> Markdown version of [/jobs/ext/2154354-security-incident-response-manager](https://www.wearedevelopers.com/jobs/ext/2154354-security-incident-response-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Incident Response Manager - **Company:** After School Matters, Inc. - **Location:** Irvine, CA, United States - **Experience:** Expert - **Salary:** $118,650.0 - $182,710.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, CompTIA Security+, Cyber Security, Monitoring of Systems, Intrusion Detection and Prevention, Security Information and Event Management, Google Cloud, Mitre Att&ck, Information Technology, Cybercrime, Vulnerability Analysis - **Published:** August 20, 2026 - **Apply:** https://hyundaiautoeveramerica.applytojob.com/apply/FFdfdxD7BH/10279-Security-Incident-Response-Manager-SSRM?source=GS ## About the Role * Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related discipline, or equivalent work experience, and 8+ years of experience in cybersecurity operations, incident response, security monitoring, threat detection, or a related information security function. * Experience participating in and coordinating cybersecurity incident investigations and remediation efforts. * Strong understanding of threat landscapes, attack vectors, malware behavior, indicators of compromise, and incident response methodologies. * Experience utilizing and interpreting security data from SIEM, EDR, and other security monitoring technologies. * Ability to analyze security events and communicate findings to stakeholders., * Master's degree or higher in Cybersecurity, Information Technology, Computer Science, or a related discipline, or equivalent work experience, and 8+ years of experience in cybersecurity operations, incident response, threat detection, security monitoring, or a related information security function. * Industry-recognized certifications such as GCIH, GCFA, GCIA, GNFA, CISSP, CISM, Security+, or CySA+. * Experience working with MSSPs. * Experience supporting SIRP, readiness initiatives, and tabletop exercises. * Familiarity with AWS, Azure, and GCP., Do you have at least eight (8) years of experience in cybersecurity operations, incident response, security monitoring, threat detection, or a related information security function?* Have you participated in or coordinated cybersecurity incident investigations and remediation efforts?* Do you have hands-on experience using security monitoring tools such as SIEM, EDR, or similar cybersecurity technologies to investigate security events or incidents?* This role occasionally requires flexibility to support urgent business or security needs outside of standard working hours. Are you able to adjust your schedule when business priorities require it?* ## Description The Incident Response Manager is a senior cybersecurity professional responsible for coordinating and supporting enterprise-wide incident response activities across Hyundai AutoEver America's technology environment. This role plays a critical part in identifying, investigating, containing, and remediating cybersecurity incidents while helping strengthen organizational resilience against evolving cyber threats. This role coordinates enterprise-wide incident response efforts and serves as a key contributor throughout the incident lifecycle, partnering with internal teams, external vendors, and managed security service providers to ensure timely and effective response activities., * Support enterprise-wide cybersecurity incident response activities throughout the incident lifecycle, including detection, investigation, containment, remediation, and documentation. * Coordinate and participate in security investigations involving internal teams, third-party vendors, and MSSPs. * Monitor, analyze, and evaluate server, endpoint, network, and security event data to identify suspicious activity and emerging threats. * Investigate security alerts and indicators of compromise using SIEM, EDR, and related security tools. * Support incident communications, escalation activities, and stakeholder coordination during cybersecurity events. * Maintain and enhance the Security Incident Response Plan (SIRP) in alignment with NIST, ISO 27035, and MITRE ATT&CK. * Participate in tabletop exercises and readiness assessments. * Leverage threat intelligence to improve detection and response effectiveness. * Track incident response metrics, KPIs, and operational reporting requirements. ## Related Videos - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) - [Cloud Run- the rise of serverless and containerization](https://www.wearedevelopers.com/videos/106-cloud-run-the-rise-of-serverless-and-containerization) - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)