Cyber Incident Management Lead

Description

* This position is contingent upon a future opening with Gunnison.

Salary: $160,000-$180,000

Work location
:
Hybrid, 2-3 days per week on-site in Alexandria, VA. The first 30 days of work will be full-time on-site.

• Lead and coordinate enterprise cybersecurity incident response activities in support of the Cybersecurity Incident Response Team (CSIRT).
• Manage incident response operations for cybersecurity events affecting enterprise infrastructure, applications, systems, and cloud environments.
• Review, maintain, and update the Enterprise Incident Response Plan and supporting Standard Operating Procedures (SOPs) to ensure alignment with federal and organizational requirements.
• Direct incident response efforts including triage, containment, eradication, recovery, and post-incident remediation activities.
• Coordinate with internal stakeholders, third-party vendors, security teams, and leadership during cybersecurity incidents to ensure effective communication and response execution.
• Conduct annual incident response exercises, tabletop events, and testing activities to validate operational readiness and improve response capabilities.
• Perform incident information gathering, analysis, distribution, and stakeholder notification activities in accordance with established response procedures and reporting timelines.
• Develop and publish incident reports, executive summaries, after-action reports, lessons learned, and remediation recommendations following cybersecurity events.
• Lead penetration testing, red team, purple team, adversary emulation, and breach-and-attack simulation activities to assess and improve the organization’s security posture.
• Develop and maintain penetration testing concepts of operations, rules of engagement, test plans, and standard operating procedures.
• Coordinate penetration testing activities including onboarding, active assessments, vulnerability validation, findings analysis, remediation tracking, and patch verification.
• Integrate incident response and penetration testing activities with vulnerability management, threat modeling, continuous monitoring, event detection, and compliance reporting processes.
• Track and report incident response and penetration testing metrics, trends, findings, and remediation activities to cybersecurity leadership and stakeholders.
• Support continuous improvement of incident management, threat detection, and cyber defense capabilities through collaboration with security operations, engineering, and compliance teams.

• US Citizenship required
• Master of Science in Information Technology, Cybersecurity, or a related field OR equivalent experience
• 10+ years of experience in security operations and incident response, including leading enterprise-level or cloud-based cyber incidents.
• At least 5 years of experience managing incident response teams and overseeing threat detection, forensic analysis, malware analysis, and coordination of major incident activities.

Clearance Requirement: Ability to obtain and maintain a Public Trust.

• GIAC (such as GCIH, GCFA, or GCIA) certification(s)
• CISSP or CISM certification
• Cloud security certifications such as Microsoft SC-200 or AZ-500
• EC-Council certifications

The salary range for this position depends upon multiple factors including location, the individual's knowledge, skills, competencies, and experience, and contract-specific budget constraints and organizational requirements.

Gunnison Consulting Group's total compensation package also includes bonus and profit-sharing opportunities, depending on company and employee performance.

Available employee benefits include:

• 3 weeks of Personal Leave your first year
• 11 paid Holidays each year
• 5 days of Flexible Time Off each year for approved training or certifications (self-study is ineligible)
• 401(k) company match at 50% up to 10% of your salary
• Medical, Dental and Vision Insurance
• Life and Disability Insurance
• Public Transportation Subsidies
• Certifications and Training Allowance - Up to $5,000/year!

• Gunnison takes on ambitious projects. We target fun, challenging work that requires creative thinking and innovation.
• Quality is our top priority.
• Gunni…