Cyber Defense & Resilience - Incident Response - Manager

PwC•Boston, MA

2d•$99,000 - $232,000•Remote

About The Position

As a Cyber Defense & Resilience - Incident Response - Manager you will lead cybersecurity incident response efforts that help clients respond to and mitigate cyber threats, protect systems and data, and identify vulnerabilities across environments. As a Manager you will motivate, develop, and coach team members, manage performance across client workstreams, and bring together technical judgment and business insight to deliver dependable outcomes within our Cybersecurity practice. In this role at PwC, you will oversee incident triage, analysis, containment, and recovery activities, while coordinating multiple priorities, guiding junior staff, and applying technology and innovation to strengthen client resilience.

Requirements

At least a Bachelor's degree
At least 5 years of experience

Nice To Haves

Preference for at least one of the following fields of study: Business Administration/Management, Computer and Information Science, Information CyberSecurity, Information Technology, Management Information Systems, Computer Applications, Computer Engineering
Demonstrating incident response leadership across cyber defense engagements
Managing client-facing response workstreams and engagement timelines
Analyzing threat activity, log data, and remediation options
Mentoring teams through pressure, ambiguity, and escalations
Applying cybersecurity governance, risk, and mitigation methods
Utilizing cybersecurity frameworks, threat intelligence, and security operations

Responsibilities

Leading incident response workstreams across client environments and coordinating containment, eradication, and recovery activities
Managing response plans, escalation paths, and case priorities during active security events and complex investigations
Analyzing alerts, log data, and threat intelligence to identify attack patterns, affected assets, and likely impact
Directing root cause analysis and translating findings into remediation actions that reduce repeat incidents
Coaching team members on incident handling methods, forensic review, and documentation practices
Reviewing investigation notes and deliverables to validate technical accuracy, timeline clarity, and client readiness
Developing client-facing briefings on incident status, response actions, and recommended improvements to security operations
Advancing vulnerability management, threat detection, and incident management capabilities through process improvements and tool use
Applying cybersecurity frameworks, governance practices, and security architecture knowledge to guide response strategies
Identifying opportunities to strengthen cyber defense plans, response playbooks, and resilience across critical systems