Incident Response (IR) Manager

CGI•Fairfax, VA

16h•$129,100 - $282,500•Hybrid

About The Position

We are seeking an expert-level Incident Response Manager to lead the enterprise's response, detection, containment, remediation, and forensic activities. This role requires a deeply technical cyber leader with a proven track record commanding complex, high-tempo IR operations. This position is located in our Fairfax, VA office; however, a hybrid working model is acceptable. Preferred locations: Fairfax, VA, Lafayette, LA, Knoxville, TN, Belton, TX, Lebanon, VA Contract requires USC or GC Holder

Requirements

Bachelor's degree or CISSP / CISM or GCIH.
7+ years hands-on incident response and cyber operations experience.
Demonstrated expertise in: Evidence preservation Malware analysis Forensics Root cause analysis Artifact collection Forensic imaging
Strong understanding of NIST, ISO 27001, and CIS Controls.
Experience performing federal incident reporting and writing after-action reviews.

Nice To Haves

GIAC-level advanced IR certifications (GCFA, GREM, GNFA).
Experience leading red/blue/purple team operations.
Experience developing enterprise IR automation or SOAR workflows.
Experience coordinating IR across multi-vendor or multi-agency environments.

Responsibilities

Lead end-to-end incident detection, containment, remediation, and recovery.
Manage teams responsible for evidence preservation, root-cause analysis, malware analysis, and forensics.
Direct and coordinate incident response across technical, security, and business teams.
Lead federal incident reporting, after-action reviews, and continuous improvement processes.
Ensure adherence to federal cybersecurity frameworks (NIST, ISO, CIS Controls).
Communicate incident impact and risk to senior leadership.
Maintain enterprise-wide IR playbooks and operational readiness.