Incident Management Lead

ASSYST, Inc. • Alexandria, VA

5h

About The Position

ASSYST is seeking an experienced Senior Cybersecurity Incident Response & Penetration Testing Lead to support enterprise cybersecurity operations. This role will play a critical part in managing cybersecurity incident response, security operations, threat intelligence, and penetration testing activities to protect organizational infrastructure, systems, and applications.
The ideal candidate will have extensive experience leading Cybersecurity Incident Response Teams (CSIRT), conducting penetration testing and red team exercises, and developing cybersecurity strategies to strengthen an organization’s security posture.

Requirements

• Master’s degree in Information Security, Information Technology, Cybersecurity, Computer Science, or related field.
• 10+ years of cybersecurity experience in incident response, security operations, and penetration testing.
• 5+ years of experience leading incident response teams.
• Strong expertise in threat intelligence, malware analysis, forensic analysis, and indicators of compromise (IOC).
• Candidates must hold the following certifications: Certified Ethical Hacker (CEH) Licensed Penetration Tester (LPT) Certified Security Analyst (ECSA)

Responsibilities

• Lead and coordinate cybersecurity incident response activities including containment, investigation, and recovery.
• Maintain and update the Enterprise Incident Response Plan and related Standard Operating Procedures.
• Conduct incident response testing and simulations to ensure operational readiness.
• Manage and execute penetration testing and red team assessments across applications, infrastructure, and systems.
• Develop and maintain penetration testing procedures and rules of engagement.
• Perform red teaming, adversary emulation, and breach & attack simulations to improve defensive capabilities.
• Produce detailed security assessment reports, incident reports, and remediation recommendations.
• Collaborate with stakeholders and leadership to improve security strategy and threat detection capabilities.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level