Cyber Defense & Resilience - Incident Response - Senior Manager

PwC•Boston, MA

22h•$124,000 - $280,000

About The Position

As a Cyber Defense & Resilience - Incident Response Senior Manager in PwC’s Cybersecurity practice, you will lead incident response efforts, guide remediation activities, and help clients respond to cyber threats across complex environments. You will direct large workstreams, coach teams through ambiguity, and communicate technical findings in terms of business impact. The role contributes to threat containment, recovery planning, and resilience improvements while collaborating across cybersecurity incident management, advanced technologies, and security strategy to support client systems and data. Travel requirements are up to 60%.

Requirements

At least a bachelor's degree.
At least 7 years of experience.

Nice To Haves

Preference for study in at least one of these fields: Business Administration/Management, Computer and Information Science, Information CyberSecurity, Information Technology, Management Information Systems, Computer Applications, or Computer Engineering.
Demonstrated incident response leadership across complex cyber events.
Experience applying incident recovery planning and resilience program development.
Ability to craft client-facing messaging for technical crisis situations.
Ability to direct teams through ambiguity with sound judgment.
Experience coaching diverse teams through response and remediation activities.
Ability to model cyber standards, code of conduct, and independence requirements.

Responsibilities

Lead cyber incident response engagements from initial triage through containment, recovery, and lessons learned.
Advise client stakeholders on incident handling priorities, escalation paths, and response decisions during active events.
Coordinate forensic analysis, threat hunting, and log review to identify incident scope, root cause, and attack methods.
Develop incident response plans, playbooks, and tabletop exercise scenarios to strengthen enterprise resilience.
Direct technical teams through complex investigations and remediation across cloud, network, endpoint, and identity environments.
Translate findings into briefings, executive updates, and post-incident reports for business and technology leaders.
Apply cybersecurity governance, threat intelligence, and risk management knowledge to guide remediation strategies.
Review detection gaps and control weaknesses to shape recovery actions and reduce future exposure.
Coach team members on incident management methods, technical communication, and coordinated response execution.
Support client readiness by refining response procedures, simulation materials, and resilience planning approaches.