incident response manager

Forcepoint

<div><div>Who is Forcepoint?</div><div></div><div>
Forcepoint simplifies security for global businesses and governments. Forcepoint&rsquo;s all-in-one, truly cloud-native platform makes it easy to adopt Zero Trust and prevent the theft or loss of sensitive data and intellectual property no matter where people are working. 20+ years in business. 2.7k employees. 150 countries. 11k+ customers. 300+ patents. If our mission excites you, you&rsquo;re in the right place; we want you to bring your own energy to help us create a safer world. All we&rsquo;re missing is you!</div><div></div><div>
The Escalation Manager is a high-impact individual contributor role responsible for leading the end-to-end response to high-severity, business-critical incidents across Forcepoint&rsquo;s global environments. Operating within a regional model, the Escalation Manager ensures structured triage, cross-functional coordination, and clear stakeholder communication to minimize disruption.</div><div></div><div>
As the single point of accountability during major incidents, the Escalation Manager drives swift resolution, reduces time to resolution (TTR), improves service continuity, and enhances customer satisfaction. The role also identifies patterns to prevent recurrence and continuously strengthens incident response processes.</div><div></div><div>
Primary Responsibilities:</div><div></div><div>
Working Hours:</div><div>
Due to the nature of the role, coverage during US business hours (Central Time) is required, with flexibility to extend during high‑priority escalations to support real‑time collaboration and customer engagement.</div><div></div><div>
Incident Ownership &amp; Management</div><ul><li><div>
Take ownership of incoming critical incidents and critical customer incidents.</div></li><li><div>
Lead incident triage calls to define severity, success criteria, RACI, and exit conditions.</div></li><li><div>
Prioritise and manage incidents from initiation through resolution, coordinating appropriate internal resources and ensuring SLA adherence.</div></li><li><div>
Allocate and manage internal resources effectively, ensuring that the appropriate stakeholders and expertise along with tools are available to resolve incidents efficiently.</div></li><li><div>
Provide technical and operational oversight, escalating to Engineering/Product Management/Professional Services or any other teams where deeper investigation is required.</div></li></ul><div></div><div>
Communication &amp; Stakeholder Management</div><ul><li><div>
Act as the central point of contact during incidents, ensuring timely, accurate, and audience-appropriate communication to internal stakeholders, customers, and executives.</div></li><li><div>
Provide real-time updates on status, mitigation actions, and ETAs through various communication channels (Salesforce, Teams, Incident Bridges, Email summaries).</div></li><li><div>
Prepare and deliver post-incident executive summaries for senior leadership, translating technical impact into business terms.</div></li></ul><div></div><div>
Root Cause &amp; Operational Excellence</div><ul><li><div>
Drive root cause analysis (RCA) efforts with engineering and support teams.</div></li><li><div>
Identify recurring patterns and feed insights into operational improvements.</div></li></ul><ul><li><div>
Monitor key metrics (e.g. TTR, FDR, CSAT, NPS) and lead initiatives to improve time to resolution and customer experience.</div></li><li><div>
Maintain clean and complete data hygiene in incident records, ticketing systems, and incident dashboards.</div></li><li><div>
Identify areas for process improvement, automation, and tooling enhancements to streamline incident workflows.</div></li></ul><div></div><div>
Executive Communications &amp; Cross-Functional Collaboration</div><ul><li> Prepare and deliver executive summaries to C-level stakeholders in a clear and concise manner, translating complex technical details into layman's terms to ensure they are easily understood by non-technical executives. Partner with Engineering, Product Management, Onboarding, Enablement, Professional Services, and customer success teams during incident resolution and incident handling.</li></ul><ul><li><div>
Contribute to runbooks, readiness drills, and regional incident preparedness planning with other Escalation Managers across regions.</div></li><li><div>
Gather feedback from customer incidents prioritised to help inform product roadmaps and reliability initiatives.</div></li></ul><div>
Requirements:</div><ul><li><div>
5+ years in technical support, with 3+ years in SaaS customer support and Incident management (networking domain preferred).</div></li><li><div>
Strong knowledge of networking and security (TCP/IP, routing, VPNs, firewalls).</div></li><li><div>
Proven collaboration and customer experience improvement skills.</div></li><li><div>
Excellent communication, presentation, and stakeholder management.</div></li><li><div>
Proficient in Salesforce, MS Office, and reporting tools.</div></li><li><div>
Fluent in English; relevant certifications (e.g., CCNA, CCNP, ITIL) are a plus.</div></li><li><div>
Comfortable in dynamic, fast-paced environments with cross-functional complexity.</div></li></ul><div></div><div>
Preferred Skills:</div><ul><li><div>
Knowledge of cloud security, endpoint protection, and enterprise security frameworks.</div></li><li><div>
Familiarity with scripting languages (Python, PowerShell) and automation in support environments.</div></li><li><div>
Industry certifications such as CISSP, CISM, ITIL, or PMP are a plus.</div></li></ul><div>
Why Join Us?</div><ul><li><div>
Be part of a leading cybersecurity organization committed to protecting critical business data.</div></li><li><div>
Lead and develop a world-class technical support team with cutting-edge technologies.</div></li><li><div>
Competitive salary, benefits, and career growth opportunities in a dynamic industry.</div></li></ul><div>
If you are a seasoned leader with a passion for cybersecurity and technical support, we encourage you to apply!</div><div></div><div><i>
Don&rsquo;t meet every single qualification? Studies show people are hesitant to apply if they don&rsquo;t meet all requirements listed in a job posting. Forcepoint is focused on building an inclusive and diverse workplace &ndash; so if there is something slightly different about your previous experience, but it otherwise aligns and you&rsquo;re excited about this role, we encourage you to apply. You could be a great candidate for this or other roles on our team.</i></div><div></div><div><i>
The policy of Forcepoint is to provide equal employment opportunities to all applicants and employees without regard to race, color, creed, religion, sex, sexual orientation, gender identity, marital status, citizenship status, age, national origin, ancestry, disability, veteran status, or any other legally protected status and to affirmatively seek to advance the principles of equal employment opportunity.</i></div><div></div><div><i>
Forcepoint is committed to being an Equal Opportunity Employer and offers opportunities to all job seekers, including job seekers with disabilities. If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to use or access the Company&rsquo;s career webpage as a result of your disability. You may request reasonable accommodations by sending an email to </i><div><i>recruiting@forcepoint.com</i></div><i>.</i></div><div></div><div><i>
Applicants must have the right to work in the location to which you have applied.</i></div></div>

Escalation Manager

Hope Global School

<div><h3 class="jobSectionHeader"><b>Job Description</b></h3>
<div><p>Manager, SOC / NOC Services leads security and network operations teams, ensuring continuous monitoring, threat detection, incident response, system performance, and infrastructure availability while maintaining compliance, cybersecurity standards, and service excellence.</p>
</div>
<h3 class="jobSectionHeader"><b>Key Responsibilities</b></h3>
<ul><li>Lead SOC and NOC operational monitoring teams</li>
<li>Ensure continuous network performance and availability management</li>
<li>Oversee cybersecurity incident detection and response processes</li>
<li>Develop service level agreements and performance metrics</li>
<li>Coordinate escalation procedures during critical system outages</li>
<li>Implement security tools and network monitoring solutions</li>
<li>Prepare operational reports for executive leadership review</li>
<li>Maintain compliance with cybersecurity policies and regulations.</li>
</ul><h3 class="jobSectionHeader"><b>Skill &amp; Experience</b></h3>
<ul><li>Strong knowledge of cybersecurity and network infrastructure</li>
<li>Expertise in SIEM tools and monitoring platforms</li>
<li>Ability to manage high pressure incidents effectively</li>
<li>Excellent leadership and team management capabilities</li>
<li>Strong analytical and problem solving abilities</li>
<li>Effective communication with technical and business stakeholders.</li>
</ul>
<p><b>Note:</b> Salary depends on experience and skills and is paid in local currency.</p></div>
<br><div></div><div><ul><li><div><div>Date Posted</div>
<div>February 11, 2026</div>
</div></li><div></div><li><div><div>Location</div>
<div><div>Kuwait City, Kuwait
</div></div></div></li><div></div><li><div><div>Offered Salary:</div>
 <div>18800 - 27500 / year</div>
</div></li><div></div><li><div><div>Expiration date</div>
<div>August 8, 2028
</div></div></li><div></div><li><div><div>Experience</div>
<div>2 Year
</div></div></li><div></div><li><div><div>Gender</div>
<div>Both
</div></div></li><div></div><li><div><div>Qualification</div>
<div>Bachelor Degree</div></div></li></ul></div>

Manager, SOC / NOC Services

Dover Corporation

<p></p><div><p>Dover is a diversified global manufacturer with annual revenue of $8 billion. We deliver innovative equipment and components, specialty systems, consumable supplies, software and digital solutions, and support services through five operating segments: Engineered Products, Clean Energy &amp; Fueling, Imaging &amp; Identification, Pumps &amp; Process Solutions and Climate &amp; Sustainable Technologies. Dover combines global scale with operational agility to lead the markets we serve. Recognized for our entrepreneurial approach for 70 years, our team of approximately 24,000 employees has an ownership mindset, collaborating with customers to redefine what's possible.</p><p></p><p><br>
Headquartered in Downers Grove, Illinois, Dover trades on the New York Stock Exchange under &quot;DOV.&quot; Additional information is available at dovercorporation.com.</p><p></p><div><div><div><p><b><br>
Role Purpose</b></p><p><br>
The Senior Manager of Incident Response is the leader responsible for Dover Corporation&rsquo;s global incident detection and response capabilities. This role provides strategic direction and operational leadership for a globally distributed incident responsible team tasked with protecting Dover Corporation and its Operating Companies (OpCos).</p><p><br>
<br>
Serving as the primary incident commander during significant security events, this leader ensures disciplined execution and clear executive decision support. The role combines deep technical expertise in digital forensics and incident response (DFIR) with executive presence, sound judgement, and composure under pressure.</p><p><br>
<br>
A critical component of this position is maintaining alignment with US International Traffic in Arms Regulations (ITAR) and Cybersecurity Maturity Model Certification (CMMC) requirements, reinforcing our commitment to operational resilience, regulatory rigor, and risk-informed governance.</p><p></p><p><b><br>
Key Responsibilities:</b></p><ul><li>Lead, mentor, and scale a 24/7 global response team, overseeing talent strategy, performance management, and professional development to deliver a high-performance culture grounded in technical excellence, accountability, continuous learning, and rapid disciplined execution.</li></ul><div><ul><li><br>
Serve as the primary incident commander for significant and enterprise-impacting security events. Direct and coordinate cross-functional response efforts across IT, Legal, HR, Communications, executive leadership, and external partners to ensure rapid containment, recovery, and resolution.</li></ul></div><div><ul><li><br>
Own and continuously improve incident response processes to ensure adherence to ITAR data sovereignty requirements and CMMC Level 1-3 requirements.</li></ul></div><div><ul><li><br>
Ensure accurate, defensible incident reporting, documentation, and audit readiness aligned with regulatory and legal expectations.</li></ul></div><div><ul><li><br>
Define and execute the long-term incident response strategy and roadmap, including the adoption of advanced Security Orchestration, Automation, &amp; Response (SOAR) capabilities and Extended Detection &amp; Response (XDR) frameworks.</li></ul></div><div><ul><li><br>
Drive measurable improvements in Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR) through process optimization, tooling, and skills development.</li></ul></div><div><ul><li><br>
Develop, maintain, and mature incident response plans, playbooks, and tabletop exercises to ensure organizational readiness across global business units.</li></ul></div><div><ul><li><br>
Lead post-incident reviews and translate lessons learned into actionable improvements controls, processes, and response capabilities.</li></ul></div><div><ul><li><br>
Translate complex technical findings into clear, concise, risk-based reports for C-Suite during and following significant security events.</li></ul></div><div><ul><li><br>
Serve as a trusted advisor to senior leadership on response readiness, cyber resilience, and incident risk posture.</li></ul></div><div><ul><li><br>
Oversee proactive threat hunting initiatives and integrate tactical threat intelligence into the incident lifecycle.</li></ul></div><div><ul><li><br>
Advance the organization from reactive response to predictive, data-driven defense.</li></ul></div><p></p><p><b><br>
Qualifications</b></p><div><ul><li><br>
10+ years of progressive experience in Cyber Security within a large-scale global enterprise.</li></ul></div><div><ul><li><br>
5+ years in a dedicated incident response leadership role.</li></ul></div><div><ul><li><br>
Professional certifications such as CISSP, GCIH, GCFA, or CISM are highly desirable.</li></ul></div><p></p><div><ul><li><br>
Bachelor&rsquo;s degree in computer science, Cyber Security, or a related field. A master&rsquo;s degree is a plus.</li></ul></div><div><ul><li><br>
Demonstrated experience managing security operations within ITAR-controlled environments.</li></ul></div><div><ul><li><br>
Strong working knowledge of CMMC frameworks, compliance, and response requirements.</li></ul></div><div><ul><li><br>
Proven track record of managing global teams across multiple time zones and cultures.</li></ul></div><div><ul><li><br>
Experience managing third-party Managed Security Service Providers (MSSPs) preferred.</li></ul></div><div><ul><li><br>
Demonstrated ability to lead decisively during high-pressure, high-visibility security events.</li></ul></div><div><ul><li><br>
Ability to balance deep technical analysis with risk management and business priorities.</li></ul></div><div><ul><li><br>
Strong judgement in ambiguous environments and scenarios with incomplete information.</li></ul></div><div><ul><li><br>
Exceptional written &amp; verbal communication skills, including delivery of clear messaging during high-stress events.</li></ul></div><div><ul><li><br>
Hands-on experience with EDR / XDR platforms, SIEM technologies, and forensic toolsets.</li></ul></div><div><ul><li><br>
Strong knowledge of MITRE ATT&amp;CK framework and cloud security architecture.</li></ul></div><div><ul><li><br>
Due to ITAR requirements, candidates must be a &quot;U.S. Person&quot; as defined by 22 C.F.R. &sect; 120.15 (U.S. Citizen, permanent resident, or protected individual).</li></ul></div><p></p><div><b><br>
Reporting Line &amp; Location</b><br>
<ul><li>Role is based in Downers Grove, Illinois.</li><li>Approximately 15% of travel is required.</li></ul></div></div></div></div><p></p><p><br>
Work Arrangement: Hybrid<br>
Pay Range: $150,000.00 - $180,000.00 annually</p><p></p><p><br>
This position is eligible to earn a discretionary bonus based on performance metrics and other criteria outlined in our applicable bonus plan.</p><p></p><p><br>
We consider several job-related, non-discriminatory factors when determining the pay rate for a position, including, but not limited to, the position&rsquo;s responsibilities, a candidate&rsquo;s work experience, a candidate&rsquo;s education/training, the position&rsquo;s location, and the key skills needed for the position. Pay is one of the Total Rewards that we provide to compensate and recognize employees for their work.</p><p></p><p><br>
<br>
Benefits for this position include a 401(k) savings plan with employer contributions; medical, dental and vision insurance; wellness programs; health savings account, health care and dependent care flexible spending accounts; company paid short-term disability and long-term disability; company paid employee basic life and AD&amp;D insurance; supplemental employee and dependent life insurance; optional accident, hospital indemnity and critical illness insurance; adoption, surrogacy, and fertility benefits and assistance; commuter benefits; parental, military, jury duty, and bereavement leaves of absence; paid time off, including 9 paid holidays per calendar year, paid vacation days beginning at 120 hours annually, 40 paid sick leave hours annually or as provided under state and local paid sick leave laws; wellness reimbursement, tuition assistance; business travel services; employee discounts; and an employee assistance program that includes company paid counseling sessions and legal services. Eligibility for benefits is governed by applicable plan documents and policies.</p><p></p><p><br>
<br>
All qualified applicants will receive consideration for employment without discrimination based on race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other factors prohibited by law.</p><p></p><p><br>
Job Function:</p><p></p><p><br>
#LI-TE1</p></div>

Senior Manager, Incident Response

Saia LTL Freight

<p></p><div><p><b>Ready To Go Further?</b></p><p>
Saia is a different kind of logistics and transportation company. We do things the right way. You&lsquo;ll see it in our commitment to our people, customers, and community. You&lsquo;ll feel it in the support you get on day one &ndash; from leadership and from your team. A job with Saia is packed with opportunity &ndash; from learning new skills and advancing to competitive compensation and great benefits. It's all here and it&rsquo;s exactly what <i>going further</i> is all about.</p><p><br>
</p><p><b>Position Summary</b></p><p>
Manages day-to-day cybersecurity operations and drives continuous improvement of threat detection, incident response, and proactive hunting capabilities across enterprise environments. Oversees security monitoring and response activities while partnering cross-functionally to reduce cyber risk and enable secure business operations.</p><p></p><p><b>
Major Tasks and Responsibilities</b></p><ul><li>
Manages the full incident response lifecycle, including detection, triage, containment, eradication, recovery, and post-incident review.</li><li>
Leads and develops a team of incident responders and threat hunters by providing mentorship and performance oversight.</li><li>
Oversees continuous security monitoring, alert triage, and response operations to ensure timely threat containment.</li><li>
Develops and refines detection content, response playbooks, and operational procedures to enhance security effectiveness.</li><li>
Integrates threat intelligence and security telemetry from endpoint, network, cloud, and software platforms to strengthen detection capabilities.</li><li>
Administers security monitoring and orchestration platforms to optimize detection rules, automation workflows, and escalation processes.</li><li>
Coordinates major security incidents to ensure cross-functional collaboration through containment, remediation, and recovery efforts.</li><li>
Drives proactive threat hunting initiatives and adversary simulation exercises to identify and mitigate emerging risks.</li></ul><p></p><p><b>
Preferred Qualifications</b></p><ul><li>
Bachelor&rsquo;s degree in computer science, information technology, or a related field a plus.</li><li>
5+ years of cybersecurity operations or incident response experience.</li><li>
Prior experience in leading cybersecurity operations teams and managing complex security incidents.</li><li>
Proficiency in security monitoring and orchestration platforms and incident response operations.</li><li>
Knowledge of threat modeling frameworks, adversary techniques, and detection engineering principles.</li></ul><p><br>
</p><p></p><p><b>Benefits</b></p><p>
At Saia, your success is our success! That&rsquo;s why we work hard to provide you with what you need to build an awesome career. We are committed to rewarding superior employee performance so that when you work hard, your achievements won&rsquo;t go unnoticed.</p><p><b><br>
</b></p><p><b>Make Your Move</b></p><p>
At Saia, our people are the reason we&rsquo;ve been successful for over a century in the industry. Together, we&rsquo;ve created a positive culture that&rsquo;s driven by our core values &ndash; like dignity and respect, a customer-first approach, safety and more. With hundreds of terminals across the country and growing, we&rsquo;re always looking for more collaborative and motivated individuals to join our team. So, if you&rsquo;re ready to put your career on a solid path, let&rsquo;s go further.</p><p></p><p>
Saia is an Equal Opportunity Employer and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.</p></div>

Manager, Security Operations

Microsoft

<div>
 <strong>
  Overview
  <br/>
  <br/>
 </strong>
 Are you a customer-obsessed, AI-curious problem-solver who thrives in an inclusive, collaborative global team? Join Engineering Operations (EngOps) &ndash; the organization driving operational excellence across the Microsoft Cloud to strengthen quality, reliability, security, and customer trust. As part of EngOps, you&rsquo;ll design solutions that prevent issues before they happen, embed AI-powered automation, and turn signals into actions that deliver measurable customer impact. Our culture of empowerment, inclusion, and growth mindset defines how we work.
 <br/>
 <br/>
 The Customer Reliability Engineering (CRE) team within Azure EngOps is a top-level pillar of Azure Engineering responsible for world-class live-site management, customer reliability engagements, and modern customer-first experiences at scale. Our &ldquo;no dead-ends&rdquo; philosophy ensures that every customer, regardless of size or scale, can realize their full potential through the Microsoft Cloud.
 <br/>
 <br/>
 We are seeking a decisive, detail-oriented Customer Communications Manager who will serve as the customer&rsquo;s voice and advocate during high-severity incidents across Microsoft Azure. You will work closely with incident managers, engineering responders, and field stakeholders to shape and deliver clear, timely, and action-oriented communications during outages, security events, service retirements, and other high-impact scenarios.
 <br/>
 <br/>
 <strong>
  Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   To be successful in this role, you must bring customer empathy, crisp communication instincts, and the ability to lead with clarity under pressure. You will:
  </li>
  <li>
   Serve as the primary author and approver of customer-facing communications during service incidents (SEV0/SEV1/SEV2), coordinating across Engineering, Support, PM, and Field.
  </li>
  <li>
   Ensure every message to customers reflects transparency, empathy, and actionability, even in high-pressure and fast-moving environments.
  </li>
  <li>
   Actively partner with Incident Commanders to stay synchronized on technical developments and customer impact during live-site events.
  </li>
  <li>
   Review telemetry, support signals, and field input to guide communication strategy and tailor messaging to affected audiences.
  </li>
  <li>
   Participate in the on-call rotation as a Customer Communications Lead, contributing to a 24/7 response model.
  </li>
  <li>
   Contribute to Post-Incident Reviews (PIRs) by documenting impact, customer experience themes, and communication effectiveness.
  </li>
  <li>
   Work with tooling and platform teams to enhance the automation and targeting of service notifications, especially in Azure Service Health.
  </li>
  <li>
   Champion communication best practices, including ETA consistency, mitigation clarity, and consistent updates throughout the incident lifecycle.
  </li>
  <li>
   Help build communication playbooks and scalable frameworks for maintenance and retirement events.
  </li>
  <li>
   Partner with product, support, and engineering teams to identify improvements in customer readiness and self-serve guidance.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 Required Qualifications
 <br/>
 <br/>
 <ul>
  <li>
   1 to 4 years of experience in cloud operations, technical communications, incident response, or SRE roles in platforms like Azure, AWS, or GCP.
  </li>
  <li>
   Must have enterprise in a 24&times;7&times;365 enterprise environment. Exceptional written communication skills&mdash;able to distill complex technical topics into clear, concise, and customer-appropriate language under pressure.
  </li>
  <li>
   Strong cross-team collaboration skills&mdash;able to align stakeholders and drive messaging consensus across Engineering, Comms, Support, and Field. Demonstrated ability to make quick decisions and prioritize customer needs during ambiguity and chaos.
  </li>
  <li>
   Understanding of incident management frameworks (e.g., ITIL) and customer communication strategies during high-impact events. Strategic thinking and a customer-first mindset; able to advocate for improvements in platform transparency and experience.
  </li>
  <li>
   Excellent problem-solving, judgment, and decision-making skills. BS/BA in Communications, History, English, Engineering, Computer Science, or equivalent experience.
   <br/>
   <br/>
  </li>
 </ul>
 This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
 <br/>
 <br/>
 Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about
 <strong>
  requesting accommodations.
 </strong>
</div>


Service Engineer

Southwest Gas

<div><p>The Manager of Cybersecurity Operations will play a crucial role in safeguarding our people and digital assets by developing and enacting a comprehensive cybersecurity defense plan. This position leads cybersecurity professionals in developing adaptable defense strategies that integrate both offensive and defensive cybersecurity techniques, utilizing security solutions and threat intelligence to proactively mitigate risks and enhance the company's incident response capability. The manager will collaborate closely with other departments to ensure that all cyber defense activities align with strategic objectives and follow applicable rules of engagement, cybersecurity practices, laws, and regulations.<br>
<br>
</p><p><b>POSITION DIMENSIONS
</b><br>
Reporting directly to this position are up to seven exempt employees and up to four non-exempt
<br>
employees. This position will exchange information with Executive Management, Directors and
<br>
Managers at both division and corporate, third-party partners, and other utility representatives.<br>
<br>
</p><p><b>QUALIFICATIONS
</b><br>
This position requires at least ten years of experience in cybersecurity, including leading offensive
<br>
teams and/or directing an organization's incident response. The candidate should also have in-depth knowledge of EDR, CDR, and SIEM technologies and a strong understanding of cloud security, particularly in Azure and AWS environments.
<br>
<br>
A bachelor&rsquo;s in computer science or Cybersecurity is preferred, along with certifications in penetration testing and incident handling; however, experience may substitute for these.<br>
<br>
</p><div><b>ESSENTIAL JOB RESPONSIBILITIES
</b><br>
<ul><li>Develop and implement department goals that are aligned with Information Security objectives.
</li><li>Lead a team of cybersecurity technical professionals on offensive and defensive security practices,
</li></ul>ensuring comprehensive and proactive threat detection and mitigation.
<br>
<ul><li>Foster collaboration between the team and various departments to maximize the effectiveness of an adaptable defense strategy in protecting the people and technology against cyber threats.
</li><li>Conduct regular cybersecurity assessments and vulnerability evaluations while incorporating threat intelligence to identify and address potential weaknesses in systems and applications.
</li><li>Plan, organize, and conduct investigations, both internal and external to the Company, based on
</li></ul>cybersecurity events.
<br>
<ul><li>Lead incident response and recovery efforts, ensuring effective communication and coordination
</li></ul>during cybersecurity incidents.
<br>
<ul><li>Prepare detailed reports of findings, recommendations, and progress, presenting them to senior
</li></ul>management and stakeholders.
<br>
<ul><li>Oversee implementation, maintenance, and services of security solutions, as well as monitoring and configuration based on threats.
</li><li>Maintain compliance with relevant regulatory standards and frameworks (e.g., GDPR, ISO 27001,
</li></ul>MITRE, NIST) and ensure that security controls align with industry best practices.
<br>
<ul><li>Stay current with the latest cybersecurity trends, technologies, and threats to assess potential risks
</li></ul>and recommend appropriate countermeasures.
<br>
<ul><li>Collaborate with engineering and other teams to drive automation for analysis efficiency,
</li></ul>containment, and remediation activities.
<br>
<ul><li>Manage relationships with cybersecurity service partners, negotiate contracts, and monitor against contractual terms.
</li><li>Lead the preparation and management reporting of the O&amp;M and capital plans and provide variance analysis.
</li><li>Understand the business drivers and associate culture of the enterprise and partner with relevant
</li></ul>stakeholders to ensure regulatory compliance, data protection, and associate protection are in place
<br>
<ul><li>Manage and develop staff and exercise authority regarding promotions, transfers, evaluations,
</li></ul>compensation, disciplinary actions and terminations
<br>
<ul><li>Perform related duties and responsibilities as assigned
</li><li>Regular and predictable attendance is a condition of employment and is an essential function of the job
</li></ul></div><p><b>SALARY DETAILS
</b></p><p><b>Las Vegas: </b>$123,526 - $185,339
</p><p>At Southwest Gas, attracting the best talent is key to our strategy and success as a company. We use flexibility to develop competitive compensation offers to ensure we are able to hire the best candidates. The quoted salary range represents the minimum and maximum of the pay range for the position. It is provided as a good faith estimate as to what our ideal candidates are likely to expect, as we tailor our offers within the range based on the selected candidate's experience, industry knowledge, location, technical and communication skills and other factors that may prove relevant during the interview and selection process.</p></div>

Manager/Cybersecurity Operations

Deloitte

<div></div><div><div><div><div><div>Job requisition ID :: 98412
</div></div></div></div><div><div><div><div>Date: Feb 23, 2026
</div></div></div></div><div><div><div><div>Location: Delhi
</div></div></div></div><div><div><div><div>Designation: Associate Director
</div></div></div></div><div><div><div><div>Entity: Deloitte Touche Tohmatsu India LLP
</div></div></div></div><div><div><div><div><div><div><p><b>Your potential, unleashed.</b></p>
<p>
India&rsquo;s impact on the global economy has increased at an exponential rate and Deloitte presents an opportunity to unleash and realise your potential amongst cutting edge leaders, and organisations shaping the future of the region, and indeed, the world beyond.</p><br>
<p></p>
<p>
At Deloitte, your whole self to work, every day. Combine that with our drive to propel with purpose and you have the perfect playground to collaborate, innovate, grow, and make an impact that matters.</p><br>
<p></p>
<p><b>
The team</b></p><br>
<p></p>
<p>
Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient&mdash;not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks</p><br>
<p></p>
<p><b>
Your work profile</b></p>
<p>
As <b>Associate </b><b>Director</b> in our <b>Cyber</b> <b>Team</b> you&rsquo;ll build and nurture positive working relationships with teams and clients with the intention to exceed client expectations.</p>
<div>
<p>The role requires providing expertise and leadership for Incident Response capabilities including good understanding of cyber incident forensics. It requires providing both subject matter expertise and project management experience to serve as the &ldquo;point person&rdquo; of client engagement in domain.</p></div><div><br>
<p>
</p></div><div><p>The candidate shall pertain efficient incident response and remediation skills to minimise the impact of cyber risks. The individual will oversee and support security monitoring operations team and assist them during security incidents and ensure incidents are managed and responded effectively including and reporting to stakeholders. This role primarily consists of leading team of the Incident responders, Incident managers and stakeholders (including client, vendors, etc.) and to conduct thorough response activities on behalf of a wide variety of clients across sectors.
 </p></div><div><p>Candidate is required to work in complex security environments and alongside SOC team to design, communicate and execute incident response, containment and remediation plans. Candidate is required to have hands-on experience of incident management and investigation tools and shall be comfortable leading teams on challenging engagements, communicating with clients, providing hands-on assistance with incident response activities, and creating and presenting high-quality deliverables.</p></div><div><br>
<p>
</p></div><p><b>Key Responsibilities:</b></p><p><br>
</p><div><div><ul><li><p>Manage client engagements, with a focus on incident response and investigation. Provide both subject matter expertise and project management experience to serve as the &ldquo;point person&rdquo; for client engagements</p>
</li>
</ul></div><div><ul><li><p>Assist with client incident scoping call and participate in the incident from kick-off through full containment and remediation.</p>
</li>
</ul></div><div><ul><li><p>Security Analytics - Efficiently distill actionable information from large data sets for reporting, hunting, and anomaly detection.</p>
</li>
</ul></div><div><ul><li><p>Recommend and document specific countermeasures and mitigating controls with post incident analysis findings</p>
</li>
</ul></div><div><ul><li><p>Develop comprehensive and accurate reports and presentations for both technical and executive audiences</p>
</li>
</ul></div></div><div><div><ul><li><p>Conduct Digital Forensic and Incident Response (DFIR) analysis, network log and network PCAP analysis, malware triage, and other investigation related activities in support of Incident Response investigations</p>
</li>
</ul></div><div><ul><li><p>Supervise Digital Forensics and Incident Response staff, and assisting with performance reviews and mentorship of cybersecurity professionals</p>
</li>
</ul></div><div><ul><li><p>Mature the Security Incident Response process to ensure it meets the needs of the Clients
</p></li></ul></div><div><ul><li><p>Interact with Client&rsquo;s CSIRT teams to cater continuous and/or ad-hoc client requests for Incident Response services</p>
</li>
</ul></div><div><ul><li><p>Possess the experience, credibility and integrity to perform as an expert witness.</p>
</li>
</ul></div><div><ul><li><p>Involve in business development activities and supporting pre-sales teams in Identify, market, and develop new business opportunities</p>
</li>
</ul></div><div><ul><li><p>Assist with research and distribute cyber threat intelligence developed from Incident Response activities</p>
</li>
</ul></div><div><ul><li><p>Research, develop and recommend infrastructure (hardware &amp; software) needs for DFIR and evolve existing methodologies to enhance and improve our DFIR practice.</p>
</li>
<li><ul><li>10+ years of overall experience with at least 7 years of relevant experience in maintaining, tuning, monitoring and managing all aspects of Security, Analytics and SOC. Must have experience in managing at least 3 projects for large, enterprise scale Clients.</li></ul>
<ul><li>Shall be responsible for deploying, maintaining, tuning, monitoring and managing all aspects of SOC. Security products and technologies; Tools like Security Incident Event Management, Perimeter Security, Anti-APT, Security Analytics, Web gateway, UEBA, Endpoint Security, IPS, BIG Data, OS/DB&rsquo;s etc., network protocols and data center, security analysis and investigation. Incident management, change management, problem management and ability to work 24x7 during crisis.</li></ul>
<ul><li>Must have experience of managing TIP and Security Analytics platforms.</li></ul>
<ul><li>Knowledge of processes and methodologies involved with keeping information confidential, available, and assuring its integrity</li></ul></li></ul><br>
</div>
</div><p></p><div><div><p>Key Skills:</p>
</div>
<div><ul><li><p>10-14 years Information Security experience with at least 5 year of Incident Response experience.</p>
</li>
<li>Education qualification : BE/ B.Tech / MCA/ MBA, Should be an experienced IT Security practitioner with B.E. / B. Tech / B.S / MCA degree. Certified with: CISSP / OSCP / CISM certification and OEM Certification on tool &amp; technology to be deployed in SMAC.</li>
</ul>
</div><div><ul><li><p>Solid understanding of MITRE ATT&amp;CK, NIST cyber incident response framework and Cyber kill chain.</p>
</li>
</ul></div><div><ul><li><p>Understanding of Threat Hunting and threat Intelligence concepts and technologies</p>
</li>
</ul></div><div><ul><li><p>Experience of leveraging technical security solutions such as SIEM, IDS/IPS, EDR, vulnerability management or assessment, malware analysis, or forensics tools for incident triage and analysis.</p>
</li>
</ul></div><div><ul><li><p>Deep experience with most common OS (Windows, MacOS, Linux, Android, iOS) and their file systems (ext3.4, NTFS, HFS+, APFS, exFAT etc)</p>
</li>
</ul></div><div><ul><li><p>Proficiency with industry-standard forensic toolsets (i.e. EnCase, Axiom/IEF, Cellebrite/UFED, Nuix and FTK)</p>
</li>
</ul></div><div><ul><li><p>Experience of enterprise level cloud infrastructure such as AWS, MS Azure, G Suite, O365 etc..</p>
</li>
</ul></div><div><ul><li><p>Experience of malware analysis and understanding attack techniques.</p>
</li>
</ul></div><div><ul><li><p>CISSP, ECIH v2, GCFA, GCIH, EnCE or equivalent DFIR certification.</p>
</li>
</ul></div></div><div><div><ul><li><p>Ability to work in time-sensitive and complex situations with ease and professionalism, possess an efficient and versatile communication style</p>
</li>
</ul></div><div><ul><li><p>Good verbal and written communication skill, excellent interpersonal skills</p></li></ul><br>
</div>
</div><p></p><p><b>Location and way of working</b></p>
<ul>
<li>Base location: Delhi</li>
<li>Professional is required to work from office</li></ul><br>
<p></p>
<p><b>
Your role as a Associate </b><b>Director</b></p><br>
<p></p>
<p>
We expect our people to embrace and live our purpose by challenging themselves to identify issues that are most important for our clients, our people, and for society.</p><br>
<p>
</p><p>In addition to living our purpose, Senior Executive across our organization must strive to be:</p><br>
<p></p>
<ul>
<li>Inspiring - Leading with integrity to build inclusion and motivation</li>
<li>Committed to creating purpose - Creating a sense of vision and purpose</li>
<li>Agile - Achieving high-quality results through collaboration and Team unity</li>
<li>Skilled at building diverse capability - Developing diverse capabilities for the future</li>
<li>Persuasive / Influencing - Persuading and influencing stakeholders</li>
<li>Collaborating - Partnering to build new solutions</li>
<li>Delivering value - Showing commercial acumen</li>
<li>Committed to expanding business - Leveraging new business opportunities</li>
<li>Analytical Acumen - Leveraging data to recommend impactful approach and solutions through the power of analysis and visualization</li>
<li>Effective communication &ndash; Must be well abled to have well-structured and well-articulated conversations to achieve win-win possibilities</li>
<li>Engagement Management / Delivery Excellence - Effectively managing engagement(s) to ensure timely and proactive execution as well as course correction for</li>
</ul>
<p>the success of engagement(s)</p>
<ul>
<li>Managing change - Responding to changing environment with resilience</li>
<li>Managing Quality &amp; Risk - Delivering high quality results and mitigating risks with utmost integrity and precision</li>
<li>Strategic Thinking &amp; Problem Solving - Applying strategic mindset to solve business issues and complex problems</li>
<li>Tech Savvy - Leveraging ethical technology practices to deliver high impact for clients and for Deloitte</li>
<li>Empathetic leadership and inclusivity - creating a safe and thriving environment where everyone's valued for who they are, use empathy to understand others to adapt our behaviours and attitudes to become more inclusive.</li><br>
</ul>
<p></p><p><b>How you&rsquo;ll grow</b></p><br>
<p></p>
<p><b><i>
Connect for impact</i></b></p><br>
<p></p>
<p>
Our exceptional team of professionals across the globe are solving some of the world&rsquo;s most complex business problems, as well as directly supporting our communities, the planet, and each other. Know more in our Global Impact Report and our India Impact Report.</p><br>
<p></p>
<p><b><i>
Empower to lead</i></b></p><br>
<p></p>
<p>
You can be a leader irrespective of your career level. Our colleagues are characterised by their ability to inspire, support, and provide opportunities for people to deliver their best and grow both as professionals and human beings. Know more about Deloitte and our One Young World partnership.</p><br>
<p></p>
<p><b><i>
Inclusion for all</i></b></p><br>
<p></p>
<p>
At Deloitte, people are valued and respected for who they are and are trusted to add value to their clients, teams and communities in a way that reflects their own unique capabilities. Know more about everyday steps that you can take to be more inclusive. At Deloitte, we believe in the unique skills, attitude and potential each and every one of us brings to the table to make an impact that matters.</p><br>
<p></p>
<p>
</p><p><b><i>Drive your career</i></b></p><br>
<p></p>
<p>
At Deloitte, you are encouraged to take ownership of your career. We recognise there is no one size fits all career path, and global, cross-business mobility and up / re-skilling are all within the range of possibilities to shape a unique and fulfilling career. Know more about Life at Deloitte.</p><br>
<p></p>
<p><b>
Everyone&rsquo;s welcome&hellip; entrust your happiness to us</b></p><br>
<p></p>
<p>
Our workspaces and initiatives are geared towards your 360-degree happiness. This includes specific needs you may have in terms of accessibility, flexibility, safety and security, and caregiving. Here&rsquo;s a glimpse of things that are in store for you.</p><br>
<p>
</p><p></p><p><b>Interview tips</b></p><br>
<p></p>
<p>
We want job seekers exploring opportunities at Deloitte to feel prepared, confident and comfortable. To help you with your interview, we suggest that you do your research, know some background about the organisation and the business area you&rsquo;re applying to. Check out recruiting tips from Deloitte professionals.</p><br>
<p></p>
<p>
*Caution against fraudulent job offers*: We would like to advise career aspirants to exercise caution against fraudulent job offers or unscrupulous practices.</p>
<p>
At Deloitte, ethics and integrity are fundamental and not negotiable. We do not charge any fee or seek any deposits, advance, or money from any career aspirant in relation to our recruitment process. We have not authorized any party or person to collect any money from career aspirants in any form whatsoever for promises of getting jobs in Deloitte or for being considered against roles in Deloitte. We follow a professional recruitment process, provide a fair opportunity to eligible applicants and consider candidates only on merit. No one other than an authorized official of Deloitte is permitted to offer or confirm any job offer from Deloitte. We advise career aspirants to exercise caution.</p>
<p>
In this regard, you may refer to a more detailed advisory given on our website at: https://www2.deloitte.com/in/en/careers/advisory-for-career-aspirants.html?icid=wn_</p></div></div></div></div></div></div></div><p></p>

Associate Director | Incident Response & Handling | Delhi | Cyber Defense & Resilience

Search 10000+ Incident response manager jobs near you this March. New roles added regularly across leading industries. Apply today.