Incident Response Manager

Summary

Join Pondurance as the Manager, Incident Response and lead our Incident Response Consulting Team. You will mentor consultants, deliver exceptional service, and drive customer success in investigations, digital forensics, and security incident response. This role demands innovation and collaboration with internal and external stakeholders to ensure timely and effective incident response. You will manage team portfolios, collaborate with product and sales teams, maintain skills and knowledge, and manage customer stakeholders. The position requires expertise in incident investigation, threat mitigation, playbook maintenance, and tool development. You will also build relationships with law enforcement.

Requirements

• Minimum of 5 years experience in cyber security
• 1 or more years of experience leading information security and/or consulting teams
• Proven track record of complex problem solving and decision-making ability
• Expert level of analytical, planning and organizational ability
• Strong, proactive communication skills

Responsibilities

• Provide thought, technical, and general leadership to the IR Consulting Team and other stakeholders
• Assist with managing the team portfolio to defined metrics (utilization, revenue, margin etc.)
• Deliver services to customers by attending key meetings, performing quality assurance reviews of deliverables, and direct consultation with customers as needed
• Collaborate with the Product Management Team to define and evolve our book of service offerings
• Team with Sales as support on prospective client calls, project scoping and budgets
• Maintain individual and team skills and knowledge base on industry best practices, tools, tabletop exercise techniques, and scenario-based and live testing exercises
• Manage customer stakeholders and apply security incident investigative protocols from confirmation of the incident to resolution and capturing lessons learned
• Quickly mitigate damages by coordinating with technical teams and third-party vendors to triage and contain threats
• Maintain and update incident response playbooks and toolkits based on new procedures, best practices, advanced open-source technologies and various incident response products
• Design and deploy real time monitoring and triage of incidents and alerts received
• Identify and document requirements to improve, automate, and work with developers to build tools that drive out inefficiencies, ineffectiveness, and uncompromisingly improve the customer experience
• Build and foster relationships with local, state, federal and international law enforcement authorities

Preferred Qualifications

• Bachelor’s Degree with disciplines in the area of Computer Science, Management Information Systems, or Cyber Security or equivalent experience
• One or more of the following technical certifications: GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), GIAC Reverse Engineering Malware (GREM), MCFE, EnCE or equivalent certifications
• Windows OS and networking protocols
• Windows disk and memory forensics
• Unix OS and networking protocol
• Network traffic analysis
• Scripting and/or programming
• Experience with commercial EDR (SentinelOne, Blackberry PROTECT, CarbonBlack, CrowdStrike) and Forensic tool suites (FTK, AXIOM, EnCase)
• Reverse engineering and malware analysis

Benefits

• Medical, dental, vision, disability, FSA, HSA, life and AD&D insurance, 401(k) Plan
• PTO, sick, holiday, & parental leave
• Competitive compensation packages based on the market and your overall credentials
• Access to office locations: McLean, VA or Indianapolis, IN