Job Details

Apply now: Security Response Manager, location is Remote. The start date is ASAP for this 6 month contract to hire position.

Job Title: Security Response Manager
Location-Type: Remote (Boston- NYC- Philly- Atlanta- Riverwood, IL- Dallas- Glendale, CA- Hagertown, MD- Minneapolis- Wichita, KS, Albany, NY (shoutout my hometown)- Columbus, OH- Denver, CO- Houston, TX- Indianapolis, IN)
Start Date Is: ASAP
Duration: 6+ month contract to hire
Compensation Range: $50-$55/hour

Job Description:
Lead and elevate the organization's incident response function by driving high-impact security investigations, deep forensic analysis, and continuous detection improvement initiatives.

Day-to-Day Responsibilities:

• Triage and manage complex security incident tickets
• Lead high-pressure, cross-functional incident response bridge calls
• Conduct deep forensic investigations across endpoints and logs
• Develop and tune custom detections in CrowdStrike and Microsoft Defender
• Improve detection logic and investigative playbooks
• Identify tooling gaps and recommend security enhancements
• Partner with EU stakeholders ensuring GDPR considerations
• Mentor and train Tier 1 and Tier 2 analysts
• Collaborate across a 20-person security organization
• Support continuous service improvement and security initiatives

• Must-Haves:
  
  • 11+ years of overall IT experience
  • 3+ years directly handling security incidents
  • Significant hands-on incident response experience
  • Proven ability to lead enterprise-wide incident bridges
  • Advanced digital forensics and deep log analysis skills (web logs, OS analysis, endpoint artifacts)
  • Strong experience with EDR platforms (CrowdStrike, Microsoft Defender Suite E5)
  • Experience with ServiceNow and security workflow management
  • Familiarity with CSPM and cloud security tools (e.g., Orca)
  • Experience across EDR, identity security, vulnerability management, and threat intelligence
  • Demonstrated post-incident remediation and continuous improvement efforts
  • Ability to mentor junior analysts and raise technical standards
  • Experience working with EU stakeholders and GDPR awareness
  • Strong enterprise communication and political awareness
• Nice-to-Haves:
  
  • Red team experience (offensive security testing)
  • Blue team defensive operations experience
  • Purple team collaboration experience
  • Experience identifying detection gaps through adversarial simulation