[Hiring] Cloud Cyber Incident Response Manager @Booz Allen Hamilton

Role Description

Serve as a member of the cloud cyber incident response leadership team, responsible for the strategic direction, operational performance, client delivery, and continued growth of multiple incident response teams.

• Oversee complex digital forensic investigations and cybersecurity incident response engagements across cloud environments.
• Ensure investigations are conducted effectively, consistently, and in alignment with client, legal, regulatory, and business requirements.
• Serve as a senior advisor during high-severity incidents and communicate with client executives, legal counsel, cyber insurance carriers, regulators, and other key stakeholders.
• Lead and develop team leads and senior personnel, including responsibility for career management, employee development, performance management, and disciplinary actions.
• Promote a culture of accountability, collaboration, technical excellence, and strong client service.
• Maintain and strengthen relationships with breach counsel, law firms, and corporate clients.
• Support new business opportunities, help expand existing relationships, and contribute to the continued growth of the DFIR practice.
• Oversee the performance and operations of incident response teams, including team leads and senior technical personnel.
• Establish and maintain DFIR policies, standards, procedures, investigative methodologies, and documentation requirements.
• Provide senior-level oversight for high-severity cybersecurity incidents and complex forensic investigations.
• Serve as the senior escalation point for major incidents, sensitive matters, client concerns, and investigative decisions.
• Review significant findings, investigative reports, executive briefings, timelines, and client deliverables.
• Communicate material findings, risks, limitations, and recommendations to executive, legal, technical, and non-technical audiences.
• Provide career management, employee development, performance feedback, and professional coaching.
• Address performance and conduct concerns, including corrective and disciplinary actions in coordination with Human Resources and senior leadership.
• Contribute to revenue, pipeline, account growth, and broader practice development objectives.
• Collaborate with legal, Human Resources, privacy, compliance, and risk teams during sensitive investigations.
• Ensure investigative activities comply with applicable legal, privacy, contractual, and regulatory requirements.
• Identify opportunities to improve investigative processes, automation, service offerings, and technical capabilities.
• Represent the organization at client meetings, industry events, conferences, and other market-facing activities.

Qualifications

• 7+ years of experience in digital forensics, incident response, cybersecurity investigations, or cyber risk.
• 3+ years of experience leading incident response teams, forensic investigation teams, or cybersecurity functions.
• Experience managing multiple teams, senior technical personnel, or a geographically distributed workforce.
• Experience serving as a senior advisor during significant cyber incidents such as ransomware, data breach, or business email compromise.
• Experience with employee development, career management, performance management, and disciplinary actions.
• Experience developing and maintaining client relationships within the cyber insurance, legal, incident response, or cybersecurity markets.
• Knowledge of digital forensic methodologies, evidence preservation, chain of custody, investigative documentation, and defensible reporting.
• Ability to develop scripts and utilize log and data analysis platforms, including Elastic, Splunk, or AWS Athena.
• Ability to identify new opportunities, expand client relationships, contribute to business growth, and communicate technical findings and business risks to executives, boards, legal counsel, insurers, and senior stakeholders.
• Bachelor’s degree in Cybersecurity, CS, Business Administration, or Digital Forensics.

Requirements

• Experience building or expanding a digital forensics or incident response practice.
• Experience building client relationships.
• Experience working with cyber insurance carriers, claims teams, insurance brokers, breach counsel, and insured organizations.
• Experience with pipeline management, utilization, profitability, and engagement economics.
• Experience negotiating statements of work, master services agreements, retainers, pricing structures, or preferred-provider arrangements.
• Experience developing thought leadership, executive briefings, conference presentations, or market-facing content.
• Ability to develop and grow a portfolio of business.
• Master’s degree in Cybersecurity, CS, Business Administration, Digital Forensics, or a related field.
• CISM, GCFR, GCFA, GCIH, GREM, GNFA, or similar Certification.

Benefits

• Health, life, disability, financial, and retirement benefits.
• Paid leave, professional development, tuition assistance, work-life programs, and dependent care.
• Recognition awards program for exceptional performance and demonstration of values.
• Eligibility for benefit programs for full-time and part-time employees working at least 20 hours a week.