Incident Response (IR) Manager

Back

Incident Response (IR) Manager

@ CGI

Position Description:

We are seeking an expert-level Incident Response Manager to lead the enterprise's response, detection, containment, remediation, and forensic activities. This role requires a deeply technical cyber leader with a proven track record commanding complex, high-tempo IR operations.

This position is located in our Fairfax, VA office; however, a hybrid working model is acceptable.

Preferred locations: Fairfax, VA, Lafayette, LA, Knoxville, TN, Belton, TX, Lebanon, VA

Contract requires USC or GC Holder

Your future duties and responsibilities:

• Lead end-to-end incident detection, containment, remediation, and recovery.
• Manage teams responsible for evidence preservation, root-cause analysis, malware analysis, and forensics.
• Direct and coordinate incident response across technical, security, and business teams.
• Lead federal incident reporting, after-action reviews, and continuous improvement processes.
• Ensure adherence to federal cybersecurity frameworks (NIST, ISO, CIS Controls).
• Communicate incident impact and risk to senior leadership.
• Maintain enterprise-wide IR playbooks and operational readiness.

---

Qualifications:

Required qualifications to be successful in this role:

• Bachelor's degree or CISSP / CISM or GCIH.
• 7+ years hands-on incident response and cyber operations experience.
• Demonstrated expertise in:
• Evidence preservation
• Malware analysis
• Forensics
• Root cause analysis
• Artifact collection
• Forensic imaging
• Strong understanding of NIST, ISO 27001, and CIS Controls.
• Experience performing federal incident reporting and writing after-action reviews.

Desired qualifications/non-essential skills required:

• GIAC-level advanced IR certifications (GCFA, GREM, GNFA).
• Experience leading red/blue/purple team operations.
• Experience developing enterprise IR automation or SOAR workflows.
• Experience coordinating IR across multi-vendor or multi-agency environments.

Skills:

• Delivery Management
• Security gateways

---

How to Apply:

Apply online at: https://cgi.njoyn.com/corp/xweb/xweb.asp?NTKN=c&page=joblisting&clid=21001 

Visit Site to Apply