Senior Manager, Cybersecurity Incident Response & Security Operations

Senior Manager, Cybersecurity Incident Response & Security Operations

Responsible for coordinating and advancing enterprise‑wide incident detection and response capabilities. Oversees execution and continuous improvement of incident response processes and security operations (SOC) functions across multiple internal and external providers, ensuring consistent, high‑quality monitoring, escalation and response.

• Incident Response: Support enterprise incident response activities across detection, triage, containment, eradication and recovery; coordinate high‑impact cybersecurity incidents in support of Cybersecurity leadership; serve as an operational escalation point ensuring issues are routed and addressed; develop and maintain incident response playbooks, procedures and standards; support coordination with legal, compliance, IT and external partners; lead post‑incident reviews to identify improvements.
• Security Operations: Lead security monitoring, alert management and incident response execution for SOC services; oversee internal teams and external MSSPs to ensure consistent coverage; establish operational standards for alert triage, escalation and handling; drive scalability and efficiency through automation and process optimisation; ensure effective monitoring across Microsoft 365 Commercial and Government Community Cloud High (GCCH) environments.
• Security Operations Program & Technology Management: Own and evolve SIEM and detection platforms; govern integration of multiple SOCs; establish IDEX Cybersecurity as the lead authority for major incident response; manage relationships with external providers, including performance oversight and metrics; improve detection fidelity through tuning, use‑case development and false‑positive reduction; drive enhancements in response speed (MTTR) and overall effectiveness.
• Operational Coordination & Service Delivery: Coordinate cybersecurity requests across teams, ensuring proper triage, prioritisation and completion; manage ticketing and escalation processes; track and communicate incident status, initiatives and key activities; partner with PMO and IT to embed cybersecurity requirements early; promote security‑first practices across IT operations.
• Metrics, Reporting & Continuous Improvement: Own operational metrics and reporting (MTTR, detection effectiveness, alert quality, SLAs); develop dashboards; use data to identify gaps and improvements; drive initiatives to enhance maturity, scalability and consistency.
• Training, Exercises & Readiness: Coordinate tabletop exercises and simulations; mentor and develop team members; support knowledge transfer and training initiatives.

• Bachelor’s degree in Information Systems, Computer Science, Information Security or equivalent experience.
• 10+ years of cybersecurity experience with a focus on security operations, incident response or SOC leadership.
• Demonstrated experience leading enterprise incident response and security operations programs.
• Strong expertise in SIEM platforms, detection engineering concepts and monitoring operations.
• Experience in complex enterprise or regulated environments.
• Proven ability to lead cross‑functional initiatives in matrixed organizations.
• Strong communication skills, able to engage both technical and executive stakeholders.
• Experience supporting Microsoft 365 GCC High (GCCH) environments.
• Experience managing MSSPs or external SOC/forensic partners.
• Familiarity with NIST CSF, NIST 800‑53 and NIST 800‑171.
• Relevant certifications preferred (e.g., CISSP, GCIH, GCFA, CISM).
• Experience implementing automation, orchestration and AI‑enabled security operations capabilities.

• Health benefits
• 401(k) retirement savings program with company match
• Paid time off (PTO)
• Compensation range: $ – $, depending on experience, with eligibility for a performance‑based bonus plan.
• Comprehensive U.S. benefit offerings (details available on our career page).

IDEX is an Equal Opportunity Employer. IDEX gives consideration for employment to qualified applicants without regard to race, color, religion, creed, genetic information, sex, sexual orientation, gender identity or expression, marital status, age, national origin, disability, protected veteran status or any other consideration or protected category made unlawful by federal, state or local laws.

If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process, please let us know.

Likewise, if you are limited in the ability to access or use this online application process and need an alternative method for applying, we will determine an alternate way.

Please contact our Talent Acquisition Team at  for assistance with an accommodation.

These contact tools may be used only by individuals with a disability for accommodation requests.

Do not inquire as to the status of an application.