Cyber Security Defense Manager - Incident Response
HybridLas Vegas, Nevada, United States
Job Summary
Oversee the full incident response lifecycle, including triage, investigation coordination, forensic analysis, and executive-level reporting. Drive continuous improvement of threat detection through SIEM tuning, EDR configuration, and behavioral analytics while leading the end-to-end transition of MSSP services to a new partner. Build and mentor a high-performing incident response team, conducting tabletop exercises and post-incident reviews to mature internal blue-team capabilities across endpoints, cloud, and identity environments. Serve as the primary point of contact for major incidents, briefing leadership, legal, and regulators while coordinating with IT, compliance, and external partners. Align program practices with NIST and ISO standards to ensure regulatory compliance and measurable maturity improvements.
Required Qualifications
- 10+ years of progressive cybersecurity experience
- 5+ years in incident response, digital forensics, or security operations leadership
- Proven experience leading cyber incident response teams
- Experience managing complex, high-impact incidents
- Demonstrated success in vendor/MSSP transitions or outsourcing handovers in a cybersecurity context
- Strong understanding of detection technologies (SIEM, EDR/XDR, SOAR, threat intelligence platforms)
- Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field
- Relevant certifications such as CISSP, CISM, GIAC GCFA/GCIH/GCTI, or similar
Desired Qualifications
- Master's degree
- Experience in a regulated industry (finance, healthcare, critical infrastructure, or gaming)
- Hands-on technical experience with tools such as Splunk, Elastic, CrowdStrike, Microsoft Defender, Sentinel, or similar
- Prior experience building or maturing an internal SOC/IR function while reducing MSSP dependency
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.