Cyber Security Defense Manager - Incident Response

Fusion HCR is Hiring!Position: Cyber Security Defense Manager - Incident ResponseLocation: Las Vegas, NV (Hybrid, Local Candidates Only)Type: Direct HireIndustry: GamingPosition Overview Client of Fusion HCR is seeking an experienced Cyber Security Defense Manager - Incident Response to oversee the full incident response lifecycle for a premier casino entertainment organization. This role will manage day-to-day incident response operations, drive continuous improvement of threat detection capabilities, and lead a critical transition of MSSP (Managed Security Service Provider) services to a new partner. The ideal candidate brings deep incident response leadership experience, strong technical detection knowledge, and proven success managing complex vendor transitions in a cybersecurity context.Key ResponsibilitiesIncident Response LeadershipOversee the full incident response lifecycle: preparation, identification, containment, eradication, recovery, and post-incident lessons learned (per NIST SP 800-61 or similar frameworks)Manage day-to-day incident response operations, including triage, investigation coordination, forensic analysis, and executive-level reportingDevelop, maintain, and regularly test incident response playbooks, runbooks, and escalation proceduresDetection Engineering & Capability EnhancementDrive continuous improvement of threat detection engineering, including SIEM rule tuning, EDR/XDR configuration, threat intelligence integration, and behavioral analyticsCollaborate with SOC, threat hunting, and security engineering teams to reduce false positives and accelerate MTTD/MTTRLead initiatives to mature internal blue-team capabilities across endpoints, cloud, identity, network, and email environmentsMSSP Transition ManagementLead the end-to-end transition of MSSP services from the current provider to a new partner, including planning, knowledge transfer, contract/SLA alignment, and cutover executionConduct due diligence on the new MSSP, define transition success criteria, and mitigate risks during handoverEstablish governance for the new MSSP relationship, including performance monitoring, service reviews, and incident handoff protocolsEnsure the transition strengthens rather than disrupts detection and response effectivenessTeam Leadership & DevelopmentBuild, mentor, and lead a high-performing incident response team of internal analysts, responders, and cross-functional partnersProvide performance management, career development, and technical coaching to team membersFoster a culture of continuous learning through tabletop exercises, red/blue team simulations, and post-incident reviewsStakeholder Collaboration & ReportingServe as primary point of contact for major incidents, briefing executive leadership, legal, compliance, and external regulators as neededCoordinate with IT, legal, risk, business units, and external partners (e.g., law enforcement, forensics firms) during incidentsProduce executive-level reports on incident trends, program maturity, detection improvements, and transition statusProgram Maturity & ComplianceAlign incident response practices with industry standards (NIST, ISO 27001, MITRE ATT&CK, etc.) and regulatory requirementsDrive metrics-driven improvements and maturity assessments for the IR programContribute to enterprise-wide security initiatives, including vulnerability management, threat intelligence, and security awarenessRequired Qualifications10+ years of progressive cybersecurity experience, including 5+ years in incident response, digital forensics, or security operations leadershipProven experience leading cyber incident response teams and managing complex, high-impact incidentsDemonstrated success in vendor/MSSP transitions or outsourcing handovers in a cybersecurity contextStrong understanding of detection technologies (SIEM, EDR/XDR, SOAR, threat intelligence platforms)Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related field (Master’s preferred)Relevant certifications such as CISSP, CISM, GIAC GCFA/GCIH/GCTI, or similarPreferred QualificationsExperience in a regulated industry (finance, healthcare, critical infrastructure, or gaming)Hands-on technical experience with tools such as Splunk, Elastic, CrowdStrike, Microsoft Defender, Sentinel, or similarPrior experience building or maturing an internal SOC/IR function while reducing MSSP dependencyWhy Join? This is a high-visibility leadership opportunity to build and mature a critical incident response function, lead a strategic MSSP transition, and shape long-term security program maturity for a premier gaming organization. Fusion HCR is Hiring!Position: Cyber Security Defense Manager - Incident ResponseLocation: Las Vegas, NV (Hybrid, Local Candidates Only)Type: Direct HireIndustry: GamingPosition Overview Client of Fusion HCR is seeking an experienced Cyber Security Defense Manager - Incident Response to oversee the full incident response lifecycle for a premier casino entertainment organization. This role will manage day-to-day incident response operations, drive continuous improvement of threat detection capabilities, and lead a critical transition of MSSP (Managed Security Service Provider) services to a new partner. The ideal candidate brings deep incident response leadership experience, strong technical detection knowledge, and proven success managing complex vendor transitions in a cybersecurity context.Key ResponsibilitiesIncident Response LeadershipOversee the full incident response lifecycle: preparation, identification, containment, eradication, recovery, and post-incident lessons learned (per NIST SP 800-61 or similar frameworks)Manage day-to-day incident response operations, including triage, investigation coordination, forensic analysis, and executive-level reportingDevelop, maintain, and regularly test incident response playbooks, runbooks, and escalation proceduresDetection Engineering & Capability EnhancementDrive continuous improvement of threat detection engineering, including SIEM rule tuning, EDR/XDR configuration, threat intelligence integration, and behavioral analyticsCollaborate with SOC, threat hunting, and security engineering teams to reduce false positives and accelerate MTTD/MTTRLead initiatives to mature internal blue-team capabilities across endpoints, cloud, identity, network, and email environmentsMSSP Transition ManagementLead the end-to-end transition of MSSP services from the current provider to a new partner, including planning, knowledge transfer, contract/SLA alignment, and cutover executionConduct due diligence on the new MSSP, define transition success criteria, and mitigate risks during handoverEstablish governance for the new MSSP relationship, including performance monitoring, service reviews, and incident handoff protocolsEnsure the transition strengthens rather than disrupts detection and response effectivenessTeam Leadership & DevelopmentBuild, mentor, and lead a high-performing incident response team of internal analysts, responders, and cross-functional partnersProvide performance management, career development, and technical coaching to team membersFoster a culture of continuous learning through tabletop exercises, red/blue team simulations, and post-incident reviewsStakeholder Collaboration & ReportingServe as primary point of contact for major incidents, briefing executive leadership, legal, compliance, and external regulators as neededCoordinate with IT, legal, risk, business units, and external partners (e.g., law enforcement, forensics firms) during incidentsProduce executive-level reports on incident trends, program maturity, detection improvements, and transition statusProgram Maturity & ComplianceAlign incident response practices with industry standards (NIST, ISO 27001, MITRE ATT&CK, etc.) and regulatory requirementsDrive metrics-driven improvements and maturity assessments for the IR programContribute to enterprise-wide security initiatives, including vulnerability management, threat intelligence, and security awarenessRequired Qualifications10+ years of progressive cybersecurity experience, including 5+ years in incident response, digital forensics, or security operations leadershipProven experience leading cyber incident response teams and managing complex, high-impact incidentsDemonstrated success in vendor/MSSP transitions or outsourcing handovers in a cybersecurity contextStrong understanding of detection technologies (SIEM, EDR/XDR, SOAR, threat intelligence platforms)Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related field (Master’s preferred)Relevant certifications such as CISSP, CISM, GIAC GCFA/GCIH/GCTI, or similarPreferred QualificationsExperience in a regulated industry (finance, healthcare, critical infrastructure, or gaming)Hands-on technical experience with tools such as Splunk, Elastic, CrowdStrike, Microsoft Defender, Sentinel, or similarPrior experience building or maturing an internal SOC/IR function while reducing MSSP dependencyWhy Join? This is a high-visibility leadership opportunity to build and mature a critical incident response function, lead a strategic MSSP transition, and shape long-term security program maturity for a premier gaming organization.

Position Overview Client of Fusion HCR is seeking an experienced Cyber Security Defense Manager - Incident Response to oversee the full incident response lifecycle for a premier casino entertainment organization. This role will manage day-to-day incident response operations, drive continuous improvement of threat detection capabilities, and lead a critical transition of MSSP (Managed Security Service Provider) services to a new partner. The ideal candidate brings deep incident response leadership experience, strong technical detection knowledge, and proven success managing complex vendor transitions in a cybersecurity context., * 10+ years of progressive cybersecurity experience, including 5+ years in incident response, digital forensics, or security operations leadership

• Proven experience leading cyber incident response teams and managing complex, high-impact incidents
• Demonstrated success in vendor/MSSP transitions or outsourcing handovers in a cybersecurity context
• Strong understanding of detection technologies (SIEM, EDR/XDR, SOAR, threat intelligence platforms)
• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related field (Master’s preferred)
• Relevant certifications such as CISSP, CISM, GIAC GCFA/GCIH/GCTI, or similar, * Experience in a regulated industry (finance, healthcare, critical infrastructure, or gaming)
• Hands-on technical experience with tools such as Splunk, Elastic, CrowdStrike, Microsoft Defender, Sentinel, or similar
• Prior experience building or maturing an internal SOC/IR function while reducing MSSP dependency