Note: The job is a remote job and is open to candidates in USA. Sygnia is a global cyber readiness and incident response firm helping organizations withstand and recover from complex cyberattacks. The Incident Response Manager will lead complex investigations, threat hunting, containment, and remediation efforts while managing cybersecurity teams, advising executives, and providing crisis leadership during high-impact incidents.
Responsibilities
- Lead the delivery and coordination of incident response investigations and threat hunting efforts, including containment and remediation of large-scale, advanced attacks
- Oversee teams of cybersecurity experts and forensic analysts in the execution of complex investigations and proactive assessments
- Act as a crisis leader during high-impact incidents, bringing structure, clarity, and focus to chaotic situations while managing timelines and stakeholder expectations
- Serve as a trusted advisor to C-level executives, providing briefings, strategic recommendations, and updates tailored to business risk and organizational impact
- Collaborate directly with client IT and security teams throughout the engagement, aligning technical efforts with business priorities
- Contribute to the design, improvement, and standardization of Sygnia’s internal incident response methodologies and processes
- Deliver status updates and final reports that clearly articulate findings, impact, and actionable recommendations to both technical and executive stakeholders
Skills
- 5+ years of experience in leading high-performing cybersecurity teams, in either a military or industry setting
- Proven ability to lead with calmness, focus, and decisiveness in high-pressure, fast-paced environments
- Strong communication and interpersonal skills, with the ability to build trust quickly and maintain clarity in complex and time-sensitive situations
- Demonstrated experience managing crisis situations and communicating effectively with senior executive and board-level stakeholders
- Deep understanding of the attack lifecycle, threat actor behaviors, and advanced exploitation techniques
- Solid technical knowledge of network architecture, internet protocols, endpoint systems, and common security controls
- Hands-on experience with incident response tools and techniques, such as SIEM, endpoint detection, memory analysis, forensic imaging, and malware triage
- Prior experience in cybersecurity consulting or advisory services is a strong advantage
- Willingness to travel
- Industry-recognized certifications (e.g., GCFA, GCIH, GNFA, GCIA, GREM, CISSP)
- Experience responding to ransomware, business email compromise (BEC), and advanced threat actor incidents
- Experience presenting findings to legal counsel, regulators, or board-level stakeholders
- Multilingual skills and experience in multinational or cross-cultural environments
- A degree in Computer Science, Information Security, or a related field; or equivalent education or training in cybersecurity
Benefits
- Work with some of the best minds in cybersecurity on the world’s most high-impact cases.
- Operate in a fast-paced, elite-tier environment where your technical expertise is trusted and valued.
- Take part in meaningful, challenging work that directly shapes the outcomes for Fortune 500 organizations.
- Grow your career while staying hands-on in incident response and mentoring a highly capable team.
- Supporting clients remotely and onsite as engagement needs require.
Company Overview