Mgr-Security Incident Response

OP RaaS; Tennessee; On-site; USD 110,000 - 170,000; Full time

Job summary

OP RaaS seeks a skilled senior/security incident response leader to drive strategy and execution of incident response initiatives. You will manage a team, develop playbooks, and coordinate across technical and business units to strengthen defenses.

The role includes directing post-incident forensics, conducting red team exercises, and ensuring lessons learned translate into improved security. Some travel is required, with adherence to laws and company policies.

Qualifications

• Bachelor's degree in business, computer science, information systems and / or related field or equivalent formal training.
• Five (5) years of experience in information technology, cyber security or incident.
• Proven expertise in handling insider threats and conducting red team exercises.
• Strong knowledge of post-attack forensics and incident containment strategies.
• Experience with security incident response tools and methodologies.

Responsibilities

• Manage, lead and develop a professional security incident response team fostering technical growth, security telemetry sourcing, data ingestion, security testing center, and continuous improvement.
• Lead efforts to operationalize security incident detection, response and remediation.
• Direct post-incident forensics and root-cause analysis, ensuring lessons learned translate into improved defenses and remediation plans.
• Plan and execute red team exercises, tabletop simulations, and other readiness activities to test and strengthen response capabilities.
• Develop and maintain incident response playbooks, escalation protocols, cross-team coordination, UEBA program, and model alert correlation processes.
• Work as an integral part of security management team, supporting business and technology, synchronizing communications and actions.
• Build threat intelligence program management reporting.
• Comply with all applicable laws/regulations, as well as company policies/procedures.
• Perform other duties as assigned.

Skills

Security incident response

Leadership

Insider threat

Forensics

Red team exercises

UEBA

Incident containment

Communication

Education

Bachelor's degree in business/CS/IS or related field

Tools

SIEM

Forensics tools

Threat intelligence tools

Job description

Job Description

POSITION OVERVIEW:

Leads the strategic development and execution of security incident response initiatives to enhance the organization's resilience against cyber threats.

ESSENTIAL JOB DUTIES/RESPONSIBILITIES

• 1. Manage, lead and develop a professional security incident response team fostering technical growth, security telemetry sourcing, data ingestion, security testing center, and continuous improvement


• 2. Lead efforts to operationalize security incident detection, response and remediation


• 3. Direct post-incident forensics and root-cause analysis, ensuring lessons learned translate into improved defenses and remediation plans


• 4. Plan and execute red team exercises, tabletop simulations, and other readiness activities to test and strengthen response capabilities


• 5. Develop and maintain incident response playbooks, escalation protocols, cross-team coordination, User and Entity Behavior Analytics (UEBA) program, and model alert correlation processes


• 6. Work as an integral part of security management team, supporting business and technology, synchronizing communications and actions.


• 7. Build threat intelligence program management reporting


• 8. Comply with all applicable laws/regulations, as well as company policies/procedures.


• 9. Perform other duties as assigned.

QUALIFICATIONS

• Bachelor’s degree in business, computer science, information systems and / or related field or equivalent formal training


• Five (5) years of experience in information technology, cyber security or incident


• Proven expertise in handling insider threats and conducting red team exercises


• Strong knowledge of post-attack forensics and incident containment strategies


• Experience with security incident response tools and methodologiesAdvanced analytical and problem-solving skills for effective incident investigation and response


• Strong leadership skills to guide and develop a high-performing security incident response team


• Excellent communication skills for clear reporting and collaboration with technical teams and executives

JOB CONDITIONS

• Some travel required