Incident Response Manager

Jobtailor; Colorado; On-site; USD 140,000 - 210,000; Full time

Job summary

Jobtailor is seeking an experienced cybersecurity leader to serve as the primary client-facing authority during major incidents. You will oversee multiple concurrent incident response engagements, including ransomware, data breaches, and cloud compromises, while directing forensic investigations and threat hunting.

You will provide executive briefings to CISOs, CIOs, and boards, and ensure all investigations meet regulatory requirements.

Qualifications

• 7+ years in cybersecurity with incident response, forensics, threat hunting, or cyber defense operations.
• Experience leading complex incident response engagements from detection through recovery.
• Proven ability to manage projects, mentor technical staff, and coordinate stakeholders.
• Strong networking, OS, identity, and cloud concepts knowledge.
• Proficient in scripting and automation with PowerShell, Python, Bash, or similar.

Responsibilities

• Serve as the primary client-facing leader during major cybersecurity incidents.
• Lead multiple concurrent incident response engagements for ransomware, data breaches, and more.
• Provide executive briefings to CISOs, CIOs, legal counsel, and boards.
• Direct forensic investigations, threat hunting, containment, eradication, and recovery.
• Review and approve findings, reports, and client deliverables.
• Ensure investigations meet legal, regulatory, and evidentiary requirements.

Skills

Incident response leadership

Digital forensics

Threat hunting

Project management

Mentoring staff

Cross-functional coordination

Networking knowledge

Cloud technologies

Scripting / automation

Tools

PowerShell

Python

Bash

Job description

Responsibilities

• Serve as the primary client-facing leader during major cybersecurity incidents.
• Lead multiple concurrent incident response engagements involving ransomware, data breaches, insider threats, cloud compromises, and advanced threat actor activity.
• Provide executive-level briefings to CISOs, CIOs, legal counsel, executive leadership, boards of directors, and other stakeholders.
• Direct forensic investigations, threat hunting activities, containment efforts, eradication plans, and recovery operations.
• Review and approve technical findings, investigation reports, executive summaries, and client deliverables.
• Ensure investigations meet legal, regulatory, and evidentiary requirements.

Requirements

• 7+ years of cybersecurity experience with at least 3 years focused on incident response, digital forensics, threat hunting, or cyber defense operations.
• Demonstrated experience leading complex incident response engagements from initial detection through recovery.
• Experience managing project teams, mentoring technical staff, and coordinating cross-functional stakeholders.
• Strong understanding of networking, operating systems, identity systems, cloud technologies, and cybersecurity principles.
• Proficiency with scripting and automation using PowerShell, Python, Bash, or similar technologies.
• Relevant certifications such as GCFA, GCIH, GCED, GREM, GCTD, CISSP, CCSP, CISM, AWS Security Specialty, or Azure Security Engineer Associate.