What are the responsibilities and job description for the Incident Management Lead position at assystinc?
ASSYST is seeking an experienced Senior Cybersecurity Incident Response & Penetration Testing Lead to support enterprise cybersecurity operations. This role will play a critical part in managing cybersecurity incident response, security operations, threat intelligence, and penetration testing activities to protect organizational infrastructure, systems, and applications.
The ideal candidate will have extensive experience leading Cybersecurity Incident Response Teams (CSIRT), conducting penetration testing and red team exercises, and developing cybersecurity strategies to strengthen an organization’s security posture.
Key Responsibilities:
- Lead and coordinate cybersecurity incident response activities including containment, investigation, and recovery.
- Maintain and update the Enterprise Incident Response Plan and related Standard Operating Procedures.
- Conduct incident response testing and simulations to ensure operational readiness.
- Manage and execute penetration testing and red team assessments across applications, infrastructure, and systems.
- Develop and maintain penetration testing procedures and rules of engagement.
- Perform red teaming, adversary emulation, and breach & attack simulations to improve defensive capabilities.
- Produce detailed security assessment reports, incident reports, and remediation recommendations.
- Collaborate with stakeholders and leadership to improve security strategy and threat detection capabilities.
Required Qualifications:
- Master’s degree in Information Security, Information Technology, Cybersecurity, Computer Science, or related field.
- 10 years of cybersecurity experience in incident response, security operations, and penetration testing.
- 5 years of experience leading incident response teams.
- Strong expertise in threat intelligence, malware analysis, forensic analysis, and indicators of compromise (IOC).
Required Certifications:
- Candidates must hold the following certifications:
- Certified Ethical Hacker (CEH)
- Licensed Penetration Tester (LPT)
- Certified Security Analyst (ECSA)
ASSYST is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, disability, military status, national origin or any other characteristic protected under federal, state, or applicable local law.