Cyber Incident Management Engineer

Truist•Greensboro, NC

1d•Onsite

About The Position

Leads enterprise cyber incident and high-risk vulnerability response efforts, coordinating cross-functional teams to assess, contain, and remediate threats. Designs and delivers automation solutions that improve Cyber Incident Management and cybersecurity program execution. Partners across security, technology, and business teams to enhance operational efficiency, accountability, reporting, and response outcomes.

Requirements

Bachelor’s degree in Computer Science, Information Systems, a related field, or equivalent education, training, and work-related experience.
Minimum of 5 years of professional experience in information security.
Strong knowledge of data security, privacy laws, regulatory compliance, and advanced security technologies.
Experience in threat analysis, vulnerability testing, incident response, and forensic methodologies.

Nice To Haves

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Business, or a related field, or equivalent education and experience.
Experience supporting cybersecurity operations, cyber incident management, major incident management, or related technology operations.
Experience designing or supporting automation using scripting, APIs, workflow orchestration, artificial intelligence, or Microsoft 365 platforms.
Experience coordinating cross-functional projects, operational initiatives, or process-improvement efforts.
Experience gathering requirements, analyzing workflows, and translating business needs into technical or operational solutions.
Strong organizational, analytical, facilitation, communication, and problem-solving skills.
Ability to communicate effectively with technical and non-technical stakeholders at multiple organizational levels.
Experience supporting a Cyber Incident Response Coordinator, Cyber Incident Management, Incident Command, or Major Incident Management function.
Experience with Power Automate, Power Apps, SOAR platforms, Copilot, AI-enabled automation, or comparable workflow technologies.
Experience integrating security technologies such as SIEM, SOAR, EDR, ticketing platforms, and APIs.
Experience leading cybersecurity automation, process-improvement, or operational transformation initiatives.
Experience developing dashboards, key performance indicators, operational metrics, and executive reporting.
Knowledge of cybersecurity incident response, security operations, risk management, and governance practices.
Relevant certifications such as CISSP, CISM, GCIH, PMP, CAPM, Scrum, Agile, ITIL, or equivalent.

Responsibilities

Act as Incident Manager / Incident Coordinator for information security incidents, investigations, events, zero-days, and high-risk vulnerabilities. Drive end-to-end response from intake through containment, remediation, and closure.
Coordinate cross-functional stakeholders during incidents and operational initiatives to drive alignment, accountability, and execution.
Design and implement automation solutions that improve Cyber Incident Management processes and operational efficiency.
Develop workflows that support incident intake, triage, escalation, stakeholder communications, action tracking, and closure.
Leverage scripting, APIs, AI-enabled technologies, orchestration tools, and Microsoft 365 platforms to reduce manual effort and improve consistency.
Partner with technical and business stakeholders to translate operational requirements into scalable automation and process improvements.
Manage cybersecurity automation projects and process improvement initiatives from planning through implementation.
Maintain project plans, milestones, risks, issues, dependencies, action items, and executive updates.
Develop and maintain operational dashboards, metrics, scorecards, and leadership reporting to measure performance and identify improvement opportunities.
Analyze incidents, project, and operational data to support governance, decision making, and continuous improvement.