incident manager

Cardinal Technology Systems

<div><h5 class="jobSectionHeader"><b>Responsibilities</b></h5>
<p>Cardinal Technology Systems Corp. is a government IT solutions provider servicing commercial and government initiative in various parts of the United States. We are currently seeking an Incident Manager I to work for our company.</p>
<h5 class="jobSectionHeader"><b>Summary</b></h5>
<ul><li><b>Must possess IT-I security clearance or have a current National Agency Check with Local Agency Check and Credit Check (NACLC).</b><b> (Basic Federal Clearance requirements are U.S. Citizenship, clear criminal history check, no recent or pending bankruptcies)</b></li><li>
Correlating incident data to identify specific trends in reported incidents.</li><li>
Recommending defense in depth principles and practices (i.e. Defense in Multiple Places, layered defenses, security robustness, etc.).</li><li>
Performing Computer Network Defense incident triage to include determining scope, urgency, and potential impact.</li><li>
Researching and compiling known resolution steps or workarounds to enable mitigation of potential Computer Network Defense incidents within the enterprise.</li><li>
Applying cybersecurity concepts to the detection and defense of intrusions into small, and large-scale IT networks, and conduct cursory analysis of log data.</li><li>
Monitoring external data sources to maintain currency of Computer Network Defense threat condition and determine which security issues may have an impact on the enterprise.</li><li>
Identifying the cause of an incident and recognizing the key elements to ask external entities when learning the background and potential infection vector of an incident.</li><li>
Receiving and analyzing network alerts from various sources within the enterprise and determine possible causes of such alerts.</li><li>
Tracking and documenting Computer Network Defense (CND) incidents from initial detection through final resolution, and work with other components within the organization to obtain and coordinate information pertaining to ongoing incidents.</li><li>
Providing support during assigned shifts.</li><li>
Assigned shift is to be determined.</li></ul>
<h5 class="jobSectionHeader"><b>Requirements</b></h5>
<ul><li><b>Must possess IT-I security clearance or have a current National Agency Check with Local Agency Check and Credit Check (NACLC). (Basic Federal Clearance requirements are U.S. Citizenship, clear criminal history check, no recent or pending bankruptcies)</b></li><li><b>
BS Incident Management, Operations Management, Cybersecurity or related degree. HS Diploma with 3 years of incident management or cyber security experience.</b></li><li><b>
Must have an active TS/SCI clearance.</b></li><li>
Must be able to obtain DHS Suitability.</li><li>
1+ years of directly relevant experience in cyber incident management or cybersecurity operations.</li><li>
Knowledge of incident response and handling methodologies.</li><li>
Having close familiarity with NIST 800-62 (latest revision), and FISMA standards as they pertain to reporting incidents.</li><li>
Knowledge of the NCCIC National Cyber Incident Scoring System to be able to prioritize triaging of incident.</li><li>
Knowledge of general attack stages (e.g., foot printing and scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks, etc.).</li><li>
Skill in recognizing and categorizing types of vulnerabilities and associated attacks.</li><li>
Knowledge of basic system administration and operating system hardening techniques, Computer Network Defense policies, procedures, and regulations.</li><li>
Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non-nation-state sponsored], and third generation [nation-state sponsored]) is preferred.</li><li>
Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return- oriented attacks, and malicious code) is preferred.</li></ul>
<h5 class="jobSectionHeader"><b>Preferences</b></h5>
<ul><li><b>Desired Certifications:</b> GCIH, GCFA GISP, GCED, CCFP or CISSP</li><li>
Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non-nation-state sponsored], and third generation [nation-state sponsored])</li><li>
Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return- oriented attacks, and malicious code)</li></ul>
<h5 class="jobSectionHeader"><b>Benefits</b></h5>
<ul><li>Medical, Dental, Vision Benefits</li><li>Paid Life</li><li>Paid Vacation, Holidays, Sick Leave, Floating Holidays, Bereavement Leave</li><li>Semi-monthly pay cycle</li></ul>
<h5 class="jobSectionHeader"><b>Work With Us</b></h5>
<p>Cardinal Technology Systems, Corp (&ldquo;CTech-Sys&rdquo;), www.ctech-sys.com, is an SBA Certified 8(a) and HUBZone company located in the National Capital Region (NCR) and serves both government and commercial clients such clients as US CBP, US CIS, DLA, DFuse Technologies, and American Environmental Engineering Consultants.</p>
<p>Cardinal Technology Systems, Corp is an Equal Employment Opportunity employer and it's our policy to consider applicants for employment without regard to sex, race, color, creed, religion, national origin, sexual orientation, marital status, age, disability, veteran status, alienage, ancestry, or any other factors prohibited by law. Employment selections are based on company and client requirements and the qualifications and skills of the candidate. CTech-Sys is committed to actively capitalizing on the diversity of skills, talents and perspectives of our employees.</p></div>

Incident Manager I

البنك التجاري الدولي

<div></div><div><div>Description<div></div><p><br>
JOB PURPOSE</p>
<p>
To oversee and manage the Security Operations Center (SOC) related activities including, threat monitoring, triage and response to develop detailed root cause analysis and escalate for emergency response as per the approved process.</p><br>
<p>
</p><p>Description</p>
<p>
Security Incident Response Management</p>
<p>
1. Provide management oversight for the identification, triage and response of events or incidents of apparent security breaches to maintain the security posture.
</p><p>2. Conduct Security event analysis reporting on activities through regular scheduled reporting and communications in order to highlight the main incidents and events.
</p><p>3. Identify and handle incidents, which need special attention or escalation to secure the overall bank&rsquo;s security and mitigate potential risks.
</p><p>4. Direct the creation and maintenance of incident response run books of the Analysts team run-books.</p>
<p>
5. Act as a lead throughout incident scenarios and provide subject matter expertise in cybersecurity incident response to facilitate the investigation and root cause analysis.</p>
<p>
6. Ensure proper reporting for daily, monthly, quarterly and annual security posture, SOC and executive reporting and dashboards.</p>
<p>
7. Recommend security solutions based on security postures and gaps identified.</p>
<p>
8. Manage communication with other departments to facilitate investigation process.</p>
<p>
9. Develop and update SLA between SOC and other departments when required and maintain SLA.</p>
<p>
Strategy</p>
<p>
10. Participate in the formulation and implementation of the Security Operations Center Department strategy to ensure the alignment with CIB strategy</p>
<p>
Policies, Processes and Procedures</p>
<p>
11. Participate and recommend improvements to policies, processes and procedures and manage their implementation to ensure all relevant procedural/legislative requirements are carried out.</p>
<p>
Day-to-day Management</p>
<p>
12. Supervise the day to day operations of the Incident Management &amp; Response team providing some guidance in the related area, encouraging teamwork and facilitating related professional work processes in order to achieve high performance standards</p>
<p>
Supervision</p>
<p>
13. Supervise the activities and work of subordinates to ensure that all work within a specific area is carried out in an efficient manner and in compliance with the set policies, processes and procedures</p>
<p>
Compliance</p>
<p>
14. Ensure compliance with all relevant CBE regulations, banking laws, AML regulations and internal CIB policies and code of conduct in order to maintain CIB&rsquo;s sound legal position and mitigate any potential risks</p><div><br>
</div></div><div>
Qualifications<div></div><p><br>
Qualifications &amp; Experience</p>
<ul><li> Bachelor&rsquo;s degree of Engineering, Computer Science or equivalent</li></ul>
<ul><li> Minimum 8 - 10 years of experience in IT Security or related fields</li></ul>
<ul><li> Strong understanding of incident handling procedures
</li></ul><ul><li> Experience with packet and log analysis using commercial and open source tools</li></ul>
<ul><li> Recommended Certifications:</li></ul>
<p>
o Certified Information Systems Security Professional (CISSP)</p>
<p>
o Certified Information Security Manager (CISM)</p>
<ul><li> Mandatory Certification:</li></ul>
<p>
o GIAC Certified Incident Handling (GCIH)</p><br>
<p></p>
<p>
Skills</p>
<ul><li> Very good command of English and Arabic language</li></ul>
<ul><li> Very good Analytical skills</li></ul>
<ul><li> Very good Communication skills</li></ul>
<p>
Very good MS Office skills<br>
</p><div>
</div></div><div>Primary Location: Egypt-Giza-SMART VILLAGE BLDG. 2</div><div>
Job: Back Office</div><div>
Organization: FINANCE, STRATEGY, OPERATIONS &amp; TECHNOLOGY</div><div>
Shift: Day Job</div><div>
Job Type: Full-time Employee</div></div>

SECURITY INCIDENT RESPONSE MANAGER

Global Enterprise Services, LLC

<p></p><div><p>GES was awarded U.S. Air Force Cloud One Architecture and Common Shared Services contract and is currently seeking an Incident and Problem Manager supporting AWS, Azure, Google, and Oracle clouds. This is an exciting opportunity to use your experience help modernize a leading, global-scale multi-cloud environment in support of a critical mission, supporting USAF system resiliency, security, and cost effectiveness.</p><p></p><p><b><br>
Location:</b></p><p><b>
These positions will be remote</b></p><p></p><p><b><br>
Primary Responsibilities Could Include:</b></p><ul><li>Lead day-to-day Incident Management activities, ensuring rapid restoration of service and adherence to agreed SLAs</li><li>Provide command and control of Major Incidents, chairing technical bridge calls, coordinating SMEs and directing resolution activities</li><li>Maintain accurate, high-quality incident records, outage documentation and communications to support availability reporting and stakeholder awareness</li><li>Manage the full Problem Management lifecycle, including root cause analysis, Known Errors, workarounds and preventative actions</li><li>Drive trend analysis and produce high-quality reports with insights and recommendations for technical and executive audiences</li><li>Support Post Incident Reviews and continual improvement initiatives, uplifting SOPs, workflows and ITIL-aligned processes</li><li>Collaborate closely with technical and service teams to improve help desk capability, knowledge sharing and operational resilience</li></ul><p></p><p><b><br>
Technical Leadership</b></p><ul><li>Proven experience in Incident and/or Problem Management within complex, high-availability ICT environments</li><li>Strong working knowledge of ITIL frameworks across Incident, Problem, Change, Request and Knowledge Management</li><li>Ability to operate effectively under pressure, managing competing priorities while maintaining clear, high-quality communication</li><li>Strong analytical capability, with experience interpreting operational data and providing actionable insights to leadership</li><li>Demonstrated ability to champion, develop and uplift ITIL process maturity, including training and coaching operational teams</li><li>Confident stakeholder engagement skills, with experience working across senior leaders, technical SMEs and vendors; ITIL v4 certification, ITSM tools (e.g. ServiceNow, JIRA) and Defence or secure environment experience highly regarded</li></ul><p></p><p><b><br>
Minimum Qualifications</b></p><ul><li>Bachelor's and five (5) years or more of experience; master's and three (3) years or more of experience. Additional experience may be accepted in lieu of degree.</li><li>Interim Secret clearance required to start; Ability to obtain Secret clearance required to maintain employment</li><li><b>US citizenship required</b></li><li><b> Certifications: CompTIA Security+ or equivalent (IAT-2)</b></li></ul><p></p><p><b><br>
Preferred Qualifications</b></p><ul><li>Experience with USAF Cloud One or Platform 1</li><li>Experience with Knowledge Management</li><li>ITIL Certification</li></ul></div>

ITSM Incident and Problem Manager

Microland

<div><div><div><div><div><p><b>Job Description</b></p>:</div><div><div><b>
Education Qualification :
</b><br>
Engineer - B.E / B.Tech / MCA<br>
<br>
<b>Skills :</b><br>
Primary -&gt; Functional | IT Operations Management | Current, Up to date Operational Documentation Library (ODL) | 4 - Advanced
<br>
Tertiary -&gt; Behavioral | Microland Skills | Execution Excellence | 4 - Advanced
<br>
Tertiary -&gt; Behavioral | Aptitude | Tasks Related Skills | 4 - Advanced
<br>
<br>
<b>Certification :</b><br>
Technology | IT Service Management Certifications | ITIL Intermediate Certificate<br>
<br>
This role will require interaction with a variety of IT teams and a demonstrable ability to influence individuals and teams is critical. In addition to working with IT teams the incident management team is also responsible for liaising with users to ensure they are updated regarding the status of their incidents. It is therefore essential that the successful candidate is highly customer focused and exhibits an ability to effectively communicate with customers and across all levels of IT management.<br>
<br>
This role will also cover areas including, but not restricted to, the following.<br>
<ul><li>Aiding Service Management team on major issues</li><li>Driving the efficiency and effectiveness of the incident management process.</li><li>Monitoring the effectiveness of incident management and making recommendations for improvement.</li><li>Ensure timely submission of weekly/monthly productivity reports and Dashboards and have discussion with SO and SDM on regular intervals</li><li>Responsible for meeting targets of KPIs and SLAs</li><li>Ensure 100% compliance to defined Operations Management support Process especially Root Cause Analysis, Proactive communication with customer, Closure of any open-ended issues Identify Defect Areas and proactively carry out corrective actions</li><li>Providing information (input) to the Problem Manager</li><li>Client communications</li><li>Providing a point of escalation for user issues</li><li>Demonstrating and increasing the value proposition of the incident management team and IT operations.</li><li>Manage a team of 6 to 8 members and its associated activities</li></ul><br>
Technical Skills<br>
<ul><li>Experience in IT enabled services &ndash;IT Service Desk, IT Help Desk (Preferably phone support interacting with foreign clients/users)</li><li>Good knowledge of ITIL service management processes</li><li>ITIL Certified (Mandatory)</li><li>Experience of managing a team of 4 to 10 people</li><li>Should have independently driven major incidents (P1 and P2)</li><li>Worked in Incident, Problem and Change Management teams</li><li>Good Verbal and written communication</li></ul></div></div></div></div></div><div><div><div><div><p><b>
Location</b></p>:</div><div><p>
Saudi Arabia - Jeddah</p></div></div></div></div><div><div><div><div><p><b>
Created On</b></p>:</div><div><p>
25-Mar-2026</p></div></div></div></div></div><div></div>

Associate Lead - Service Management (SM4)

Vontier

<div><p><b>INTRODUCTION and WHAT YOU WILL DO (Job Responsibilities)</b></p><p>
The Applications Support Manager for MDBS will lead the support, maintenance, and continuous improvement of MDBS &mdash; the sales and franchise operations application used by Matco franchisees. This role is responsible for ensuring high availability, excellent user experience, timely incident resolution, effective change management, and close collaboration with product, development, and franchise stakeholders to maximize system reliability and business value.</p><p><b>
This is an </b><b>on-site</b><b> role located in Stow, Ohio.</b></p><p><b>
Key responsibilities</b></p><ul><li>
Lead and manage the day-to-day application support team that provides Tier 1&ndash;3 support for MDBS used by Matco franchise owners, technicians, and franchise operations staff.</li><li>
Serve as primary escalation point for critical incidents affecting franchise sales, ordering, pricing, commissions, and reporting; coordinate incident response and communicate status to stakeholders.</li><li>
Track, prioritize, and oversee resolution of support tickets and defects using the ticketing system; ensure SLA and KPI targets are met.</li><li>
Own operational procedures for deployment, maintenance windows, backups, monitoring, and rollback for MDBS updates.</li><li>
Collaborate with product managers, business analysts, and franchise operations to translate business requirements into supportable changes and to validate fixes.</li><li>
Manage integrations between MDBS and third-party systems (POS, ERP, payment processors, inventory systems) and work with integration partners to resolve issues.</li><li>
Establish and maintain runbooks, knowledge base articles, troubleshooting guides, and training materials geared to franchise users and support staff.</li><li>
Implement and maintain monitoring, alerting, and observability around MDBS application health, performance, and usage trends.</li><li>
Drive continuous improvement initiatives to reduce incident volume, mean time to resolution (MTTR), and recurring defects.</li><li>
Plan and manage on-call rotations, after-hours support, and incident postmortems; drive remediation and prevention actions.</li><li>
Manage vendor relationships for SaaS components, hosting, or third-party modules used by MDBS; evaluate vendor performance and escalations.</li><li>
Hire, coach, and develop support team members; conduct performance reviews and set team goals.</li><li>
Ensure compliance with relevant data security, privacy, and franchise contractual obligations.</li><li>
Provide regular reporting and dashboards to senior leadership on system health, ticket trends, release readiness, and improvement initiatives.</li></ul><p><b>
WHO YOU ARE (Qualifications)</b></p><p><b>
Required qualifications and experience</b></p><ul><li>
8+ years of experience in applications support, application management, or technical operations, including at least 5 years in a people-leadership role.</li><li>
Hands-on experience supporting business-critical sales or franchise management systems, ideally in retail, distribution, or franchise networks.</li><li>
Solid understanding of application architectures, integrations (APIs, ETL), databases (SQL), and web/mobile application support.</li><li>
Experience with incident management, change control, release management, and ITIL or similar operational frameworks.</li><li>
Proven ability to lead cross-functional incident response and communicate effectively with technical and non-technical stakeholders, including franchise owners.</li><li>
Strong analytical and problem-solving skills; ability to triage complex issues under pressure.</li><li>
Experience with monitoring and observability tools (e.g., New Relic, Datadog, Splunk) and ticketing/ITSM tools (e.g., Jira Service Management, ServiceNow).</li><li>
Excellent customer service orientation, with demonstrated ability to build trust with franchise partners and internal stakeholders.</li><li>
Bachelor&rsquo;s degree in Computer Science, Information Systems, or related field, or equivalent experience.</li></ul><p><b>
Desired skills and certifications</b></p><ul><li>
Experience with POS, order management, or commission/compensation systems.</li><li>
Familiarity with cloud hosting platforms (AWS, Azure) and CI/CD pipelines.</li><li>
Knowledge of data privacy, PCI compliance, or franchise contractual requirements.</li><li>
Certifications: ITIL Foundation, PMP or equivalent, SQL certifications, relevant vendor certifications.</li></ul><p><b>
Key performance indicators (KPIs)</b></p><ul><li>
Mean time to acknowledge and resolve incidents (MTTR).</li><li>
Percentage of incidents resolved within SLA.</li><li>
First-contact resolution rate for Tier 1 support.</li><li>
Number of recurring issues reduced per quarter.</li><li>
System uptime/availability for MDBS (target agreed with stakeholders).</li><li>
Customer satisfaction score (CSAT) from franchisee support interactions.</li><li>
Time to deploy critical fixes and quality of post-release metrics.</li></ul><p><b>
Working environment and expectations</b></p><ul><li>
Role may require occasional after-hours support and on-call rotation to handle critical incidents impacting franchise sales.</li><li>
Frequent stakeholder communication with franchise operations, product teams, and external vendors.</li><li>
Willingness to travel to regional franchise offices or meetings as needed.</li></ul><p><b>
Success profile &mdash; what success looks like in 6&ndash;12 months</b></p><ul><li>
Stabilized incident trend with a measurable reduction in repeat incidents and improved MTTR.</li><li>
Clear runbooks, knowledge base, and onboarding materials in place for franchisees and new support hires.</li><li>
Reliable monitoring and alerting configured that detect issues before they affect franchise sales.</li><li>
Strong relationships with franchise stakeholders and a predictable release/change process that minimizes disruption.</li></ul><p>
#LI-LP1#LI-Hybrid #LI-Onsite #findyourpath #fuelyourpassion</p><p>
Vontier partners with you and your family on your health and wellness journey. Visit VontierBenefits.com to view our benefits. We offer a premium suite of health and wellness programs for you and your family, including medical, dental, vision, disability and life insurance. With programs for family planning from Maven Clinic to managing diabetes like Livongo, coverage for women's health, support for adult and elder care, paid parental leave, a generous 401(k) plan with matching company contributions, and more. Vontier is here for all stages of life. We also offer paid time off up to 120 hours, 13 paid holidays (including 3 floating holidays) per year and paid sick leave.*</p><p><b>
Disclaimer:</b> The salary, other compensation, and benefits information is accurate as of the date of this posting. Sick leave amount may vary based on state or local laws applicable to the applicant&rsquo;s geographic location. The Company reserves the right to modify this information at any time, subject to applicable law.</p><p><b>
WHO IS MATCO</b><br>
Matco Tools, a wholly owned subsidiary of Vontier Corporation, is a distributor of quality professional automotive equipment, tools, and toolboxes. Matco began operation in 1946 and, since 1979, has sold products directly to professional mechanics, enthusiasts, and those who value quality tools through a network of independent franchised mobile distributors who operate in all 50 states, Puerto Rico, and Canada. Products are also sold to central purchasing operations and other institutional customers through industrial sales representatives and via the internet. Matco is a franchising company, a distribution company, a financing company, a manufacturer of industry leading toolboxes, and a leading supplier of automotive technology solutions employing approximately 600 associates in the United States, Puerto Rico and Canada. For more information on Matco Tools, visit www.matcotools.com.<br>
<br>
<b>BENEFITS</b><br>
Annual bonuses/incentives (depending on position)<br>
Immediate company benefits (medical, dental, vision, life, etc.)<br>
401k with company match<br>
401k defined contribution after 1 year of service<br>
High level of employee engagement<br>
Walking path and gym equipment onsite<br>
Food trucks on site during the summer<br>
Dress for your day - every day casual/jeans<br>
Employee discounts<br>
15 days vacation + 4 floating holidays + 8 paid holidays<br>
Paid maternity &amp; paternity leave<br>
Tuition reimbursement<br>
Student loan payment assistance<br>
Hybrid work environment (2 days remote)<br>
Annual Day of Caring for employees to volunteer<br>
Discounts on tools<br>
Annual team building events</p><p><b>
WHO IS VONTIER</b><br>
Vontier (NYSE: VNT) is a global technology company powering the way the world moves. We empower businesses in the transport sector to adapt to a fast-changing landscape by uniting productivity, automation and multi-energy technologies.</p><p>
Our smart, connected solutions serve roadside convenience retail stores, fleet operators, and auto repair technicians. From integrated payments and EV charging software to carwash technology and retail automation, we help customers stay productive and prepared for a rapidly evolving industry.<br>
<br>
With decades of expertise and a balanced portfolio, Vontier enables businesses to navigate complexity, unlock growth, and build a cleaner, safer future. Driven by continuous improvement and the dedication of Team Vontier, we empower businesses to think bigger, act boldly, and thrive on the road ahead. Learn more at www.vontier.com<br>
<br>
<b>At Vontier, we empower you to steer your career in the direction of success with a dynamic, innovative, and inclusive environment.</b><br>
<br>
Our commitment to personal growth, work-life balance, and collaboration fuels a culture where your contributions drive meaningful change. We provide the roadmap for continuous learning, allowing creativity to flourish and ideas to accelerate into impactful solutions that contribute to a sustainable future.<br>
<br>
Join our community of passionate people working together to navigate challenges and seize new opportunities. At Vontier, you are not on this journey alone, we are committed to equipping you with the tools and support you need to fuel your innovation, lead with impact, and thrive both personally and professionally.<br>
<br>
<b>Together, let&rsquo;s power the way the world moves!</b></p>
&quot;Vontier companies are equal employment employers and evaluate qualified applicants without regard to race, color, national origin, religion, ancestry, sex (including pregnancy, childbirth and related medical conditions), age, marital status, sexual orientation, gender identity or expression, and other characteristics protected by law.&quot;</div>

Applications Support Manager

Capgemini

<div>
 <strong>
  About Capgemini
  <br/>
  <br/>
 </strong>
 Capgemini is a global leader in partnering with companies to transform and manage their business by harnessing the power of technology. The Group is guided everyday by its purpose of unleashing human energy through technology for an inclusive and sustainable future. It is a responsible and diverse organization of 350,000 team members in more than 50 countries. With its strong 55-year heritage and deep industry expertise, Capgemini is trusted by its clients to address the entire breadth of their business needs, from strategy and design to operations, fueled by the fast evolving and innovative world of cloud, data, AI, connectivity, software, digital engineering and platforms. The Group reported in 2022 global revenues of &euro;22 billion.
 <br/>
 <br/>
 <strong>
  Role Description
  <br/>
  <br/>
 </strong>
 Our Cyber Defense Unit is expanding, and we are looking for a talented Security Analyst to join our Incident Management &amp; Response (IMR) team. You will lead the lifecycle of major cybersecurity incidents, from identification through containment, eradication, and recovery, while coordinating with technical teams and executive stakeholders to ensure a timely and effective response.
 <br/>
 <br/>
 <strong>
  Key Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Lead and coordinate end-to-end cybersecurity incident response activities, ensuring incidents are fully resolved and lessons learned are documented.
  </li>
  <li>
   Manage escalations from L1 and L2 SOC analysts and CISO teams, including complex or specialist investigations.
  </li>
  <li>
   Act as the primary point of contact for Group-level cyber incidents, collaborating closely with both analyst teams and executive stakeholders.
  </li>
  <li>
   Deliver clear, concise status updates for stakeholders at all levels.
  </li>
  <li>
   Prepare comprehensive incident reports tailored to both technical and non-technical audiences.
  </li>
  <li>
   Interpret and present technical cybersecurity subjects to executives.
  </li>
  <li>
   Conduct in-depth technical investigations using SIEM, HIPS/NIPS, EDR/AV, UBEA, and other monitoring tools.
  </li>
  <li>
   Perform threat and vulnerability analysis and provide advisory services to CISO teams and internal stakeholders.
  </li>
  <li>
   Provide oversight for specialized investigations such as digital forensics and investigative interviews, ensuring alignment with standards and legislation.
  </li>
  <li>
   Define, improve, and support incident response processes, playbooks, and methodologies.
  </li>
  <li>
   Contribute to audit support and maintain documentation.
  </li>
  <li>
   Provide regular metrics, reports, and trend analysis across weekly and monthly cycles.
  </li>
  <li>
   Analyze and improve the effectiveness of existing use cases.
  </li>
  <li>
   Develop and deliver documentation, knowledge articles, and visual materials.
  </li>
  <li>
   Support lessons learned sessions and contribute to improving the Cyber Defense Unit&rsquo;s maturity.
  </li>
  <li>
   Stay current on emerging threats, technologies, and regulatory changes.
  </li>
  <li>
   you may participate in: User awareness campaigns, Phishing simulations, Vulnerability management, Cyber-scenario exercises, Security assurance activities
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Experience &amp; Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   3+ years in Information Security or related fields.
  </li>
  <li>
   Incident management certifications such as CCIM, GCIH.
  </li>
  <li>
   Technical certifications such as GCFA, CHFI, CFCE.
  </li>
  <li>
   Vendor certifications such as CrowdStrike Falcon Responder, Splunk Cybersecurity Defense Analyst, EnCE.
  </li>
  <li>
   Experience with ITIL frameworks.
  </li>
  <li>
   Technical background in computing, networks, or programming.
  </li>
  <li>
   Familiarity with risk and control frameworks (e.g., NIST IR lifecycle, Cyber Kill Chain).
  </li>
  <li>
   Industry-recognized certifications such as CISSP or CISM.
  </li>
  <li>
   Proven experience handling cybersecurity incidents and risk management.
  </li>
  <li>
   Strong written and verbal communication skills in English.
  </li>
  <li>
   Experience in digital forensics, threat hunting, or enterprise‑scale incident response.
  </li>
  <li>
   Ability to manage multiple priorities in fast‑paced environments.
  </li>
  <li>
   Hands-on experience with SOC monitoring and intrusion detection tools (e.g., CrowdStrike, Splunk ES, VirusTotal Enterprise).
  </li>
  <li>
   Broad understanding of the cybersecurity threat landscape.
  </li>
  <li>
   Solid grasp of IT and security methodologies and technologies.
   <br/>
   <br/>
  </li>
 </ul>
 Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you&rsquo;d like, where you&rsquo;ll be supported and inspired by a collaborative community of colleagues around the world, and where you&rsquo;ll be able to reimagine what&rsquo;s possible. Join us and help the world&rsquo;s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.
 <br/>
 <br/>
 Get the future you want | www.capgemini.com
</div>


SOC IMR Analyst

Apple

<p>Do you have a passion for keeping critical services running smoothly and a talent for bringing people together to solve problems? Are you a highly motivated and experienced operations professional with a strong desire to improve processes, drive accountability, and create clarity in complex environments? Join Apple's General and Administrative (G&amp;A) Solutions Engineering team as a Support Engineer and play a vital role in ensuring the reliability and operational excellence of our global, mission-critical services.<br>
<br>
<b>Description</b><br>
<br>
As a Support Engineer, you'll be at the heart of our operational rhythm - coordinating across teams, owning incident management processes, and ensuring nothing falls through the cracks. You will collaborate with Service Owners, Business Partners, and Support teams to proactively identify service gaps, lead post-incident reviews, and drive continuous improvement initiatives. Your ability to communicate clearly, stay calm under pressure, and follow through on commitments will directly impact the experience of teams and customers who depend on our services every day.<br>
<br>
&quot;,&quot;responsibilities&quot;:&quot;Monitor service health and track open incidents, ensuring timely escalation, clear ownership, and consistent follow-through to resolution<br>
<br>
Lead and facilitate Post-Incident Reviews (PIRs), ensuring root causes are identified, action items are assigned, and lessons learned are documented and shared<br>
<br>
Act as a coordination hub during major incidents - keeping stakeholders informed, aligning response teams, and driving communication with a sense of urgency<br>
<br>
Identify recurring patterns in incidents and service disruptions, and champion process improvements to prevent repeat occurrences<br>
<br>
Create, maintain, and continuously improve operational documentation including run-books, escalation procedures, on-call guides, and standard operating procedures (SOPs)<br>
<br>
Participate in 24/7 on-call rotation, providing support coverage for critical services and serving as a point of contact for incident coordination during off-hours<br>
<br>
Streamline operational workflows by identifying manual, repetitive activities and working with teams to build more efficient, scalable processes<br>
<br>
Track and report on key service metrics and operational KPIs, sharing insights with stakeholders to drive informed decision-making<br>
<br>
Collaborate closely with engineering and business teams to ensure operational readiness for new services and changes, incorporating best practices for support and incident response<br>
<br>
Foster a culture of continuous learning, knowledge sharing, and operational discipline across the team<br>
<br>
<b>Preferred Qualifications</b><br>
<br>
Familiarity with ITIL frameworks and incident management best practices.<br>
<br>
Experience working with service management platforms such as ServiceNow or similar tools<br>
<br>
Exposure to monitoring and alerting concepts - ability to read dashboards and understand service health indicators (no coding required)<br>
<br>
Experience facilitating Post-Incident Reviews or retrospectives and driving action item completion<br>
<br>
Familiarity with project tracking tools (e.g., Jira, Wrike, Quip)<br>
<br>
Experience working in cross-functional teams across engineering, operations, and business stakeholders<br>
<br>
<b>Minimum Qualifications</b><br>
<br>
2+ years of experience in a service operations, IT support coordination, or project management role supporting enterprise-level services<br>
<br>
Demonstrated experience managing or coordinating incident response processes in a fast-paced environment<br>
<br>
Experience creating and maintaining operational documentation such as run-books, SOPs, or process guides<br>
<br>
Bachelor's degree in Business, Information Systems or work related experience<br>
<br>
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant .<br>
<br>
<b>Pay &amp; Benefits</b><br>
<br>
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $89,000 and $133,600, and your base pay will depend on your skills, qualifications, experience, and location.<br>
<br>
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits.<br>
<br>
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.</p>

Support Engineer, G&A Solutions Engineering (GSE)

Search 10000+ Incident manager jobs near you this April. New roles added regularly across leading industries. Apply today.