Remote Incident Response Leader - Drive Playbooks & Training

Infinite Ranges; Illinois; On-site; USD 120,000 - 160,000; Full time

Job summary

Infinite Ranges is seeking an experienced Incident Response Manager to lead incident management for a high‑impact engagement. You will manage live incidents and training, guiding technical and non‑technical stakeholders to detect, respond, and recover from cyber incidents.

You’ll design response playbooks, map attack chains, and develop templates and guides. Expect hands‑on workshops, mentoring, and post‑incident learning to continuously improve defenses.

Qualifications

• 5+ years hands‑on incident response or cyber defense operations experience.
• Experience managing incident response activities and live incidents.
• Familiarity with attack chains, malware behavior, and detection engineering.
• Experience with MITRE ATT&CK, NIST CSF, SANS ICs Kill Chain, WASP, etc.
• Clear communication with technical and non‑technical stakeholders.
• Leadership for developing others through education and training.

Responsibilities

• Lead the design and delivery of the Incident Response Life Cycle.
• Manage incident response operations for IT environments and OT/ICS devices focusing on the lifecycle.
• Develop detailed playbooks, map attack chains, and define detection/response activities.
• Collaborate with range engineers and platform stakeholders to craft training scenarios.
• Build incident response toolkits with templates, artifacts, and training guides.
• Conduct workshops and hands‑on training for operators, SOC analysts, and technical teams on threat response.
• Document remediation paths and best practices for post‑incident reflection and improvement.
• Provide post‑incident and training operational support.

Skills

Incident response

Cyber defense

Communication

Leadership

MITRE ATT&CK

NIST CSF

SANS Kill Chain

Threat detection

Tools

EDR

XDR

SIEM

VMware

VirtualBox

AWS EC2

Attack chain tools

Malware analysis tools

Job description

Infinite Ranges is seeking an experienced Incident Response Manager to lead incident management for a high‑impact engagement. You will manage live incidents and training, guiding technical and non‑technical stakeholders to detect, respond, and recover from cyber incidents.

You’ll design response playbooks, map attack chains, and develop templates and guides. Expect hands‑on workshops, mentoring, and post‑incident learning to continuously improve defenses.