Assistant Manager, Cybersecurity Incident Response

Role Overview

Manage cybersecurity incidents, ensure timely detection and resolution, and maintain target MTTD and MTTR benchmarks. Partner with technical teams to ensure aligned technical cybersecurity discussions.

What You Will Do

Monitor, triage, and investigate alerts, create and manage SIEM detection rules, conduct log analysis, and drive use case ideation and validation.

Why It Might Be a Fit

5-8 years of experience in SOC, Incident Response, or Detection Engineering roles, with proven success in SIEM administration and incident triage.

Requirements

• 5-8 years of experience in Security Operations Center (SOC), Incident Response, or Detection Engineering roles
• Proven success in SIEM administration, particularly Elastic Stack (ELK) environments
• Hands-on expertise in incident triage, log analysis, and detection rule engineering
• Demonstrated ability to design and operationalize MITRE ATT&CK-aligned use cases
• Experience in cross-department collaboration and incident coordination with IT and business teams
• Strong presentation and communication experience in stakeholder-level incident discussions
• Relevant certifications such as CISSP,GCIH, GCIA, CEH, or Elastic Certified Engineer preferred