Cyber Incident Command & Automation Lead

Truist; Raleigh (NC); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Medical, dental, vision

401k plan

Vacation days

Paid holidays

Disability insurance

Job summary

Truist is seeking a seasoned cybersecurity Incident Manager to lead enterprise incident response and high‑risk vulnerability remediation. You will coordinate cross‑functional teams, drive end‑to‑end containment and remediation, and design automation solutions to improve incident management processes.

The role emphasizes developing workflows, leveraging scripting, APIs, AI‑enabled tools, and Microsoft 365 to enhance efficiency, reporting, and governance across security operations.

Qualifications

• Bachelor’s degree or equivalent education, training, and work‑related experience.
• Minimum of 3 years of experience in security engineering or related cybersecurity roles.
• Developing knowledge in cybersecurity principles, theories, and concepts.
• Experience in software development lifecycle security practices.
• Proficiency in implementing and managing information security technologies.

Responsibilities

• Act as Incident Manager / Incident Coordinator for information security incidents, investigations, events, zero‑days, and high‑risk vulnerabilities. Drive end‑to‑end response from intake through containment, remediation, and closure.
• Coordinate cross‑functional stakeholders during incidents and operational initiatives to drive alignment, accountability, and execution.
• Design and implement automation solutions that improve Cyber Incident Management processes and operational efficiency.
• Develop workflows that support incident intake, triage, escalation, stakeholder communications, action tracking, and closure.
• Leverage scripting, APIs, AI‑enabled technologies, orchestration tools, and Microsoft 365 platforms to reduce manual effort and improve consistency.
• Partner with technical and business stakeholders to translate operational requirements into scalable automation and process improvements.
• Manage cybersecurity automation projects and process improvement initiatives from planning through implementation.
• Maintain project plans, milestones, risks, issues, dependencies, action items, and executive updates.
• Develop and maintain operational dashboards, metrics, scorecards, and leadership reporting to measure performance and identify improvement opportunities.
• Analyze incidents, project, and operational data to support governance, decision making, and continuous improvement.

Skills

Security engineering

Cybersecurity

Automation

APIs integration

Education

Bachelor’s degree or equivalent education

Cybersecurity/CS/IT degree recommended

Tools

Power Automate

Power Apps

SOAR platforms

Copilot

APIs

Microsoft 365

SIEM

Job description

Truist is seeking a seasoned cybersecurity Incident Manager to lead enterprise incident response and high‑risk vulnerability remediation. You will coordinate cross‑functional teams, drive end‑to‑end containment and remediation, and design automation solutions to improve incident management processes.

The role emphasizes developing workflows, leveraging scripting, APIs, AI‑enabled tools, and Microsoft 365 to enhance efficiency, reporting, and governance across security operations.