Information Technology Manager II

The Role

This position leads complex cyber incident investigations across enterprise, cloud, and on-premises environments, covering the full incident response lifecycle from triage to post-incident reporting. Day-to-day work includes digital forensics, malware analysis, proactive threat hunting, and developing SIEM detections to strengthen security monitoring coverage.

Skills & Experience

Candidates need hands-on experience with DFIR across Windows, cloud, identity, and network environments, including dead-box forensics and artifact analysis. Proficiency with KQL, SIEM platforms, and MITRE ATT&CK is expected. Experience investigating ransomware, insider risk, and advanced threat actor activity is essential, with relevant certifications valued.

Who It Suits

This role suits an experienced security professional who thrives on technically demanding investigations and cross-functional collaboration. Someone comfortable working alongside Legal, HR, and Compliance stakeholders while also driving detection engineering improvements will find this position a strong fit for advancing their career in enterprise DFIR.