Cyber Threat Situation Management Consultant (BHJOB22048_764)

ITmPowered; Denver (CO); Remote; USD 90,000 - 150,000; Full time

Job summary

An established industry player is seeking a Cyber Threat Situation Management Consultant to lead incident management activities. This role involves coordinating responses to security incidents, developing post-incident documentation, and ensuring effective communication across various teams. The ideal candidate will possess extensive experience in incident response and cybersecurity, with strong project management and communication skills. Join a dynamic team where your expertise will play a crucial role in enhancing security measures and responding to evolving threats. This is a contract position with the possibility of extension, offering the flexibility to work remotely within the US.

Qualifications

• 10+ years in incident management and cybersecurity required.
• Strong communication skills to translate technical threats.

Responsibilities

• Lead incident response and management functions.
• Develop documentation for post-incident analysis.
• Coordinate with technical and business teams.

Skills

Incident Response

Project Management

Technical Writing

Analytical Skills

Communication Skills

Problem-Solving

Cybersecurity Knowledge

Leadership Skills

Education

Bachelor’s in Computer Science

Bachelor’s in Cybersecurity

Project Management Certification

Tools

DFIR Tools

Incident Management Software

Job description

Cyber Threat Situation Management Consultant – Incident Management

As a Cyber Threat Situation Management Consultant, you will perform incident management activity for security incidents from both internal and external sources. Participate in all phases of incident management, including incident response planning, preparation, program development, active response, threat mitigation, lessons learned, remediation, program maturation, and other post-incident activities. The incident management role interacts with internal and external parties at all levels of the organization and possessing varying levels of technical acumen. Must have robust incident response technical expertise, strong project management skills, and excellent verbal and written communication skills. Must be able to translate complex technical situations into instructions, action items, and statuses and be able to communicate them to any audience.

Responsibilities – Investigation team performing incident management, the candidate must:

• Lead and coordinate incident response/management functions.
• Perform incident commander functions for high severity incidents and pre-incidents.
• Develop post-incident after action, lessons learned, and recommendations documentation.
• Perform technical writing for security and response functions.
• Coordinate between disparate technical groups, business owners, executive leadership, compliance teams, legal teams, and vendors.
• Perform orchestration and automation of incident functions, workflows, playbooks, and metrics.
• Maintain Incident Management policies, standards, procedures, processes, playbooks, workflows, and service level agreements to combat new or evolving threats.

Required Skills and Qualifications – A candidate should meet the majority of the following:

• Bachelor’s in business administration, Computer Science, Information Technology, Cybersecurity and Information Assurance, Project Management, or similar technical degree or equivalent job experience
• 10+ years work experience in DFIR, incident management, incident response, and/or cybersecurity.
• EnCE, GCFE, GCFA, GNFA, GDAT, GCIH, GREM, GLEG, GDSA, GCCC, CISA, CISM, PMP, or similar certifications.
• Strong self-starting ability, patience, and leadership skills.
• Effective communication skills and the ability to understand and translate cyber security threats from a technical perspective to business-level understanding and execution.
• Strong analytical and problem-solving skills and the ability to work with a diverse array of teams.
• Broad technical background involving cyber security, computer forensics, network forensics, log forensics, incident response, and/or incident management.
• A thorough understanding of attacker/malware tools, tactics, and procedures.
• Training, mentoring, leadership, and project management skills.

LOGISTICS:

• Contract role through end of the year with potential for extension and/or conversion to perm.
• Work remotely anywhere in Domestic US. Preferred locations Colorado or Georgia.
• COVID-19 Vaccine and Booster Required – OR must provide valid medical exemption from doctor in advance.
• Must be able to successfully pass a 12-panel drug screen, 10-year background check, employment verification.
• You will need to be a current US Citizen or valid Green Card holder. No need for visa now or in future. This role is not able to offer visa transfer or sponsorship now or in the future.
• W2 only – No sub vendors. Sponsorship NOT available.
• Must have direct contact information on resume (phone / email) to be considered.