Lighthouse Technology Services is partnering with our client to fill their Director of Incident Response position! This is a 3+ month contract-to-hire opportunity and will be remote in the United States. This role will be a W2 employee of Lighthouse Technology Services. No C2C or subcontracting arrangements will be considered.
Position Overview:
The Director of Incident Response is responsible for leading the organization’s strategy and operations for preparing for, detecting, responding to, and recovering from cybersecurity incidents.
This role provides leadership and oversight to the incident response function, ensuring effective processes, rapid response capabilities, and continuous improvement of the organization’s cyber defense posture.
What You’ll Be Doing:
The Director combines strategic leadership with deep technical expertise to guide the incident response team and strengthen the organization’s overall resilience against evolving cyber threats.
- Lead Cybersecurity Incident Response
- Develop and implement an effective incident response strategy, ensuring alignment with business goals.
- Strengthen Threat Monitoring and Detection
- Optimize Security Operations and Tooling
- Report on Incidents and Security Trends
- Lead Post-Incident Analysis and Continuous Improvement
- Develop and Maintain Response Frameworks
- Coordinate Cross-Functional Response Efforts
- Collaborate with executive leadership to communicate incident response capabilities and status.
- Build and manage a high-performing incident response team.
- Define career development paths and mentorship for team members.
What You’ll Need to Have:
Extensive Cybersecurity Experience
- 8+ years of experience in cybersecurity, including at least 4 years focused on incident response, threat detection, or security operations.
Leadership in Security Operations
- Proven experience leading or managing cybersecurity teams, with the ability to guide incident response efforts and drive security initiatives across the organization.
Relevant Security Certifications
- One or more industry-recognized certifications such as CISSP, CISM, GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), or similar credentials.
Security Monitoring & Detection Expertise
- Strong working knowledge of security monitoring and detection technologies, including SIEM, EDR, and IDS/IPS platforms.
Modern Security Platform Experience
- Experience working with security and identity platforms such as Microsoft Entra, Google SecOps, and CrowdStrike is preferred.
Threat Analysis & Digital Forensics Knowledge
- Familiarity with malware analysis, digital forensics, and reverse engineering techniques used to investigate and respond to cyber threats.
Cloud Security Understanding
- Solid understanding of AWS environments, including services such as GuardDuty, along with knowledge of networking, operating systems, and cloud infrastructure security principles.
Pay Range: $90-95/hr
Questions about any of our jobs? Email us at recruiting@lhtservices.com
View all of our open jobs here: jobs.lhtservices.com