Incident Manager

The role

The CTOC Incident Manager oversees the Incident Management program, processes, and procedures within the CTOC. This role leads and coordinates the response to cybersecurity incidents to protect infrastructure and data.

What you will do

• Develop, maintain, and regularly update incident response plans, playbooks, and procedures.
• Ensure all SOC staff are trained and familiar with these plans.
• Lead and coordinate the response to cybersecurity incidents.
• Manage the entire incident lifecycle from detection to recovery.
• Serve as the primary point of contact during incidents for stakeholders.
• Work with Security teams, Networking/NOC, Engineering, Legal, and business units.
• Foster relationships with external partners and law enforcement agencies.
• Oversee continuous monitoring of security systems like SIEM.
• Lead in-depth analyses and investigations of security incidents.
• Conduct post-incident reviews to identify lessons learned.

Required qualifications

• Bachelor’s degree in Cybersecurity, Information Technology or another related field AND 3+ years of experience in Incident Response, Security Operations, Cybersecurity, DFIR, Risk Management, IT Servi
• 1+ year(s) of leadership experience in operational environments
• DoD 8570 IAT Level 2 or DoD 8140 compliant certification
• Must obtain Microsoft SC-200 within (6) months of hire
• Experience with technical and non-technical aspects of incident response, including processes, SOPs, Playbooks, and cyber investigative TTPs
• 2+ years of experience with technical report writing
• Active TS/SCI security clearance
• Valid US passport

Nice to have

• Experienced with Microsoft Security products
• Experience in scripting (e.g., Bash, PowerShell, Python)
• Working knowledge and strong understanding of advanced persistent threats (APT) and associated tactics, attack frameworks (e.g., MITRE ATT&CK, Cyber Kill Chain) and TTPs across the global threat lands
• DOD 8570 CSSP Incident Responder similar certification
• Experience with DevSecOps pipelines and SAFe methodology supporting Security Operations

Benefits

• Certifications
• Industry training

Before you apply

• Applicants for the US must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States.
• Candidates who are currently employed by a client of Accenture Federal Services or an affiliated Accenture business may not be eligible for consideration.

About the company

Accenture Federal Services is a technology company within global Accenture that helps the US federal government. Its 13,000+ people pursue technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations.