Manager - CSIRT Incident Remediation

This role leads cybersecurity incident response (DFIR) engagements including incident handling, in-depth technical analysis, and recovery coordination. You will conduct threat hunting across SIEM, WAF, IPS/IDS, EDR, and network anomaly tools, perform digital forensics investigations, and produce technical findings reports. Responsibilities include malware analysis, root cause analysis, post-incident lessons learned, and communicating complex attack scenarios to both technical and non-technical audiences. You will mentor team members, drive continuous improvements in incident response and detection capabilities, and apply frameworks such as MITRE ATT&CK, Cyber Kill Chain, and NIST CSF in day-to-day operations.