Incident Manager
Accenturefederalservices · Lorton, VA
About this role
**Incident Manager** **About Accenture Federal Services** At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer—and life better for people. Join a collaborative, caring community where you’re empowered to grow through hands-on experience, certifications, industry training, and more. **Job Description** The CTOC Incident Manager oversees the Incident Management program, processes, and procedures within the CTOC. You will lead and coordinate responses to cybersecurity incidents, managing the full incident lifecycle: detection, analysis, containment, eradication, remediation, and recovery. You’ll coordinate with internal/external leadership, legal teams, and other stakeholders, and work across functions such as continuous monitoring, threat analysis, and post-incident reviews to improve CTOC capabilities. This role may require work outside core hours and includes on-call responsibilities. **Responsibilities include** - **Incident Response Planning** - Develop, maintain, and regularly update incident response plans, playbooks, and procedures. - Ensure SOC staff are trained and familiar with these plans. - **Incident Management** - Lead and coordinate responses to cybersecurity incidents for timely, effective resolution. - Manage the full incident lifecycle from detection through recovery. - **Communication** - Serve as the primary point of contact during incidents. - Ensure clear communication with executive leadership, legal teams, customers, and other stakeholders. - **Collaboration** - Coordinate with Security teams, Networking/NOC, Engineering, Legal, business units, and other stakeholders. - Build relationships with external partners and law enforcement agencies. - **Monitoring and Detection** - Support continuous monitoring of security systems (e.g., SIEM and other security tools). - **Threat Analysis** - Lead in-depth analyses/investigations to identify root causes, attack vectors, and potential impacts. - Develop strategies to mitigate risks and prevent future incidents. - **Post-Incident Review** - Conduct post-incident reviews to capture lessons learned and implement improvements. - **Compliance and Reporting** - Ensure compliance with relevant security standards, regulations, and policies. - Prepare and present detailed incident reports to executive leadership and stakeholders. - **Training and Development** - Provide ongoing training and guidance to SOC staff. - Mentor junior team members and promote continuous learning. - **Continuous Improvement** - Stay current on cybersecurity trends, tools, and technologies. - Recommend and implement improvements to SOC incident response capabilities. - **Automation and Efficiency** - Identify opportunities to automate incident response processes. - Develop and implement automation scripts/tools to streamline incident management. **Here’s what you need** - Bachelor’s degree in Cybersecurity, Information Technology, or related field **AND** 3+ years of experience in Incident Response, Security Operations, Cybersecurity, DFIR, Risk Management, IT Service Management, or NOC; **OR** 5+ years hands-on experience in related cybersecurity/incident response areas. - 1+ year(s) leadership experience in operational environments. - DoD 8570 IAT Level 2 or DoD 8140 compliant certification. - Must obtain **Microsoft SC-200** within 6 months of hire. - Experience with technical and non-tech
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.