Cyber Security Manager – Incident Detection and Response
Ashland
full-time
Posted on:
Location Type: Remote
Location: Remote • 🇺🇸 United States
Visit company websiteJob Level
SeniorLead
Tech Stack
AWSAzureCloudCyber Security
About the role
- Lead, mentor, and develop a blended IDR team (IR, SOC operations, threat detection, and security tooling engineers)
- Lead cyber incident investigations across the environment and oversee root cause analysis
- Lead the design and operation of detection capabilities aligned with compliance requirements and risk appetite
- Oversee the development of threat models and provide guidance on improving cyber defense posture
- Execute and oversee a process of a data driven methodology for measuring cyber defense effectiveness
- Coordinate cross-functional response activities with IT infrastructure, applications, OT/ICS teams, legal, HR, communications, and other stakeholders
- Establish and track metrics to measure defense effectiveness, report outcomes and trends to leadership
Requirements
- Bachelor’s degree in Computer Science, Information Security, Engineering, or related field preferred; equivalent experience considered
- Relevant professional certifications preferred, such as: Incident Response / Blue Team: GCIH, GCIA, GCED, GCFR, GNFA, GCTI, GCFA
- General Security: CISSP, CISM, CCSP
- Cloud or platform specific: Azure, AWS, or similar
- Strong understanding of security operations, digital forensics, incident response, and threat detection methodologies
- Demonstrated ability to lead technical teams in an operational environment
- 7–10+ years of progressive experience in cybersecurity, with at least 3–5 years directly in Security Operations Center (SOC), Incident Response, or Threat Detection roles
- 3+ years of people management or team-lead experience, including performance management, coaching, and talent development
- Hands-on experience in leading cyber incident investigations from detection through containment and recovery
- Proven experience managing or partnering with an MSSP/MDR/SOC-as-a-Service provider
- Experience in industrial/OT/ICS environments (e.g., chemical, energy, manufacturing) strongly preferred
Benefits
- Industry competitive salary and benefits
- Pay-for-performance incentive plans
- Dynamic and challenging work environment
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
cyber incident investigationsroot cause analysisdetection capabilities designthreat models developmentdata driven methodologycyber defense effectiveness measurementdigital forensicsincident responsethreat detection methodologiespeople management
Soft skills
leadershipmentoringcoachingteam developmentcross-functional coordinationcommunicationperformance managementorganizational skillsstakeholder engagementguidance
Certifications
GCIHGCIAGCEDGCFRGNFAGCTIGCFACISSPCISMCCSP