Cybersecurity Incident Response Manager

Bering Straits Native Corp•Washington DC, DC

About The Position

Bering Straits Professional Services, LLC is seeking a Cybersecurity Incident Response Manager in Washington, DC. The manager leads and develops cybersecurity personnel and directs incident response operations, threat intelligence, threat hunting, digital forensics, malware analysis, penetration testing, adversary emulation, and purple team exercises. The role also guides practical applications of AI and machine learning to cybersecurity, including the use of Microsoft Azure AI services under client security and data-handling requirements. The manager maintains incident response plans, playbooks, procedures, detections, and automation workflows; coordinates exercises and stakeholder activities; monitors operational performance, risks, and deliverables; and reports status and metrics to technical stakeholders and senior leadership. Work must align with applicable federal requirements, client policies, and NIST guidance. This position has supervisory responsibilities and requires U.S. citizenship and the ability to obtain and maintain required government security access. A pre-employment drug screening and acceptable background check results are also required.

Requirements

High school diploma or GED and substantial relevant cybersecurity experience.
At least 5 years of demonstrated IT experience.
Demonstrated experience leading cybersecurity personnel or coordinating multidisciplinary security operations and complex incident investigations.
Strong knowledge of incident response, threat intelligence, threat hunting, digital forensics, and penetration testing principles, and ability to translate technical findings into operational decisions.
Experience with enterprise security technologies such as SIEM, endpoint detection and response, network monitoring, and cloud security tools.
Familiarity with Microsoft Azure, Microsoft Sentinel, and Microsoft Defender.
In-depth knowledge of AI and ML concepts and practical experience applying them to cybersecurity use cases, including threat hunting or incident response.
Experience with Microsoft Azure AI services.
Familiarity with the MITRE ATT&CK framework, NIST incident response guidance, and federal cybersecurity reporting and security requirements.
Strong written and verbal communication, analytical, decision-making, and stakeholder management skills.
U.S. citizenship and ability to obtain and maintain the government security access required, subject to applicable investigation and eligibility requirements.
Ability to maintain a constant state of mental alertness and situational awareness.
Ability to pass a pre-employment drug screening and have acceptable background check results.
If applicable to the contract, ability to obtain and maintain required clearance levels and obtain access to military installations.

Nice To Haves

Bachelor’s degree in cybersecurity, computer science, or a related field.
Experience supporting a federal cybersecurity program and coordinating with a 24/7 SOC.
Experience with Kusto Query Language, Python or PowerShell, Azure DevOps, or Power BI.
Relevant certifications such as GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), Microsoft Security Operations Analyst Associate, or a relevant Azure AI certification.

Responsibilities

Lead, mentor, and manage cybersecurity personnel; establish priorities, assign work, assess performance, and support professional development and cross-training.
Direct incident response activities, including event triage, investigation, containment, eradication, recovery, documentation, and lessons learned.
Coordinate with the SOC and client leadership to support timely escalation and reporting.
Oversee collection and analysis of cyber threat intelligence and ensure relevant indicators and adversary tactics, techniques, and procedures inform detection, threat hunting, incident response, and penetration testing.
Guide hypothesis-driven threat hunts, digital forensic investigations, and malware analysis.
Ensure evidence is collected, preserved, and documented in accordance with applicable requirements and chain-of-custody procedures.
Manage authorized penetration testing, adversary emulation, and purple team exercises in coordination with federal leadership.
Track findings and work with stakeholders to validate corrective actions.
Lead practical applications of AI and ML to improve threat hunting and incident response, including evaluating use cases, guiding development and integration, and measuring effectiveness.
Oversee use of applicable Microsoft Azure AI services in accordance with client security and data-handling requirements.
Maintain and improve incident response plans, playbooks, standard operating procedures, and detection and automation workflows.
Coordinate tabletop exercises and incorporate lessons learned.
Monitor workload, operational performance, risks, and deliverables; provide status reports, metrics, and briefings to technical stakeholders and senior leadership.
Coordinate with client stakeholders and other teams on investigations, audits, information requests, and continuous improvement.
Align activities with applicable federal requirements, client policies, and NIST guidance.