Track Manager - Security Investigations, SIEM

Job Summary

Security Incident Manager

Key Responsibilities

Experience: 10+ Years Location: Any Department: Cyber Security / Security Operations Center (SOC) Role Summary The Security Incident Manager is responsible for leading and coordinating the end-to-end response to cybersecurity incidents across the organization. The role acts as the primary point of contact during major security incidents, ensuring timely detection, containment, eradication, recovery, and communication with stakeholders to minimize business impact. Key Responsibilities Lead and manage P1/P2 cybersecurity incidents and major security events. Coordinate response activities across SOC, Infrastructure, Network, Cloud, Application, and Business teams. Drive incident triage, investigation, containment, eradication, and recovery efforts. Conduct incident bridge calls and provide executive-level status updates. Perform Root Cause Analysis (RCA) and lead post-incident reviews. Ensure adherence to Incident Response plans, playbooks, and SLAs. Review and validate security alerts generated from SIEM, EDR/XDR, IDS/IPS, Firewalls, and Cloud Security platforms. Collaborate with Threat Intelligence and Threat Hunting teams to identify and mitigate emerging threats. Track remediation actions and ensure timely closure of security findings. Prepare incident reports, management dashboards, and compliance-related documentation. Lead security drills, tabletop exercises, and continuous improvement initiatives.

Skill Requirements

Technical Skills Security Incident Response and Crisis Management SIEM: Microsoft Sentinel, Splunk, QRadar, ArcSight EDR/XDR: Microsoft Defender, CrowdStrike, SentinelOne Network Security: Palo Alto, Fortinet, Check Point, Cisco Cloud Security: Azure, AWS, GCP Threat Hunting, Malware Analysis, Digital Forensics MITRE ATT&CK; Framework, NIST Incident Response Framework SOAR, Vulnerability Management, Threat Intelligence

Other Requirements

Qualifications Bachelor\'s degree in Computer Science, Cyber Security, or related field. 10+ years of Cyber Security experience with 3+ years in Incident Management. Experience managing enterprise-scale security incidents and SOC operations.