INCIDENT HANDLING MANAGER

 

Nuspire is a leading managed security services provider (MSSP) founded over 20 years ago to revolutionize the cybersecurity experience by taking an optimistic and people-first approach. Our deep bench of cybersecurity experts uses world-class threat intelligence as part of a Fusion Center to detect, respond, and remediate advanced cyber threats.

 

The Incident Handling Manager directs the team of incident handlers, incident responders, and forensics examiners by way of mentoring, capacity management, performance management, and incident review.  The Incident Handling manager partners with other Fusion Center areas and leaders to assist with incident investigation, collaboration, and communication. 

As the Incident Handling Manager, you will be expected to understand and have deep experience in incident response and forensics.  In this position, you will be reviewing investigative cases to ensure that processes are followed as well as serving as an escalation point for your team for customer interactions and declaring major incidents. This opportunity may require shift work and the ability to be available on-call on nights, weekends, and holidays. 

The ideal candidate will have 10+ years of incident handling and response experience.  They should have in-depth technical knowledge of network security, operating system security, vulnerability management, common attacker techniques and vectors, and SIEM.  They should have direct experience in leading critical investigations.  They should have experience in writing technical investigation reports as well as incident summary reports for leadership.  They should have experience managing teams of 10 or more people and providing mentorship.

Responsibilities:
 

• Provide day-to-day oversight of incident handling, incident response, and forensics teams
• Review all incidents and participate in shift turnover meetings
• Maintain and enhance team training program
• Maintain and enhance career development and advancement plans
• Must be able to manage multiple priorities and projects at once
• Responsible for overall ownership of all playbooks, procedures, and workflows pertaining to incident handling and forensics
• Serve as a subject matter expert as it pertains to incident handling and incident response processes
• Collaborate with SIEM team to drive down false positives of alerts

Minimum Qualifications:
 

• This position requires at least 10 years of security experience
• Advanced incident investigation and response experience
• Advanced log parsing and analysis skill sets
• Advanced knowledge of networking fundamentals
• Moderate knowledge of Windows, Linux/Unix, and Mac operating systems
• Moderate knowledge of network defenses such as firewalls, IDS/IPS, proxies
• Moderate knowledge of forensic techniques
• Moderate knowledge of audit requirements (PCI, HIPAA, SOX, NYDFS, etc)
 

Preferred Skills:
 

• The ability to communicate technical and security topics to executive leadership
• Advanced understanding of the TCP/IP packet framework
• Advanced understanding of MITRE ATT&CK and Cyber Kill Chain frameworks
• Ethical hacking/penetration testing experience
• Attacker mindset
• Moderate understand of different cryptographic algorithms
• Experience in multiple roles in incident response
• Ability to explain technical security events to non-technical audiences
• Understanding of cyber fraud and the attack vectors

Education/Certifications/Training Required:
 

• Bachelors’ Degree in Computer Science, Information Security Assurance, or equivalent experience

Education/Certifications/Training Preferred:
 

• GIAC, GCIH, GMON, OSCP, CEH, CEPT
• CCNA, CCNP
• CISSP
 

Work conditions/environment:
 

• Great experience and growth with a global leader in managed security and network services
• Recognized in Top 25 list of MSSPs according to MSSP Alert
• Locations in: Commerce Twp., MI – Walled Lake, MI – Centennial, CO
• Nuspire provides a top work environment, as recognized by Crains Detroit, Golden Bridge "Best   and Brightest," Corp! Magazine and The Detroit News.
• Full benefits including but limited to: 6 different Blue Cross Medical HMO and PPO Options, Mutual of Omaha Dental, Vision, Short-term and Long-term disability, Life Insurance, 401k and Monthly PTO accrual from your first day of employment, along with many opportunities to earn additional PTO through monthly employee awards and participation in ‘Nuspire Good Time’ Events.
• ‘Nuspire Good Time’ events 2x per month to build team cohesion. 
• Nuspire is an Equal Opportunity Employer

Awards & Recognition
 

• MSSP Alert listed Nuspire in the Top 30 of their Top 200 MSSPs of 2019
• Best & Brightest Places to Work in Metro Detroit 8-time Winner 2011, 2014 – 2020
• Best & Brightest Places to Work National 4-time Winner 2011, 2017 - 2019
• Cyber Security Excellence Award Winner for Best Cyber Security Company 2017 - 2019
• Gartner Inc. included Nuspire in “2010 & 2011 Magic Quadrant for MSSPs, North America”
• Selected as a “Top Workplaces” winner in 2009, 2010, 2011 and 2015
• INC Magazine “One of America’s Fastest-Growing Private Companies”
• Nuspire was highlighted as a "Michigan's key IT story” in its 'Upper Hand' commercials featuring Jeff Daniels.
• TMCnet.com Tech Culture Award, 2016
• Corp! Magazine’s ‘Economic Bright Spot’ winner, 2017