incident response manager

البنك التجاري الدولي

<div></div><div><div>Description<div></div><p><br>
JOB PURPOSE</p>
<p>
To oversee and manage the Security Operations Center (SOC) related activities including, threat monitoring, triage and response to develop detailed root cause analysis and escalate for emergency response as per the approved process.</p><br>
<p>
</p><p>Description</p>
<p>
Security Incident Response Management</p>
<p>
1. Provide management oversight for the identification, triage and response of events or incidents of apparent security breaches to maintain the security posture.
</p><p>2. Conduct Security event analysis reporting on activities through regular scheduled reporting and communications in order to highlight the main incidents and events.
</p><p>3. Identify and handle incidents, which need special attention or escalation to secure the overall bank&rsquo;s security and mitigate potential risks.
</p><p>4. Direct the creation and maintenance of incident response run books of the Analysts team run-books.</p>
<p>
5. Act as a lead throughout incident scenarios and provide subject matter expertise in cybersecurity incident response to facilitate the investigation and root cause analysis.</p>
<p>
6. Ensure proper reporting for daily, monthly, quarterly and annual security posture, SOC and executive reporting and dashboards.</p>
<p>
7. Recommend security solutions based on security postures and gaps identified.</p>
<p>
8. Manage communication with other departments to facilitate investigation process.</p>
<p>
9. Develop and update SLA between SOC and other departments when required and maintain SLA.</p>
<p>
Strategy</p>
<p>
10. Participate in the formulation and implementation of the Security Operations Center Department strategy to ensure the alignment with CIB strategy</p>
<p>
Policies, Processes and Procedures</p>
<p>
11. Participate and recommend improvements to policies, processes and procedures and manage their implementation to ensure all relevant procedural/legislative requirements are carried out.</p>
<p>
Day-to-day Management</p>
<p>
12. Supervise the day to day operations of the Incident Management &amp; Response team providing some guidance in the related area, encouraging teamwork and facilitating related professional work processes in order to achieve high performance standards</p>
<p>
Supervision</p>
<p>
13. Supervise the activities and work of subordinates to ensure that all work within a specific area is carried out in an efficient manner and in compliance with the set policies, processes and procedures</p>
<p>
Compliance</p>
<p>
14. Ensure compliance with all relevant CBE regulations, banking laws, AML regulations and internal CIB policies and code of conduct in order to maintain CIB&rsquo;s sound legal position and mitigate any potential risks</p><div><br>
</div></div><div>
Qualifications<div></div><p><br>
Qualifications &amp; Experience</p>
<ul><li> Bachelor&rsquo;s degree of Engineering, Computer Science or equivalent</li></ul>
<ul><li> Minimum 8 - 10 years of experience in IT Security or related fields</li></ul>
<ul><li> Strong understanding of incident handling procedures
</li></ul><ul><li> Experience with packet and log analysis using commercial and open source tools</li></ul>
<ul><li> Recommended Certifications:</li></ul>
<p>
o Certified Information Systems Security Professional (CISSP)</p>
<p>
o Certified Information Security Manager (CISM)</p>
<ul><li> Mandatory Certification:</li></ul>
<p>
o GIAC Certified Incident Handling (GCIH)</p><br>
<p></p>
<p>
Skills</p>
<ul><li> Very good command of English and Arabic language</li></ul>
<ul><li> Very good Analytical skills</li></ul>
<ul><li> Very good Communication skills</li></ul>
<p>
Very good MS Office skills<br>
</p><div>
</div></div><div>Primary Location: Egypt-Giza-SMART VILLAGE BLDG. 2</div><div>
Job: Back Office</div><div>
Organization: FINANCE, STRATEGY, OPERATIONS &amp; TECHNOLOGY</div><div>
Shift: Day Job</div><div>
Job Type: Full-time Employee</div></div>

SECURITY INCIDENT RESPONSE MANAGER

Cardinal Technology Systems

<div><h5 class="jobSectionHeader"><b>Responsibilities</b></h5>
<p>Cardinal Technology Systems Corp. is a government IT solutions provider servicing commercial and government initiative in various parts of the United States. We are currently seeking an Incident Manager I to work for our company.</p>
<h5 class="jobSectionHeader"><b>Summary</b></h5>
<ul><li><b>Must possess IT-I security clearance or have a current National Agency Check with Local Agency Check and Credit Check (NACLC).</b><b> (Basic Federal Clearance requirements are U.S. Citizenship, clear criminal history check, no recent or pending bankruptcies)</b></li><li>
Correlating incident data to identify specific trends in reported incidents.</li><li>
Recommending defense in depth principles and practices (i.e. Defense in Multiple Places, layered defenses, security robustness, etc.).</li><li>
Performing Computer Network Defense incident triage to include determining scope, urgency, and potential impact.</li><li>
Researching and compiling known resolution steps or workarounds to enable mitigation of potential Computer Network Defense incidents within the enterprise.</li><li>
Applying cybersecurity concepts to the detection and defense of intrusions into small, and large-scale IT networks, and conduct cursory analysis of log data.</li><li>
Monitoring external data sources to maintain currency of Computer Network Defense threat condition and determine which security issues may have an impact on the enterprise.</li><li>
Identifying the cause of an incident and recognizing the key elements to ask external entities when learning the background and potential infection vector of an incident.</li><li>
Receiving and analyzing network alerts from various sources within the enterprise and determine possible causes of such alerts.</li><li>
Tracking and documenting Computer Network Defense (CND) incidents from initial detection through final resolution, and work with other components within the organization to obtain and coordinate information pertaining to ongoing incidents.</li><li>
Providing support during assigned shifts.</li><li>
Assigned shift is to be determined.</li></ul>
<h5 class="jobSectionHeader"><b>Requirements</b></h5>
<ul><li><b>Must possess IT-I security clearance or have a current National Agency Check with Local Agency Check and Credit Check (NACLC). (Basic Federal Clearance requirements are U.S. Citizenship, clear criminal history check, no recent or pending bankruptcies)</b></li><li><b>
BS Incident Management, Operations Management, Cybersecurity or related degree. HS Diploma with 3 years of incident management or cyber security experience.</b></li><li><b>
Must have an active TS/SCI clearance.</b></li><li>
Must be able to obtain DHS Suitability.</li><li>
1+ years of directly relevant experience in cyber incident management or cybersecurity operations.</li><li>
Knowledge of incident response and handling methodologies.</li><li>
Having close familiarity with NIST 800-62 (latest revision), and FISMA standards as they pertain to reporting incidents.</li><li>
Knowledge of the NCCIC National Cyber Incident Scoring System to be able to prioritize triaging of incident.</li><li>
Knowledge of general attack stages (e.g., foot printing and scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks, etc.).</li><li>
Skill in recognizing and categorizing types of vulnerabilities and associated attacks.</li><li>
Knowledge of basic system administration and operating system hardening techniques, Computer Network Defense policies, procedures, and regulations.</li><li>
Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non-nation-state sponsored], and third generation [nation-state sponsored]) is preferred.</li><li>
Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return- oriented attacks, and malicious code) is preferred.</li></ul>
<h5 class="jobSectionHeader"><b>Preferences</b></h5>
<ul><li><b>Desired Certifications:</b> GCIH, GCFA GISP, GCED, CCFP or CISSP</li><li>
Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non-nation-state sponsored], and third generation [nation-state sponsored])</li><li>
Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return- oriented attacks, and malicious code)</li></ul>
<h5 class="jobSectionHeader"><b>Benefits</b></h5>
<ul><li>Medical, Dental, Vision Benefits</li><li>Paid Life</li><li>Paid Vacation, Holidays, Sick Leave, Floating Holidays, Bereavement Leave</li><li>Semi-monthly pay cycle</li></ul>
<h5 class="jobSectionHeader"><b>Work With Us</b></h5>
<p>Cardinal Technology Systems, Corp (&ldquo;CTech-Sys&rdquo;), www.ctech-sys.com, is an SBA Certified 8(a) and HUBZone company located in the National Capital Region (NCR) and serves both government and commercial clients such clients as US CBP, US CIS, DLA, DFuse Technologies, and American Environmental Engineering Consultants.</p>
<p>Cardinal Technology Systems, Corp is an Equal Employment Opportunity employer and it's our policy to consider applicants for employment without regard to sex, race, color, creed, religion, national origin, sexual orientation, marital status, age, disability, veteran status, alienage, ancestry, or any other factors prohibited by law. Employment selections are based on company and client requirements and the qualifications and skills of the candidate. CTech-Sys is committed to actively capitalizing on the diversity of skills, talents and perspectives of our employees.</p></div>

Incident Manager I

Poshmark

<div><div><div><p>Location</p><div>
Redwood City, California, USA</div></div><div><p>
Employment Type</p><div>
Full time</div></div><div><p>
Department</p><div><div>
All Departments</div><div>
Research &amp; Development</div><div>
Technology</div><p>
Cloud &amp; Application Security Team</p></div></div><div><p>
Compensation</p><ul><div><p>
$155,900 &ndash; $261,100</p></div></ul><div><div>
The base pay range listed for this position may span multiple levels of experience, and final compensation is determined by a variety of job-related factors, including relevant experience, demonstrated expertise, and internal equity.</div><div></div><div>
The posted range applies to base salary only and does not include additional elements of total compensation, which may include equity, performance-based incentives, and a comprehensive benefits package.</div></div></div></div><p></p><div><div><div><div>
About Poshmark</div><p><b><br>
Poshmark is the leading fashion marketplace where style comes alive through discovery, self-expression, and human connection.</b> Powered by a vibrant community of 165 million members, Poshmark brings real people and taste to shopping through a social experience shaped by shared discovery. Buying and selling fashion feels simple, joyful, and personal, while every item tells its own story. Poshmark empowers sellers to grow meaningful businesses, keeps fashion in circulation longer, and gives shoppers access to unique and trusted finds, from everyday pieces to one-of-a-kind vintage and luxury.</p><p></p><p><br>
As the Security Operations Center (SOC) Lead at Poshmark, you will lead the critical mission of protecting our platform and 150 million Poshers from cyber threats. You will ensure operational excellence by overseeing the full incident response lifecycle&mdash;from threat detection to recovery&mdash;to significantly reduce risk. Your strategic leadership will enhance Poshmark's security posture, ensuring resilience, maintaining customer trust, and helping business grow. This role serves as the crucial link between strategy, policy and daytoday operations, translating complex issues into clear actionable insights.</p><p><b>
Responsibilities</b></p><ul><li><div>
Develop, review, and maintain high-quality SOC playbooks and runbooks to streamline investigations and standardize response procedures.</div></li><li><div>
Drive improvements in detection, alerting, and incident response capabilities through automation, orchestration, and process refinement.</div></li><li><div>
Oversee the SOC&rsquo;s daily operations, ensuring continuous monitoring and analysis of security event logs and alerts to promptly identify and escalate security incidents.</div></li><li><div>
Lead and coordinate end-to-end security incident management, including investigation, containment, eradication, recovery, and post-incident review.</div></li><li><div>
Direct root-cause analysis of sophisticated security incidents and targeted attacks across systems, networks, cloud environments, and application layers.</div></li><li><div>
Oversee tuning of security alerts to reduce false positives and increase operational efficiency; implement automated responses where appropriate.</div></li><li><div>
Partner closely with SRE, Cloud Security, IT Operations, Threat Intelligence, and other security teams to ensure timely remediation of identified issues.</div></li><li><div>
Manage SIEM strategy and operations, including onboarding new log sources, optimizing alert logic, and enhancing detection capabilities.</div></li><li><div>
Lead deployment and management of security monitoring solutions across all organizational environments.</div></li><li><div>
Guide and supervise threat-hunting initiatives to proactively identify malicious activity, suspicious behaviors, and emerging threats.</div></li><li><div>
Leverage threat intelligence, indicators of compromise (IOCs), and contextual data to enrich investigations and improve detection fidelity.</div></li><li><div>
Manage SOC-related projects, roadmap planning, team development, and operational execution.</div></li><li><div>
Champion the design and deployment of automated incident response workflows using SOAR and cloud-native automation tools to reduce analyst workload and accelerate containment.</div></li><li><div>
Implement automation playbooks that trigger predefined actions&mdash;such as isolating hosts, disabling compromised accounts, enriching alerts, or blocking malicious indicators&mdash;to improve response speed and consistency across the SOC.</div></li><li><div>
Evaluate emerging technologies, including AI-driven SOC analyst tools, and lead their implementation within the security operations environment.</div></li></ul><p></p><p><b>
Minimum Qualifications</b></p><ul><li><div>
Minimum of 8 years of experience in a Security Operations role, with progressive leadership responsibilities.</div></li><li><div>
Experience with security technologies including SIEMs, firewalls, IDS/IPS, EDR, and vulnerability management tools.</div></li><li><div>
Hands-on experience leading or supporting security incident response and remediation activities.</div></li><li><div>
Experience with cloud security concepts, tools, and monitoring technologies (e.g., AWS, GCP, Azure).</div></li><li><div>
Strong understanding of SOC operations, logging pipelines, and security monitoring frameworks.</div></li><li><div>
Work with a global team of soc analysts to support the 24x7 model.</div></li></ul><p></p><p><b>
Preferred Qualifications</b></p><ul><li><div>
Experience in Incident Response, Threat Hunting, Malware Analysis, or Digital Forensics.</div></li><li><div>
Experience working with SRE, DevOps, or SecDevOps teams in a collaborative operational environment.</div></li><li><div>
Relevant certifications such as GCIA, GCIH, GCFA, CISSP, or equivalent.</div></li><li><div>
Experience with scripting (Python, Bash, PowerShell) and automation frameworks.</div></li><li><div>
Prior experience managing or mentoring technical teams within a security function.</div></li></ul><p></p><p><b>
6-Month Accomplishments</b></p><ul><li><div>
Consistently oversee and ensure timely execution of security incident investigation, containment, eradication, and recovery. Validate that incidents are fully resolved and documented, with lessons learned integrated into SOC processes.</div></li><li><div>
Maintain awareness of the evolving threat landscape by leveraging threat intelligence feeds, conducting regular research, and engaging with the security community.</div></li><li><div>
Deliver new high-fidelity detections and mature, actionable incident response playbooks for key attack scenarios. Ensure the SOC team is trained and aligned on newly implemented processes.</div></li></ul><p><b><br>
12+ Month Accomplishments</b></p><ul><li><div>
Achieve measurable reductions in Mean-Time-to-Detect (MTTD) and Mean-Time-to-Respond (MTTR) through strategic automation, improved workflows, and optimized tooling.</div></li><li><div>
Demonstrably improve the organization&rsquo;s overall security operations posture by continuously enhancing detection logic, developing high-fidelity alerts, and maintaining an up-to-date library of incident response playbooks.</div></li><li><div>
Successfully lead medium- and large-scale projects aimed at strengthening security visibility, detection maturity, threat-hunting effectiveness, and SOC operational excellence.</div></li><li><div>
Establish a robust automation framework that integrates SOAR, scripts, and cloud-native tooling to streamline detection, enrichment, and response at scale.</div></li></ul></div></div></div></div><p></p>

Lead, Security Operations Center

TrendAI

<div>
 <strong>
  When you join Trend, you become part of a unique and diverse global family and you get to work towards a world safe for exchanging digital information.
  <br/>
  <br/>
 </strong>
 <strong>
  About Trend Micro
  <br/>
  <br/>
 </strong>
 Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital information. Fueled by decades of security expertise, global threat research, and continuous innovation, Trend Micro's cybersecurity platform protects hundreds of thousands of organizations and millions of individuals across clouds, networks, devices, and endpoints. As a leader in cloud and enterprise cybersecurity, the platform delivers a powerful range of advanced threat defense techniques optimized for environments like AWS, Microsoft, and Google, and central visibility for better, faster detection and response. With 7,000 employees across 65 countries, Trend Micro enables organizations to simplify and secure their connected world. For additional information, visit www.trendmicro.com
 <br/>
 <br/>
 <strong>
  Position Overview
  <br/>
  <br/>
 </strong>
 The Incident Response Coordinator with Egypt serves as the central point of contact between Trend Micro&rsquo;s IR team, internal stakeholders, and customers, ensuring smooth execution and successful outcomes of incident response engagements through effective coordination and communication.
 <br/>
 <br/>
 <strong>
  Primary Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Relationship Management: Establish and maintain strong relationships with key stakeholders including customers, sales, partners, and technical teams.
  </li>
  <li>
   Incident Management: Supporting the management of cyber incidents through the incident response lifecycle act as a liaison between Trend Micro IR Analysts and other stakeholders
  </li>
  <li>
   Coordinate Engagement Scoping: Develop a deep understanding of customers&rsquo; goals and outcomes to address their operational and security requirements and draft an engagement scope of work
  </li>
  <li>
   Resource Alignment: Coordinate and allocate appropriate resources and subject matter experts based on case requirements.
  </li>
  <li>
   Case Tracking: Monitor IR case progress and ensure timely task completion by IR analysts; draft summaries of ongoing operations and be able to provide oral updates/presentations for various levels of leadership.
  </li>
  <li>
   Information Gathering: Collect incident details, symptoms, remediation options, and associated risks to support stakeholder communication.
  </li>
  <li>
   Transition Management: Oversee the handoff of customers to standard support operations upon completion of IR engagement and delivery of the final report.
  </li>
  <li>
   Post-Incident Review: Lead post-incident review meetings and determine the necessity of post-mortems collaborating with Business Unit teams to design and implement long-term security solutions that enhance customer protection and support business growth
  </li>
  <li>
   Opportunities Support and Tracking: Support and track IR services relevant opportunities and documenting IR engagements and activities and present it
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Required Experience
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor's degree in digital Forensics, Cybersecurity, Computer Engineering, Computer Science, Telecommunications/Electronics Engineering, Information Technology, or equivalent relevant professional certifications.
  </li>
  <li>
   Minimum 5 years of experience in IT or Cybersecurity-related roles.
  </li>
  <li>
   Fluent in Arabic and English (written and spoken).
  </li>
  <li>
   At least 3 years of experience in a customer interfacing role presenting technical information to both technical and non-technical audiences.
  </li>
  <li>
   Familiarity with DFIR processes and ability to absorb technical cybersecurity information.
  </li>
  <li>
   Basic knowledge in one or more cybersecurity domains.
  </li>
  <li>
   Based in or willing to relocate to Cairo, Egypt.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Experience
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Experience in a similar role within a cybersecurity vendor or DFIR provider.
  </li>
  <li>
   Hands-on experience in DFIR-related roles.
  </li>
  <li>
   Experience in presales or business development, preferably in cybersecurity services.
  </li>
  <li>
   Experience in IT project management, especially security-related projects.
  </li>
  <li>
   Exposure to escalation management, customer success, technical account management, or people management.
  </li>
  <li>
   Experience creating/drafting cybersecurity service content and/or contracts.
  </li>
  <li>
   Certifications such as GCIL, CISSP, CISM, PMP, PRINCE2, GCIH
  </li>
  <li>
   Familiarity with Trend Micro products
  </li>
  <li>
   Fluency in French or Turkish.
   <br/>
   <br/>
  </li>
 </ul>
 Trend Micro strive to build an environment of equity and inclusion, which reflects diverse points of view. We welcome, value, promote, and celebrate diversity - the very experiences and attributes that make us who we are, including but not limited to race, ethnicity, nationality, gender, gender identification, sexual orientation, level of ability, age, religion, veteran status, socio-economic status, and political philosophy.
 <br/>
 <br/>
 We embrace change, empower people, and encourage innovation. Join Trend Micro and Thrive with us.
 <br/>
 <br/>
</div>


Incident Response Coordinator

Coalfire

<div><div><b>About Coalfire</b></div><div></div><div><br>
Coalfire is on a mission to make the world a safer place by solving our clients&rsquo; hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S. and U.K., and we support clients around the world.</div><div></div><div><br>
But that&rsquo;s not who we are &ndash; that&rsquo;s just what we do.</div><div>
</div><div>
We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.</div>
<h3 class="jobSectionHeader"><b>What You'll Do</b></h3><ul>
<li>Act as the primary technical escalation point for complex operational issues across SIEM and continuous monitoring programs, ensuring quick and effective resolutions.</li>
<li>Maintain and optimize critical security systems, including SIEM platforms (e.g., Splunk, ELK, SumoLogic, Sentinel), vulnerability management and scanning tools (e.g., Nessus, Qualys, Tenable), and Anti-Virus/EDR solutions (Trend Micro Deep Security Manager, Microsoft Defender, Crowdstrike).</li>
<li>Oversee continuous monitoring activities for FedRAMP and other compliance programs, including vulnerability scanning, configuration management, security control validation, and compliance artifact generation</li>
<li>Monitor and improve the team's use of automation and monitoring tools to drive operational efficiency across both SIEM and vulnerability management workflows.</li>
<li>Analyze and resolve system performance issues, ensuring compliance with FedRAMP, SOC, HIPAA, and other security/operational standards.</li>
<li>Participate in incident response, threat hunting, and post-mortem analysis to identify root causes and prevent recurrence.</li>
<li>Manage a team of engineers across SIEM operations and continuous monitoring (vulnerability management) functions, fostering a high-performing and engaged team culture.</li>
<li>Mentor and support the professional growth of engineers through training, feedback, and career development planning.</li>
<li>Assist with hiring, onboarding, and retention to ensure team stability and growth.</li>
<li>Oversee day-to-day delivery of security services, ensuring operational consistency and high-quality outcomes for both SIEM and continuous monitoring programs.</li>
<li>Track and optimize key metrics such as incident response times, vulnerability remediation rates, false positive reduction, operational efficiency, and compliance posture.</li>
<li>Develop and refine processes for incident response, vulnerability remediation, continuous monitoring reporting, and compliance documentation.</li>
<li>Work with cross-functional teams, including consulting teams, SREs, and professional services teams, to improve service delivery and client satisfaction.</li>
</ul><h3 class="jobSectionHeader"><b>What You'll Bring</b></h3><ul>
<li>7+ years of hands-on experience in technical roles, such as engineering or operations.</li>
<li>Proven ability to manage operational processes and handle escalations.</li>
<li>Experience balancing individual contributor work with team oversight.</li>
<li>Strong technical expertise with SIEM platforms (e.g., Splunk, ELK, SumoLogic, Sentinel) and vulnerability management tools (e.g., Nessus, Qualys, Tenable).</li>
<li>Deep understanding of continuous monitoring requirements for FedRAMP, including OSCAL, POA&amp;M management, and automated security control validation.</li>
<li>Proven ability to troubleshoot and resolve complex technical issues in high-pressure environments across both threat detection and vulnerability management domains.</li>
<li>Hands-on experience with cloud platforms (AWS, Azure, or GCP) and their associated security practices, including cloud-native vulnerability scanning and CSPM tools.</li>
<li>Solid understanding of security compliance frameworks (e.g., FedRAMP, SOC, HIPAA, NIST 800-53).</li>
<li>Ability to mentor and guide team members while contributing to technical solutions.</li>
<li>Strong written and verbal communication skills, particularly in documenting technical insights and creating compliance artifacts.</li>
<li>Bachelor&rsquo;s degree (four-year college or university) <i>or</i> a equivalent work experience.</li>
<li><b>US citizenship (required due to client contractual requirements)</b></li>
</ul><h3 class="jobSectionHeader"><b>Bonus Points</b></h3><ul>
<li>Experience managing FedRAMP continuous monitoring programs, including ConMon reporting, deviation requests, and ATO maintenance activities.</li>
<li>Familiarity with IT frameworks such as ITIL or TOGAF.</li>
<li>Experience with automation tools (e.g., Terraform, Ansible, Python) for security operations and vulnerability remediation workflows.</li>
<li>Experience with Anti-Virus and EDR tools (e.g., Trend Micro DSM, Crowdstrike, Microsoft Defender).</li>
<li>Experience with Agile delivery practices or lightweight project management tools.</li>
<li>Background managing both proactive security monitoring and reactive incident response programs.</li>
<li>Experience working in professional services or managed services environments.</li>
<li>Background in customer-facing roles, such as technical support or escalation management.</li>
<li>Certifications in cloud platforms (AWS, Azure, GCP) are or security tools (e.g., Splunk, Nessus)</li>
</ul><div><i>The salary range listed is a reasonable estimate of the compensation range for this role based on national salary averages. The actual salary offer to the successful candidate will be based on job-related education, geographic location, training, licensure and certifications and other factors. You may also be eligible to participate in annual incentive, commission, and/or recognition programs.
</i></div><div><b>Why You&rsquo;ll Want to Join Us</b></div><div></div><div><br>
At Coalfire, you&rsquo;ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you&rsquo;ll work most effectively &ndash; whether you&rsquo;re at home or an office.</div><div></div><div><br>
Regardless of location, you&rsquo;ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You&rsquo;ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you&rsquo;ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.</div><div></div><div><br>
At Coalfire, equal opportunity and pay equity is integral to the way we do business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, contact our Human Resources team at HumanResourcesMB@coalfire.com.</div>
<p>
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</p></div>

Technical Senior Manager, Security Operations

Amazon.com

<div><h2 class="jobSectionHeader"><b>DESCRIPTION</b></h2><p>
As a Software Development Manager (SDM) you'll drive the development of advanced security automation and security tooling that fortify our security operations capabilities. You'll manage a team of developers to build scalable solutions that power Incident Response, and Threat Intelligence operations.<br>
<br>
You'll shape the technical roadmap for security tooling initiatives, collaborate with various security teams to understand operational needs, and translate these into efficient, scalable solutions. Your work will directly impact our organization's security posture by enabling automated response, and improved visibility across our infrastructure.<br>
<br>
This role requires expertise in security architecture, automation frameworks, and modern development practices. You'll lead the charge in revolutionizing our security operations through tooling and automation solutions.<br>
<br>
Key job responsibilities<br>
(a) Lead by example, innovate and solve security challenges at a massive scale,<br>
(b) set measurable goals for delivery by your team,<br>
(c) Orchestrate strategy and direction, roadmap planning, and project execution scheduling,<br>
(d) Hire, build and manage a cross-functional engineering team, and<br>
(e) Create the team environment that your reports rely upon for delivery<br>
(f) Streamlining security operations through innovative tooling<br>
<br>
About the team<br>
Diverse Experiences<br>
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying.<br>
<br>
Why Amazon Security?<br>
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon&rsquo;s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.<br>
<br>
Inclusive Team Culture<br>
In Amazon Security, it&rsquo;s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.<br>
<br>
Training &amp; Career Growth<br>
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.<br>
<br>
Work/Life Balance<br>
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve.</p><h2 class="jobSectionHeader"><b>
BASIC QUALIFICATIONS</b></h2><ul><li>3+ years of engineering team management experience</li><li>7+ years of working directly within engineering teams experience</li><li>3+ years of designing or architecting (design patterns, reliability and scaling) of new and existing systems experience</li><li>8+ years of leading the definition and development of multi tier web services experience</li><li>Knowledge of engineering practices and patterns for the full software/hardware/networks development life cycle, including coding standards, code reviews, source control management, build processes, testing, certification, and livesite operations</li><li>Experience partnering with product or program management teams</li></ul><h2 class="jobSectionHeader"><b>
PREFERRED QUALIFICATIONS</b></h2><ul><li>Experience in communicating with users, other technical teams, and senior leadership to collect requirements, describe software product features, technical designs, and product strategy</li><li>Experience in recruiting, hiring, mentoring/coaching and managing teams of Software Engineers to improve their skills, and make them more effective, product software engineers</li><li>Experience in any combination of the following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development</li></ul><br>
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.<br>
<br>
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner.<p><br>
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.</p><br>
USA, VA, Herndon - 184,900.00 - 250,200.00 USD annually<br>
USA, WA, Seattle - 184,900.00 - 250,200.00 USD annually</div><p></p>

Software Development Manager, AWS Security

Global Enterprise Services, LLC

<p></p><div><p>GES was awarded U.S. Air Force Cloud One Architecture and Common Shared Services contract and is currently seeking an Incident and Problem Manager supporting AWS, Azure, Google, and Oracle clouds. This is an exciting opportunity to use your experience help modernize a leading, global-scale multi-cloud environment in support of a critical mission, supporting USAF system resiliency, security, and cost effectiveness.</p><p></p><p><b><br>
Location:</b></p><p><b>
These positions will be remote</b></p><p></p><p><b><br>
Primary Responsibilities Could Include:</b></p><ul><li>Lead day-to-day Incident Management activities, ensuring rapid restoration of service and adherence to agreed SLAs</li><li>Provide command and control of Major Incidents, chairing technical bridge calls, coordinating SMEs and directing resolution activities</li><li>Maintain accurate, high-quality incident records, outage documentation and communications to support availability reporting and stakeholder awareness</li><li>Manage the full Problem Management lifecycle, including root cause analysis, Known Errors, workarounds and preventative actions</li><li>Drive trend analysis and produce high-quality reports with insights and recommendations for technical and executive audiences</li><li>Support Post Incident Reviews and continual improvement initiatives, uplifting SOPs, workflows and ITIL-aligned processes</li><li>Collaborate closely with technical and service teams to improve help desk capability, knowledge sharing and operational resilience</li></ul><p></p><p><b><br>
Technical Leadership</b></p><ul><li>Proven experience in Incident and/or Problem Management within complex, high-availability ICT environments</li><li>Strong working knowledge of ITIL frameworks across Incident, Problem, Change, Request and Knowledge Management</li><li>Ability to operate effectively under pressure, managing competing priorities while maintaining clear, high-quality communication</li><li>Strong analytical capability, with experience interpreting operational data and providing actionable insights to leadership</li><li>Demonstrated ability to champion, develop and uplift ITIL process maturity, including training and coaching operational teams</li><li>Confident stakeholder engagement skills, with experience working across senior leaders, technical SMEs and vendors; ITIL v4 certification, ITSM tools (e.g. ServiceNow, JIRA) and Defence or secure environment experience highly regarded</li></ul><p></p><p><b><br>
Minimum Qualifications</b></p><ul><li>Bachelor's and five (5) years or more of experience; master's and three (3) years or more of experience. Additional experience may be accepted in lieu of degree.</li><li>Interim Secret clearance required to start; Ability to obtain Secret clearance required to maintain employment</li><li><b>US citizenship required</b></li><li><b> Certifications: CompTIA Security+ or equivalent (IAT-2)</b></li></ul><p></p><p><b><br>
Preferred Qualifications</b></p><ul><li>Experience with USAF Cloud One or Platform 1</li><li>Experience with Knowledge Management</li><li>ITIL Certification</li></ul></div>

ITSM Incident and Problem Manager

Search 10000+ Incident response manager jobs near you this April. New roles added regularly across leading industries. Apply today.