Located in a historic neighborhood in the nation's capital, Georgetown offers rigorous academic programs, a global perspective, exciting ways to take advantage of Washington, D.C., and a commitment to social justice. Our community is a tight knit group of remarkable individuals interested in intellectual inquiry and making a difference in the world.
Senior Incident Response Manager, Cyber Incident Response Team - Georgetown University Information Services
The Senior Incident Response Manager , is responsible for managing all aspects of Georgetown's Cyber Incident Response Team (CIRT) Incidents. The Senior Incident Response Manager manages the escalation of Tier 1-3 incidents and assist where necessary in performing computer network defense incident triage, including determining scope, urgency, and potential impact; identify the specific vulnerability and make recommendations that enable expeditious remediation; respond to urgent IT and Cyber situations to mitigate threats and correlate incident data to identify specific trends in reported incidents; Employ various, advanced response, and recovery approaches as appropriate and investigate and analyze response activities; Apply tactics, techniques, and procedures (TTP) for investigative processes; Conduct root cause analysis and response coordination, providing recommendations on mitigation; and work across Managed Service Providers as required.
Additionally, s/he acts as a security subject matter expert, representing security needs and requirements to various partners in IT and the business, and lead contact with suppliers and vendor to develop and maintain technical solutions for cyber security needs.
The position will report to the Georgetown University Chief Information Security Officer and work in conjunction with other members of the University Information Security Office (UISO) team, and help mentor staff regarding security concepts, architecture, and system requirements, and provide guidance and training as applicable and needed to the UISO and others within the University Information Services (UIS) department.
The Senior Incident Response Manager's duties include, but are not limited to:
Actively manage the incident response/investigation activities for security incidents to include discovery, triage, containment, recovery, remediation and lessons learned.
Assess the security of university computers, networks and data and recommend processes/procedures to detect security incidents.
Develop and maintain the cyber incident response program/team (CSIRT) to include people, process and technology
Coordinates the selection, installation, implementation, testing, and administration of information security software packages that will protect and monitor the integrity of data, application programs, computer operating systems, and communications network.
Serve as a security expert in all UIS engagements, helping business units comply with enterprise security policy, regulation and best practices.
Works with MSSP/Vendors on administration, support, and development of security applications.
Develops plans and budgets to meet Security Operations needs and requirements.
Provide mentorship and technical guidance to less experienced Incident Responders and SOC staff.
Communication with executives on forensics and incident response.
Minimum of 8 years of relevant information security and technology experience
Expert knowledge of technology
Excellent verbal and written communication skills
Experience working in a team environment
Ability to ensure quality of work force through the development and implementation of standards and documentation as well as training plans
Candidate must possess a commitment to customer service and to excellence in the provision of services to the University, as well as the ability to integrate these concepts into the unit culture
10 years of relevant information security and technology experience p
3 years in higher education environment
Certified Information Systems Security Professional (CISSP) certification or similar certifications
Current Georgetown Employees:
If you currently work at Georgetown University, please exit this website and login to GMS ( gms.georgetown.edu ) using your Net ID and password. Then select the Career worklet on your GMS Home dashboard to view Jobs at Georgetown.
Please note that in order to be considered an applicant for any position at Georgetown University you must submit a cover letter and resume for each position of interest for which you believe you are qualified. These documents are not kept on file for future positions.
If you are a qualified individual with a disability and need a reasonable accommodation for any part of the application and hiring process, please click here for more information, or contact the Office of Institutional Diversity, Equity, and Affirmative Action (IDEAA) at 202-687-4798 or firstname.lastname@example.org .
Need some assistance with the application process? Please call 202-687-2500. For more information about the suite of benefits, professional development and community involvement opportunities that make up Georgetown's commitment to its employees, please visit the Georgetown Works website .
Georgetown University is an Equal Opportunity/Affirmative Action Employer fully dedicated to achieving a diverse faculty and staff. All qualified applicants are encouraged to apply and will receive consideration for employment without regard to race, color, religion, national origin, age, sex (including pregnancy, gender identity and expression, and sexual orientation) , disability status, protected veteran status, or any other characteristic protected by law.
Georgetown University offers a wide variety of comprehensive and competitive benefits. Benefits packages include comprehensive health, dental and vision plans, disability and life insurance coverage, retirement savings programs, tuition assistance, voluntary insurance options (including group legal, accident, and critical illness), and much more. Whatever your need, the Office of Faculty and Staff Benefits will be standing by to support you. You can learn more about the benefits offered to eligible faculty and staff at https://benefits.georgetown.edu or view the online interactive benefits guide for more information.
Internal Number: JR07802
About Georgetown University
Established in 1789, Georgetown is the nation's oldest Catholic and Jesuit University. Georgetown is one of the world's leading academic and research institutions, offering a unique educational experience that prepares the next generation of global citizens to lead and make a difference in the world.