Cyber Security Incident Commander: Lead IR Response

Optimum; Norwalk (CT); On-site; USD 120,000 - 180,000; Full time

Job summary

Optimum is seeking a Cyber Security Incident Commander to lead incident response for significant cybersecurity events, coordinating cross-functional teams across IT, Legal, Communications, and Engineering. You will guide containment, recovery, and communications to executives while striving to improve processes and playbooks.

You will perform forensic analysis across hosts, networks, and the cloud, integrate threat intelligence, and apply an AI-first approach to accelerate triage and

Qualifications

• Bachelor's degree in Computer Science or related field.
• Advanced certifications such as CISSP or incident-response GIAC certifications preferred.
• Minimum five years experience in Information Technology.
• Minimum three years of direct IT Security experience in Cyber Security operations and Incident Response.
• Experience with event and log analysis across security tools.
• Strong communication of complex information to leadership.

Responsibilities

• Own incident command for mid-tier and major incidents with cross-functional teams.
• Monitor alerts and triage incidents by severity and business impact.
• Execute incident response playbooks to contain and remediate breaches.
• Lead post-incident reviews and root-cause analyses; drive remediation.
• Develop and mature incident-response playbooks and drills.
• Coordinate with law enforcement, regulators, and vendors.

Skills

Incident Command

Log Analysis

MITRE ATT&CK

Forensics

AI Tools

Communication

Education

Bachelor's degree in CS or related field

CISSP or GIAC (GCIH/GCFA/GCFE/GNFA) preferred

Tools

SIEM/EDR

Forensic Tools

Cloud Forensics

Job description

Optimum is seeking a Cyber Security Incident Commander to lead incident response for significant cybersecurity events, coordinating cross-functional teams across IT, Legal, Communications, and Engineering. You will guide containment, recovery, and communications to executives while striving to improve processes and playbooks.

You will perform forensic analysis across hosts, networks, and the cloud, integrate threat intelligence, and apply an AI-first approach to accelerate triage and