Senior Cybersecurity Incident Response Lead

Crowe; Denver (CO); On-site; USD 111,000 - 226,000; Full time

Benefits offered by this job

Comprehensive total rewards package

Career Coach / growth guidance

Job summary

Crowe is seeking an Incident Response Manager in the United States to lead complex cybersecurity incident responses and serve as a senior technical leader for clients. You will mentor responders, oversee engagements, and ensure compliance with legal and regulatory requirements.

The role requires strong communication with executives, the ability to coordinate internal and external resources, and a track record of delivering high-quality incident outcomes across ransomware, data breaches, and

Qualifications

• 7+ years of cybersecurity experience with at least 3 years focused on incident response, digital forensics, threat hunting, or cyber defense operations.
• Proven experience leading complex incident response engagements from detection through recovery.
• Experience managing project teams, mentoring technical staff, and coordinating cross-functional stakeholders.

Responsibilities

• Serve as the primary client-facing leader during major cybersecurity incidents.
• Lead multiple concurrent incident response engagements including ransomware, data breaches, and cloud compromises.
• Provide executive-level briefings to CISOs, CIOs, and other stakeholders.

Skills

Incident response leadership

Cybersecurity incident response

SIEM experience

EDR experience

Scripting (PowerShell/Python)

Education

Bachelor's degree in Cybersecurity/CS or related

Tools

Splunk

Elastic

Microsoft Sentinel

CrowdStrike Falcon

Job description

Crowe is seeking an Incident Response Manager in the United States to lead complex cybersecurity incident responses and serve as a senior technical leader for clients. You will mentor responders, oversee engagements, and ensure compliance with legal and regulatory requirements.

The role requires strong communication with executives, the ability to coordinate internal and external resources, and a track record of delivering high-quality incident outcomes across ransomware, data breaches, and