity, and customer-outcome metrics to identify trends, manage performance, inform resource planning

What you need

• 7–13 yrs of experience
• Incident response
• Cloud security
• Performance management
• B.Tech or B.E. or B.Sc or BCA

Good to have

• SIEM
• CISSP
• EDR
• SQL
• PowerShell