Cloud Cyber Incident Response Manager

Booz Allen Hamilton

Confirmed live today High trust

Quick summary

Work type
On-site
Location
McLean, VA
Salary
$112,800–$257,000 / yr
Employment
Full-time
Posted
21 days ago
Freshness
Confirmed live today

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $176k
This role $185k
$95k $274k
below market most similar roles pay here above market

This role pays more than 60% of similar roles. Most pay $143,186–$209,362 — the blue band above. At the midpoint, this role pays about $185k versus about $176k for comparable roles.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 1662 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 904 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · Cloud Cyber Incident Response Manager

The Cloud Cyber Incident Response Manager joins the cloud cyber incident response leadership team to provide strategic direction and operational oversight for multiple incident response teams. This role involves managing complex digital forensic investigations and cybersecurity incident response engagements across cloud environments, specifically AWS, Azure, and GCP. Key responsibilities include leading team leads, performing career management, and serving as a senior advisor during high-severity incidents like ransomware or data breaches. The manager must communicate material findings to executive, legal, and technical audiences while ensuring compliance with regulatory and privacy requirements. Required skills include proficiency in digital forensic methodologies, evidence preservation, and data analysis using tools like Elastic, Splunk, or AWS Athena. Candidates must possess a Bachelor’s degree and significant experience in cybersecurity investigations and team leadership.

What you'll do

  • Oversee the strategic direction and operational performance of multiple cloud incident response teams.
  • Lead complex digital forensic investigations and cybersecurity incident response engagements across cloud environments.
  • Serve as the senior escalation point and advisor during high-severity incidents for executive and legal stakeholders.
  • Manage team leads and senior personnel through career development, performance management, and disciplinary actions.
  • Establish and maintain DFIR policies, investigative methodologies, and documentation requirements.
  • Communicate material findings, risks, and recommendations to executive, legal, and technical audiences.
  • Identify and pursue new business opportunities to expand the DFIR practice and client relationships.
  • Ensure all investigative activities comply with legal, privacy, contractual, and regulatory requirements.

What we're looking for

  • U.S. citizenship is required.
  • Bachelor’s degree in Cybersecurity, CS, Business Administration, or Digital Forensics.
  • 7+ years of experience in digital forensics, incident response, cybersecurity investigations, or cyber risk.
  • 3+ years of experience leading incident response teams, forensic investigation teams, or cybersecurity functions.
  • Experience managing multiple teams, senior technical personnel, or a geographically distributed workforce.
  • Experience serving as a senior advisor during significant cyber incidents such as ransomware, data breach, or business email compromise.
  • Experience with employee development, career management, performance management, and disciplinary actions.
  • Experience developing and maintaining client relationships within the cyber insurance, legal, incident response, or cybersecurity markets (preferred).

More like this

Similar roles

Staff Cyber Incident Response Engineer

Adobe

San Jose, CA +2 137 days ago
Incident Response Host Forensics Network Forensics Malware Triage Log Analysis Kubernetes Docker EDR Linux MacOS Windows AWS Azure GCP SIEM Python Ruby Bash Threat Hunting
7+ yrs exp

Principal Security Engineer, Incident Response

F5 Inc

Seattle +1 15 days ago $182,200–$273,200
Incident Response Cybersecurity AWS Azure GCP Kubernetes SIEM EDR CrowdStrike WAF WAAP API Gateway DDoS Mitigation FedRAMP NIST SP 800-61 ISO 27001 SOC 2 PCI-DSS MITRE ATT&CK Digital Forensics Load Balancing NGINX BIG-IP
10+ yrs exp Hybrid

Digital Forensics Analyst

Booz Allen Hamilton

Bethesda, MD 39 days ago
Digital Forensics Incident Response Splunk EnCase FTK X-Ways Cellebrite Autopsy KAPE Velociraptor Linux Windows macOS AWS Azure GCP NIST 800‑53 RMF FedRAMP Malware Analysis Reverse Engineering
2+ yrs exp