Lead Cybersecurity Operations & CSIRT Leader (Hybrid)

Genworth; Washington (District of Columbia); Hybrid; USD 121,000 - 187,000; Full time

Benefits offered by this job

Healthcare Coverage

401(k) Options

Employer-funded Retirement Plan

Paid Time Off & Holidays

Disability Insurance

Life Insurance

Tuition Reimbursement & Training

Wellness Support

Caregiver and Mental Health Support

Job summary

Genworth | CareScout is seeking a Lead, Security Operations to guide our CSIRT and drive enterprise-wide cybersecurity incident response. You will shape plans, train and lead the team, and coordinate across Technology, Legal, Compliance and business units to minimize disruption and strengthen resilience.

In this role you will develop runbooks, playbooks, and metrics, run tabletop exercises, and leverage AI/automation to improve detection and response while communicating clearly to senior

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or related field, or 7+ years of equivalent experience.
• Progressive cybersecurity operations and incident response experience, including CSIRT leadership.
• Experience directing complex incidents and coordinating response across technical and business teams.
• Strong knowledge of investigation, containment, eradication and recovery across endpoints, networks, identities and cloud.

Responsibilities

• Lead the CSIRT, set priorities, build team capabilities, and ensure incident readiness.
• Direct incident response from triage to containment and post-incident review.
• Coordinate across Cybersecurity, Technology, business units and external partners.
• Maintain and enhance incident response plans, playbooks, and escalation procedures.
• Serve as primary escalation point for significant incidents with clear business impact.
• Partner with Legal, Privacy, Compliance, Risk and Communications on incident decisions.
• Guide investigations including evidence preservation and forensic analysis.
• Lead tabletop exercises and response simulations to test readiness and close gaps.
• Leverage threat intelligence and lessons learned to improve detection and response.
• Establish response metrics and manage service providers for improvements.
• Use AI and automation to detect and respond to threats at machine speed.

Skills

CSIRT leadership

Incident response leadership

Executive communications

Regulated environment experience

Threat intelligence interpretation

Team development

Education

Bachelor’s degree in Cybersecurity/CS/IT or 7+ years experience

Tools

SIEM

EDR

SOAR

Digital forensics tools

Job description

Genworth | CareScout is seeking a Lead, Security Operations to guide our CSIRT and drive enterprise-wide cybersecurity incident response. You will shape plans, train and lead the team, and coordinate across Technology, Legal, Compliance and business units to minimize disruption and strengthen resilience.

In this role you will develop runbooks, playbooks, and metrics, run tabletop exercises, and leverage AI/automation to improve detection and response while communicating clearly to senior