Senior Manager Incident Response & Threat Hunting

What You'll Be Doing:Incident Response Leadership

• Act as Incident Commander for cyber security incidents, coordinating technical response efforts from identification through recovery.
• Lead incident bridges and drive collaboration across security, IT, legal, privacy, HR, and executive stakeholders.
• Make critical containment and remediation decisions during active security events.
• Deliver clear executive-level communications and situation reports.
• Conduct post-incident reviews and drive continuous improvement initiatives.
• Perform and oversee forensic investigations across endpoints, cloud platforms, and email systems.

Team Leadership

• Lead, mentor, and support a small team of Incident Response and Threat Hunting professionals.
• Provide technical guidance, coaching, and career development support.
• Foster a collaborative, high-performance culture focused on operational excellence and continuous improvement.
• Help prioritize workloads, coordinate response activities, and ensure team readiness for emerging threats.

Threat Hunting

• Lead proactive, hypothesis-driven threat hunting activities across enterprise environments.
• Develop hunting methodologies based on threat intelligence and adversary tradecraft.
• Analyze telemetry from endpoint, identity, cloud, and SIEM platforms.
• Identify detection gaps and improve visibility across the environment.
• Convert hunt findings into scalable detection rules and operational procedures.
• Map hunting coverage against MITRE ATT&CK and emerging threat trends.

Detection & Security Engineering Support

• Partner with security engineering and platform teams to enhance detection capabilities.
• Contribute to tuning and optimization of security controls and monitoring solutions.
• Help strengthen incident response readiness through playbooks, tabletop exercises, and process improvements.
• Support regulatory and compliance requirements related to incident response and evidence preservation.