Incident Manager

Accenture Federal Services • Lorton, VA

2d • $106,300 - $206,200

About The Position

The CTOC Incident Manager oversees the incident management program, processes, and procedures within the CTOC. The role leads and coordinates responses to cybersecurity incidents and manages each incident through detection, analysis, containment, eradication, remediation, and recovery to protect customer infrastructure and data. The Incident Manager coordinates with internal and external leadership, legal teams, and other stakeholders, and works across continuous monitoring, threat analysis, and post-incident reviews to strengthen CTOC capabilities. The position may require work outside core hours for high-priority investigations and includes on-call responsibilities.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field and 3+ years of experience in Incident Response, Security Operations, Cybersecurity, DFIR, Risk Management, IT Service Management, or NOC; or 5+ years of hands-on experience in Incident Response, Security Operations, Cybersecurity, DFIR, Compliance/IA, or related cybersecurity experience.
• At least 1 year of leadership experience in operational environments.
• DoD 8570 IAT Level 2 or DoD 8140-compliant certification.
• Must obtain Microsoft SC-200 within 6 months of hire.
• Experience with technical and non-technical aspects of incident response, including processes, SOPs, playbooks, and cyber investigative TTPs.
• At least 2 years of technical report-writing experience and strong professional and technical writing skills.
• Active TS/SCI security clearance.

Nice To Haves

• Experience with Microsoft Security products.
• Scripting experience, such as Bash, PowerShell, or Python.
• Working knowledge and strong understanding of advanced persistent threats (APT), associated tactics, attack frameworks such as MITRE ATT&CK and Cyber Kill Chain, and TTPs across the global threat landscape.
• DoD 8570 CSSP Incident Responder or similar certification.
• Experience with DevSecOps pipelines and SAFe methodology supporting Security Operations.

Responsibilities

• Develop, maintain, and regularly update incident response plans, playbooks, and procedures, and ensure SOC staff are trained on them.
• Lead and coordinate cybersecurity incident response and manage incidents through detection, analysis, containment, eradication, remediation, and recovery.
• Serve as the primary point of contact during incidents and communicate with executive leadership, legal teams, customers, and other stakeholders.
• Coordinate incident response with Security teams, Networking/NOC, Engineering, Legal, business units, and other stakeholders.
• Build relationships with external partners and law enforcement agencies.
• Assist in overseeing continuous monitoring of security systems, including SIEM and other security tools.
• Lead in-depth incident analyses and investigations to identify root causes, attack vectors, and potential impacts.
• Develop and implement strategies to mitigate risks and prevent future incidents.
• Conduct post-incident reviews, document findings and lessons learned, and implement improvements.
• Ensure compliance with relevant security standards, regulations, and policies.
• Prepare and present detailed incident reports to executive leadership and other stakeholders.
• Train and guide SOC staff in incident response best practices, tools, and procedures; mentor junior team members.
• Stay current with cybersecurity trends, tools, and technologies, and recommend and implement improvements to SOC incident response capabilities, processes, and technologies.
• Identify opportunities to automate incident response and improve operational efficiency; develop and implement scripts and tools to streamline incident management tasks.

Benefits

• A collaborative and caring community.
• Opportunities to grow and learn through hands-on experience, certifications, and industry training.
• A wide variety of benefits; specific benefits are not listed in the posting.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level