Security Incident Manager (Vulnerability Response)

About the role:

You will coordinate cyber incident response for a security defense team, running calls, assigning work, and tracking every action to closure. This role focuses on vulnerability driven threats, investigations, and incidents.

What you will do

• Open and manage response calls
• Assign and track remediation actions with technology owners
• Document decisions and timelines
• Draft status updates for leaders
• Absorb rising vulnerability volume so other coordinators stay free for access, data exposure, third party, and insider incidents

What you bring

• 6+ years in incident response coordination or security operations
• Experience running response calls and tracking remediation with IT owners
• Knowledge of the vulnerability and patch lifecycle, including scanner output, CVSS, and remediation SLAs
• Excellent documentation and status update writing

Nice to have

• ServiceNow SecOps or Vulnerability Response
• Qualys, Tenable, or Rapid7
• Experience across several incident types, such as access, data exposure, third party, and insider

Preferred certifications: GCIH. Security+ or CySA+ at minimum. CISSP is a plus.

Technology and frameworks

ServiceNow Security Operations or Vulnerability Response, Qualys, Tenable, Rapid7. Vulnerability scanner output, CVSS scoring, and remediation SLAs.