Cybersecurity Incident Response Lead

Accenture-Federal-Services-2; Lorton (VA); On-site; USD 106,000 - 206,000; Full time

Job summary

Accenture Federal Services is seeking a CTOC Incident Manager to oversee the incident management program, processes, and procedures for critical government networks. You will lead the lifecycle of cybersecurity incidents from detection to recovery, coordinating with executives, legal teams, and customers to ensure timely resolution.

You will work with SOC, Networking, Engineering and Legal teams, drive post-incident reviews, and develop improvements to response capabilities.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology or related field with 3+ years in Incident Response or 5+ years in related cybersecurity roles.
• 1+ year of leadership experience in operational environments.
• DoD 8570 IAT Level 2 or DoD 8140 compliant certification.
• Must obtain Microsoft SC-200 within 6 months of hire.
• Experience with incident response processes, SOPs, playbooks and cyber investigative TTPs.
• 2+ years of experience with technical report writing; strong writing skills.

Responsibilities

• Develop, maintain, and regularly update incident response plans, playbooks, and procedures.
• Lead and coordinate the response to cybersecurity incidents, ensuring timely and effective resolution.
• Manage the entire incident lifecycle from detection to recovery.
• Serve as primary contact during incidents with executive leadership, legal teams, and customers.
• Collaborate with SOC, Networking/NOC, Engineering, Legal, and other stakeholders for a coordinated response.
• Conduct post-incident reviews to identify lessons learned and drive improvements.
• Prepare and present detailed incident reports to leadership and stakeholders.

Skills

Incident response

Security operations

Leadership

DFIR

Risk management

Education

Bachelor’s degree in Cybersecurity or related field

Tools

SIEM

Security tooling

Job description

Accenture Federal Services is seeking a CTOC Incident Manager to oversee the incident management program, processes, and procedures for critical government networks. You will lead the lifecycle of cybersecurity incidents from detection to recovery, coordinating with executives, legal teams, and customers to ensure timely resolution.

You will work with SOC, Networking, Engineering and Legal teams, drive post-incident reviews, and develop improvements to response capabilities.