Cybersecurity Incident Commander

What you'll do

• Serve as primary Security Incident Commander for incidents identified by the SOC.
• Manage end-to-end lifecycle of security incidents from triage to resolution.
• Establish and maintain incident command during high-severity or large-scale events.
• Facilitate cross-functional collaboration and decision-making across technical teams.
• Ensure consistent documentation of incident timelines, impact assessments, and actions.
• Coordinate post-incident reviews for root cause analysis and remediation tracking.

What we're looking for

• 3-7+ years of experience in cybersecurity operations, incident response, or SOC environments.
• Direct experience coordinating or leading security incident response efforts in enterprise settings.
• Strong understanding of the incident response lifecycle and frameworks like NIST 800-61.
• Experience handling high-severity incidents such as ransomware, insider threats, and data exfiltration.
• Excellent written and verbal communication skills for both technical and non-technical stakeholders.
• Ability to facilitate cross-functional communication and drive accountability during live incidents.
• Strong organizational skills with the ability to manage multiple concurrent incidents independently.