Security Incident Commander & Response Lead

Servers.com by Nexcess; United States; Remote; USD 120,000 - 140,000; Full time

Job summary

Servers.com by Nexcess in the United States is seeking an Information Security Incident Manager to lead and coordinate the organization's Security Incident Management program, ensuring timely response and effective communication during incidents.

You will partner with Infrastructure, Platform Engineering, Security Engineering, Support, Incident Management, and Leadership teams to drive incident response, escalate as needed, and improve maturity through post-incident reviews and metrics.

Qualifications

• 4+ years of experience in IT, Infrastructure Operations, Hosting Operations, Platform Reliability, or related technical environments.
• Bachelor’s degree or equivalent practical experience.
• Proven history of Linux Incident Response & Forensics.
• Ability to perform Advanced Log Analysis & System Auditing.
• Experience managing escalations and coordinating cross-functional technical teams.
• Excellent written and verbal communication skills.

Responsibilities

• Lead and coordinate operational incident response activities for infrastructure, platform, hosting, and customer-impacting events.
• Serve as Security Incident Commander or facilitate incident coordination during high-severity operational events.
• Ensure incident response processes are consistently followed including identification, escalation, engagement, assessment, resolution, communication, and post-mortem review.
• Facilitate operational bridge calls, escalation management, stakeholder coordination, and incident tracking activities.
• Monitor active incidents to ensure accountability, urgency, and proper escalation procedures are maintained.
• Assist with after-hours escalation coordination as necessary during major operational events.
• Contribute to Incident Outcomes and Action Review (IOAR) meetings and post-mortem reviews.
• Analyze operational incidents, outages, and trends to identify recurring failures and improvement opportunities.
• Develop and maintain incident response documentation, operational procedures, escalation workflows, and governance standards.
• Produce monthly reporting related to incidents, service disruptions, response metrics, and operational trends.
• Partner with operational leadership to improve incident response maturity, communication standards, and organizational accountability.
• Communicate effectively with both technical and non-technical stakeholders during high-pressure operational events.
• Promote operational transparency, accountability, and process adherence across teams.
• Assist with reinforcing best practices related to incident handling, escalation management, and operational communication.
• Additional duties as assigned

Skills

Incident management

Linux

Log analysis

Communication

Escalations

Post-mortems

Education

Bachelor’s Degree in Information Technology, Business Administration, or related field

Job description

Servers.com by Nexcess in the United States is seeking an Information Security Incident Manager to lead and coordinate the organization's Security Incident Management program, ensuring timely response and effective communication during incidents.

You will partner with Infrastructure, Platform Engineering, Security Engineering, Support, Incident Management, and Leadership teams to drive incident response, escalate as needed, and improve maturity through post-incident reviews and metrics.