Incident Commander

Job Summary

Leading cybersecurity incident response efforts, the full-time Incident Commander will direct and manage all response activities during high-impact security incidents, ensuring effective coordination among technical teams, business stakeholders, and executive leadership.

Key responsibilities

• Direct and coordinate incident response activities for various cybersecurity incidents, including ransomware and data breaches
• Establish response priorities, manage escalation activities, and oversee containment and recovery actions
• Translate complex technical findings into actionable business information for executive briefings and status reporting

Required qualifications

• Extensive experience in leading cybersecurity incident response operations in enterprise or critical infrastructure environments
• Strong knowledge of incident handling methodologies, cyber attack lifecycles, and breach management
• Exceptional leadership and communication skills, capable of managing stakeholder expectations and facilitating crisis communications
• Experience coordinating forensic investigations and threat intelligence activities
• Preferred certifications include CISSP, GCIH, GCFA, or equivalent industry-recognized certifications