Incident Management Specialist

Job summary

Lead and support cybersecurity incident management and response activities within a complex enterprise environment. Develop and enhance operational frameworks, security processes, and tools to improve the organization's overall security posture.

Job details

We are seeking an experienced Incident Management Specialist (Level 3) to join a growing Cyber Security team supporting a complex enterprise environment that includes both on-premises and cloud-based technologies. The successful candidate will contribute to the enhancement of the organization's overall security posture through the development, implementation, and operationalization of cybersecurity processes, frameworks, and incident response capabilities. The environment leverages Microsoft 365, Azure, enterprise networking technologies, and modern security platforms. About the Role The successful candidate will contribute to the enhancement of the organization's overall security posture through the development, implementation, and operationalization of cybersecurity processes, frameworks, and incident response capabilities, and will work within an environment that leverages Microsoft 365, Azure, enterprise networking technologies, and modern security platforms. Responsibilities Lead and support cybersecurity incident management and incident response activities. Develop and enhance incident response processes, procedures, tools, and operational frameworks. Analyze security incidents, threats, vulnerabilities, and emerging risks. Review and assess system security logs and produce incident analysis reports. Coordinate prevention, detection, response, and recovery activities related to cybersecurity incidents. Support cyber security projects focused on cloud adoption, security modernization, and implementation of industry best practices. Collaborate with technical teams to design, assess, and implement security solutions. Evaluate security technologies, tools, and services and provide recommendations based on operational, technical, and business requirements. Assist with the development of security policies, standards, training materials, and operational procedures. Contribute to continuous improvement initiatives aligned with Zero Trust principles and modern cybersecurity frameworks. Qualifications Minimum 10 years of experience as an Incident Management Specialist or in a related cybersecurity role. Valid Secret Security Clearance. One or more of the following certifications: CISSP CISM CISA CCSP CRISC SSCP CompTIA Security+ CompTIA CySA+ GIAC ISSEP ISSM PSABSA Foundation, Practitioner, or Master Certification Required Skills Strong experience with security incident management, threat analysis, and incident response. Experience working within large enterprise environments leveraging Microsoft cloud and on-premises technologies. Proven ability to assess, plan, design, and implement security solutions. Preferred Skills Experience with several of the following technologies is highly desirable: Microsoft Azure Microsoft 365 Azure DevOps Exchange Online SharePoint Online Microsoft Sentinel Microsoft Defender Windows Server environments SQL Server Cisco networking technologies VPN and firewall technologies Enterprise security monitoring and logging solutions Strong understanding of cloud security and hybrid environments. Experience supporting Security Operations Centre (SOC) functions. Knowledge of cybersecurity frameworks, standards, and best practices. Excellent analytical, communication, and stakeholder management skills. Ability to work independently in a fast-paced, complex environment.

What you’ll do

Lead and support cybersecurity incident management and response activities within a complex enterprise environment. Develop and enhance operational frameworks, security processes, and tools to improve the organization's overall security posture.

Requirements

Requires a minimum of 10 years of experience in incident management or cybersecurity and a valid Secret Security Clearance. Candidates must hold one or more professional certifications such as CISSP, CISM, or CompTIA Security+.

Listed skills

• Microsoft Azure · Preferred
• Incident Management · Preferred
• Microsoft 365 · Preferred
• Stakeholder Management · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Incident Management
• Threat Analysis
• Incident Response
• Microsoft Azure
• Microsoft 365
• Microsoft Sentinel
• Microsoft Defender
• Cloud Security
• Network Security
• Security Log Analysis
• Zero Trust
• Stakeholder Management
• Vulnerability Assessment
• SOC Operations
• Security Frameworks
• Enterprise Networking

Job areas

• Security & Safety
• Technology
• Consulting
• Software
• Government & Public Sector