Senior Cyber Incident Manager

We are seeking an experienced Senior Cyber Incident Manager to lead our cybersecurity incident response efforts. In this critical role, you will protect critical healthcare infrastructure, patient data, and clinical systems. You will orchestrate the technical response, containment, and recovery phases of high-severity security incidents. This role requires rapid decision-making, deep technical forensics knowledge, and compliance expertise within regulated healthcare environments.

* Please note this is a hybrid opportunity based out of Secaucus, NJ.  

Benefits Information:

We are proud to offer best-in-class benefits and programs to support employees and their families in living healthy, happy lives. Our pay and benefit plans have been designed to promote employee health in all respects – physical, financial, and developmental. Depending on whether it is a part-time or full-time position, some of the benefits offered may include:

• Day 1 Medical, supplemental health, dental & vision for FT employees who work 30+ hours
• Best-in-class well-being programs
• Annual, no-cost health assessment program Blueprint for Wellness®
• healthyMINDS mental health program
• Vacation and Health/Flex Time
• 6 Holidays plus 1 "MyDay" off
• FinFit financial coaching and services
• 401(k) pre-tax and/or Roth IRA with company match up to 5% after 12 months of service
• Employee stock purchase plan
• Life and disability insurance, plus buy-up option
• Flexible Spending Accounts
• Annual incentive plans
• Matching gifts program
• Education assistance through MyQuest for Education
• Career advancement opportunities
• and so much more!

Required Work Experience: 

• Minimum 6+ years in dedicated cyber incident response (CSIRT/SOC) environments.

• Industry Sector: At least 2 years of security experience directly within a healthcare or heavily regulated organization.

• Technical Mastery: Deep knowledge of EDR tools, SIEM platforms, CNAPP tools, network forensics, cloud security, and enterprise architecture.

• Framework Proficiency: Proven experience utilizing NIST SP 800-61, MITRE ATT&CK, and ISO 27001 frameworks.

• Certifications: Active certification desired but not required (e.g., GCIH, GCFA, CISSP, CHFI, or CEH).

• Communication: Exceptional verbal and written skills under high-pressure scenarios.

Travel (Required): up to 25% domestic; up to 25% international

English (Required)

Education:

• Bachelor’s degree in Cybersecurity, Computer Science, or an equivalent technical field. (Required)

Technical Training or Professional Licensing:

• Deep knowledge of EDR tools, SIEM platforms, CNAPP tools, network forensics, cloud security, and enterprise architecture. (Required)

#LI-RM1

Incident Leadership & Technical Response

• Direct the end-to-end lifecycle of critical and high-severity cyber incidents from initial detection through post-incident reporting.
• Coordinate cross-functional technical teams to isolate, contain, and eradicate active security threats, minimizing operational downtime and risk to patient care.
• Lead the development and execution of strategic containment plans under high-pressure scenarios.

Forensic Analysis & Threat Intelligence

• Oversee digital forensics, log analysis, and root-cause investigations across hybrid environments (cloud and on-premise systems).
• Integrate active threat intelligence to anticipate, hunt for, and mitigate emerging healthcare-targeted exploits and advanced persistent threats (APTs).
• Analyze malware behaviors and attack vectors to strengthen perimeter and internal defenses.

Regulatory Compliance & Process Optimization

• Ensure all incident handling aligns with HIPAA, HITECH, and OCR data breach notification rules to maintain absolute compliance.
• Author, test, and update incident response playbooks, tabletop exercises, and continuous improvement initiatives.
• Conduct post-incident reviews (PIRs) to identify security gaps and track remediation actions across the enterprise. 

Stakeholder Management

• Translate complex technical findings into clear, actionable, and risk-based updates for executive leadership, legal counsel, and clinical operations.
• Serve as the primary technical point of contact for third-party forensic firms, insurance providers, and law enforcement during major events.