> Markdown version of [/jobs/ext/2017336-cybersecurity-incident-commander](https://www.wearedevelopers.com/jobs/ext/2017336-cybersecurity-incident-commander). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Incident Commander - **Company:** Global Change Management Inc - **Location:** Charlotte, NC, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Data Analysis, Microsoft Azure, Big Data, Cloud Computing, Cyber Security, Information Systems, Continuous Delivery, Continuous Integration, Data Files, Data Security, Internet Security, Security Information and Event Management, Unstructured Data, Enterprise Search, Multi-Cloud, Information Technology, Splunk - **Published:** August 10, 2026 - **Apply:** https://www.careerbuilder.com/job-details/cybersecurity-incident-commander-charlotte-nc--3819a935-e3a7-4fbf-b619-bb16e0d78089 ## About the Role * Cloud experience preferably Azure/AWS security experience, GCIA, GCIH, or other GIAC certifications, at least one certification needed; * Forensic capability and Automation; * Splunk/Sort/Phantom practical experience. * AI * Lead, senior role Cyber security * Able to participate in a rotating On-Call schedule approximately once a month for after-hours information security events / incidents. * Excellent communication skills customer facing calm even demeanor when challenged, team player who works well with others and works well collaboratively. * High EQ. Ethical Hacker skills. * Incident commander - Lead calls, strong and varied technical capabilities, social awareness working with all levels, able to prioritize. * Broad understanding and experience managing security mitigation solutions at all layers and protocols * Experience securing multi-cloud environments, FaaS and CI/CD pipelines * Experience securing Applications and APIs * Bachelor\'s degree in information systems or equivalent experience * Ability to analyze large data sets and unstructured data for the purpose of identifying trends and anomalies indicative of malicious activity, as well as demonstrated capability to learn and develop new techniques * Experience with cyber hunting practices/exercises using SIEM, Enterprise search tools, or other solutions Sr. Incident Response Lead duties: Lead investigations into information security events / incidents Drive efforts towards containment of threats and remediation of environment during or after an incident Maintain and improve CyberSecurity Incident Response plan Lead audit management responsibilities to ensure identified gaps are addressed in respect to required timing to reduce risk Contribute to the development of use case and prioritization of use case development Contribute to the process improvement process through development of new detections and changes in the response processes Perform complex security investigations and root cause analyses Skills: Amazon Web Services (AWS), Artificial Intelligence (AI), Auditing, Automation, Cloud Computing, Communication Skills, Computer Hacking, Computer Security, Continuous Deployment/Delivery, Continuous Integration, Customer Relations, Data Analysis, Data Sets, Develop Methodologies, Establish Priorities, GCIA - GIAC Certified Intrusion Analyst, GCIH - GIAC Certified Incident Handler, GIAC - Global Information Assurance Certification, Hunting, Incident Response, Information Technology & Information Systems, Information/Data Security (InfoSec), Internet Security, Microsoft Windows Azure, On Call, Process Improvement, Risk Management, Root Cause Analysis, Security Attacks, Security Information and Event Management (SIEM), Security Monitoring, Splunk, Team Player, Trend Analysis, Unstructured Data, Use Cases ## Related Videos - [Introduction to TXT](https://www.wearedevelopers.com/videos/30-introduction-to-txt) - [Alibaba Big Data and Machine Learning Technology](https://www.wearedevelopers.com/videos/37-alibaba-big-data-and-machine-learning-technology) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Implementing continuous delivery in a data processing pipeline](https://www.wearedevelopers.com/videos/73-implementing-continuous-delivery-in-a-data-processing-pipeline) - [PySpark - Combining Machine Learning & Big Data](https://www.wearedevelopers.com/videos/44-pyspark-combining-machine-learning-big-data) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)