Senior Cyber Incident Manager

We are seeking an experienced Senior Cyber Incident Manager to lead our cybersecurity incident response efforts. In this critical role, you will protect critical healthcare infrastructure, patient data, and clinical systems. You will orchestrate the technical response, containment, and recovery phases of high-severity security incidents. This role requires rapid decision-making, deep technical forensics knowledge, and compliance expertise within regulated healthcare environments.
* Please note this is a hybrid opportunity based out of Secaucus, NJ.
Benefits Information:
We are proud to offer best-in-class benefits and programs to support employees and their families in living healthy, happy lives. Our pay and benefit plans have been designed to promote employee health in all respects – physical, financial, and developmental. Depending on whether it is a part-time or full-time position, some of the benefits offered may include:
Day 1 Medical, supplemental health, dental & vision for FT employees who work 30+ hours
Best-in-class well-being programs
Annual, no-cost health assessment program Blueprint for Wellness®
healthyMINDS mental health program
Vacation and Health/Flex Time
6 Holidays plus 1 "MyDay" off
FinFit financial coaching and services
401(k) pre-tax and/or Roth IRA with company match up to 5% after 12 months of service
Employee stock purchase plan
Life and disability insurance, plus buy-up option
Flexible Spending Accounts
Annual incentive plans
Matching gifts program
Education assistance through MyQuest for Education
Career advancement opportunities
and so much more!
Required Work Experience:
Minimum 6+ years in dedicated cyber incident response (CSIRT/SOC) environments.
Industry Sector: At least 2 years of security experience directly within a healthcare or heavily regulated organization.
Technical Mastery: Deep knowledge of EDR tools, SIEM platforms, CNAPP tools, network forensics, cloud security, and enterprise architecture.
Framework Proficiency: Proven experience utilizing NIST SP 800-61, MITRE ATT&CK, and ISO 27001 frameworks.
Certifications: Active certification desired but not required (e.g., GCIH, GCFA, CISSP, CHFI, or CEH).
Communication: Exceptional verbal and written skills under high-pressure scenarios.
Travel (Required): up to 25% domestic; up to 25% international
English (Required)
Education:
Bachelor’s degree in Cybersecurity, Computer Science, or an equivalent technical field. (Required)
Technical Training or Professional Licensing:
Deep knowledge of EDR tools, SIEM platforms, CNAPP tools, network forensics, cloud security, and enterprise architecture. (Required)
#LI-RM1
Incident Leadership & Technical Response
Direct the end-to-end lifecycle of critical and high-severity cyber incidents from initial detection through post-incident reporting.
Coordinate cross-functional technical teams to isolate, contain, and eradicate active security threats, minimizing operational downtime and risk to patient care.
Lead the development and execution of strategic containment plans under high-pressure scenarios.
Forensic Analysis & Threat Intelligence
Oversee digital forensics, log analysis, and root-cause investigations across hybrid environments (cloud and on-premise systems).
Integrate active threat intelligence to anticipate, hunt for, and mitigate emerging healthcare-targeted exploits and advanced persistent threats (APTs).
Analyze malware behaviors and attack vectors to strengthen perimeter and internal defenses.
Regulatory Compliance & Process Optimization
Ensure all incident handling aligns with HIPAA, HITECH, and OCR data breach notification rules to maintain absolute compliance.
Author, test, and update incident response playbooks, tabletop exercises, and continuous improvement initiatives.
Conduct post-incident reviews (PIRs) to identify security gaps and track remediation actions across the enterprise.
Stakeholder Management
Translate complex technical findings into clear, actionable, and risk-based updates for executive leadership, legal counsel, and clinical operations.
Serve as the primary technical point of contact for third-party forensic firms, insurance providers, and law enforcement during major events.

Skills
Patient Care, Regulatory Compliance