Incident Response Lead

Job Summary

As the Incident Response Lead, this full-time remote position will manage client security incidents, directing response efforts, establishing protocols, and coordinating communications during critical events while building and refining the incident response practice.

Key Responsibilities

• Serve as incident commander for client security incidents, establishing scope and tracking decisions
• Run triage and initial investigations across managed environments, delegating tasks as necessary
• Produce post-incident reports detailing findings and recommendations for clients

Required Qualifications

• 6+ years in cybersecurity with substantial experience responding to real intrusions
• Direct experience leading security incidents and managing response efforts
• Hands-on investigative depth in Microsoft 365 and endpoint detection tools
• Ability to build defensible incident timelines from various data sources
• Experience working with breach counsel and cyber insurance carriers during incidents