Remote Incident Response Leader

TTEC; Austin (TX); On-site; USD 120,000 - 140,000; Full time

Job summary

TTEC is seeking an Incident Response Manager to lead the cybersecurity incident response team from a fully remote position in the United States. You will manage detection, containment, and remediation of threats while guiding analysts, developing IR playbooks, and coordinating with Legal, HR, and leadership.

The role emphasizes leadership, incident lifecycle management, and continuous security improvement across policies and processes.

Qualifications

• 5+ years in cybersecurity with EDR/SIEM.
• 3+ years in leadership.
• Knowledge MITRE ATT&CK framework.
• Ability to translate findings to stakeholders.
• Experience with PHI/PII/PCI DSS audits.
• Excellent communication and mentoring.
• Develop IRP and playbooks.

Responsibilities

• Lead incident lifecycle for SOC escalations.
• Mentor Incident Response and Security Analysts.
• Develop and improve IRP and playbooks.
• Design tabletop and simulation exercises.
• Communicate findings to Legal, HR, leadership.
• Conduct Post-Incident Reviews.
• Prepare security/compliance docs.
• Advise on remediation of security and privacy weaknesses.
• Deliver security awareness training.

Skills

CyberSecurity

Leadership

MITRE ATT&CK

Runbooks

Communication

PHI/PII/PCI

Security docs

PowerShell

Python

APIs

Tools

EDR

SIEM

Job description

TTEC is seeking an Incident Response Manager to lead the cybersecurity incident response team from a fully remote position in the United States. You will manage detection, containment, and remediation of threats while guiding analysts, developing IR playbooks, and coordinating with Legal, HR, and leadership.

The role emphasizes leadership, incident lifecycle management, and continuous security improvement across policies and processes.