Incident Response Manager

Infinite Ranges; United States; On-site; USD 165,000 - 248,000; Part time

Job summary

Infinite Ranges is seeking an experienced Incident Response Manager for a 12–15 week, fully remote engagement. You will lead live incidents and training, enabling both technical and non-technical stakeholders to detect, respond, and recover from cyber threats.

You will design playbooks, manage operations across IT and OT environments, and develop reusable templates and guides for post-incident improvements.

Qualifications

• 5+ years of hands-on incident response or cyber defense operations experience.
• Proven ability to manage Incident Response activities and manage live Incidents.
• Strong working knowledge of attack chains, malware behavior, and detection engineering.
• Experience with frameworks like MITRE ATT&CK, NIST CSF, SANS IC Kill Chain, WASP.
• Ability to communicate clearly with technical and non-technical stakeholders. Leadership for developing others through education and training.

Responsibilities

• Lead the design and delivery of the Incident Response Life Cycle.
• Manage incident response operations for IT environments, and OT/ICS devices focused on the Incident Response Life Cycle.
• Develop detailed playbooks, map attack chains, and detection response activities.
• Collaborate with range engineers and platform stakeholders to define Incident Response scenarios for training.
• Build incident response toolkits, including reusable templates, artifacts, and training guides.
• Conduct workshops and hands-on training for operators, SOC analysts, and technical teams on responding to real-world threats.
• Document remediation paths and best practices for post-incident reflection and improvement.
• Provide post-incident and training operational support.

Skills

Incident response

Leadership

Stakeholder communication

Training & mentoring

Threat detection engineering

Tools

EDR

XDR

SIEM

VMware

AWS EC2

Attack chain tools

Vulnerability tools

Malware analysis

MITRE ATT&CK

Job description

In the game of life, are you stuck on level "Meh"? Why not unlock a legendary career move with us at Infinite Ranges!

Let me spill the tea- Infinite Ranges stands on the cutting edge of deploying, implementing, and custom consulting for tailored Cybersecurity, application modernization and DevSecOps solutions. In under 48 months, we’ve grown to 60+ OEM partners, a staff of over 50, and hundreds of engagements, delivering both people and professional services at-scale.

About The Role

This is for about 12-15 weeks, about 140hrs total, fully remote.

Infinite Ranges is seeking an experienced Incident Response Manager to lead incident management efforts for a high-impact engagement. In this role, you'll manage live incidents as well as training.

You’ll be the point person for managing incident response engagements as well as training, drills, and enabling both technical and non-technical stakeholders to detect, respond, and recover from cyber incidents.

What You Will Be Doing

• Lead the design and delivery of the Incident Response Life Cycle.
• Manage incident response operations for IT environments, and OT/ICS devices focused on the Incident Response Life Cycle.
• Develop detailed playbooks, map attack chains, and detection response activities.
• Collaborate with range engineers and platform stakeholders to define Incident Response scenarios for training.
• Build incident response toolkits, including reusable templates, artifacts, and training guides.
• Conduct workshops and hands-on training for operators, SOC analysts, and technical teams on responding to real-world threats.
• Document remediation paths and best practices for post-incident reflection and improvement.
• Provide post-incident and training operational support.

What We Want To See

• 5+ years of hands-on incident response or cyber defense operations experience.
• Proven ability to manage Incident Response activities and manage live Incidents
• Strong working knowledge of attack chains, malware behavior, and detection engineering.
• Experience with frameworks like MITRE ATT&CK, NIST CSF, SANS IC​ Kill Chain, WASP, etc.
• Ability to communicate clearly with technical and non-technical stakeholders. Ability to problem solve in real time.
• Leadership for developing others through education, and training.

Technologies Used in This Role:

• EDR, XDR, Platforms
• SIEM toolsets
• Virtualization: VMware, VirtualBox, AWS EC2
• Attack Chain analysis tools
• Vulnerability analysis tools
• Malware analysis tools
• Security Tools: MITRE ATT&CK, traffic generators

Bonus Points For:

• Certifications: GICSP, GCIL, GCIH, CRISP, ECIH, and/or CCIM
• Experience as an Incident Handler in various environments
• Previous experience with attack/defense trainingExperience working in a SOC
• Strong client-facing communication and documentation skills
• Familiarity with SCADA, IOT, and HMI systems a plus