CFC Senior Enterprise Security Incident Manager

Team: IT

Location: US

Commitment: Full-time

Workplace Type: remote

Accountabilities:

As a Senior Enterprise Security Incident Manager, you will lead major cybersecurity response efforts, ensuring incidents are effectively contained, investigated, and resolved while improving overall cyber resilience. You will serve as a trusted advisor to technical teams and leadership, providing clear direction during high-impact situations.

• Act as Cyber Incident Commander for significant security incidents, coordinating enterprise-wide response activities from detection and containment through recovery and resolution.
• Lead cross-functional incident response efforts by aligning security, technology, business, and executive stakeholders around priorities, decisions, and recovery plans.
• Provide executive-level communication during incidents, delivering accurate updates, managing expectations, and supporting risk-based decision-making.
• Conduct incident investigations, impact assessments, root cause analysis, and post-incident reviews to identify improvements and prevent recurrence.
• Maintain and enhance incident response plans, playbooks, processes, and operational procedures to strengthen security preparedness.
• Lead tabletop exercises and readiness activities with business and technology teams to validate response capabilities and identify improvement opportunities.
• Monitor emerging cyber threats and collaborate with security teams to improve detection, response, and overall security posture.
• Participate in an on-call rotation, providing incident leadership support during assigned nights, weekends, holidays, and after-hours security events.

Requirements:

The ideal candidate brings extensive experience in cybersecurity incident management, strong technical knowledge, and the ability to lead complex response efforts in a fast-paced enterprise environment.

• 8+ years of experience in security operations, information technology, or related cybersecurity fields, including 5+ years focused on security incident response or handling.
• Bachelor’s degree in Computer Science, Computer Engineering, Information Security, or a related discipline, or equivalent professional experience.
• Proven experience managing complex cybersecurity incidents such as ransomware, advanced persistent threats (APTs), DDoS attacks, insider threats, application attacks, and data exfiltration events.
• Strong understanding of incident response methodologies, digital investigations, adversary tactics, techniques, and procedures (TTPs), including triage, containment, remediation, and recovery.
• Broad technical knowledge across enterprise and cloud environments, including operating systems, networking, security controls, and detection and response platforms.
• Experience performing investigations, root cause analysis, and translating technical findings into clear recommendations for both technical and executive audiences.
• Demonstrated ability to coordinate cross-functional teams, influence stakeholders, and manage multiple high-priority cybersecurity incidents simultaneously.
• Strong communication, analytical thinking, problem-solving, and decision-making skills with the ability to operate effectively under pressure.
• Proactive mindset with experience identifying security improvement opportunities and driving operational enhancements.
• Preferred certifications include GIAC, CISSP, SSCP, CISM, EC-Council, Offensive Security, or other cybersecurity, incident response, digital forensics, or ethical hacking certifications.

Benefits:

• Competitive compensation package with bonus opportunities.
• Comprehensive healthcare coverage, including medical, dental, and vision plans.
• Employer-supported retirement savings plan with 401(k) matching.
• Flexible work environment with remote, hybrid, or office-based options.
• Flexible paid time off, including vacation, sick leave, volunteer time off, and paid holidays.
• Opportunity to work within a global cybersecurity organization solving complex and impactful security challenges.
• Inclusive and collaborative workplace culture focused on innovation, growth, and employee development.