Incident Response Manager

Orchestrates technical and business response to cyber incidents, from triage and containment to eradication and lessons learned. This person is calm under pressure, fluent in MITRE ATT&CK and evidencing, aligns legal and communications, and maintains a tested IR plan that integrates EDR, identity, and cloud controls across Microsoft Sentinel or Splunk, Entra ID, and endpoint tooling.