CSIRT Lead

CSIRT Lead

We are seeking a CSIRT Lead to provide leadership and operational oversight within a Cyber Security Incident Response Team (CSIRT) environment. This role is responsible for guiding incident response activities, coordinating analysis and remediation efforts, and ensuring timely, effective handling of cybersecurity events and incidents.

The CSIRT Lead serves as a senior technical and operational authority, working closely with analysts, engineers, and stakeholders to maintain situational awareness, manage incident workflows, and support continuous improvement of incident response processes.

Required Qualifications

• Bachelor's degree or equivalent relevant experience
• Demonstrated experience leading or supervising incident response or security operations teams
• Strong background in cybersecurity incident detection, analysis, and response
• Experience working in a 24x7 operations or mission-critical environment
• Strong analytical, decision-making, and problem-solving skills
• Ability to effectively communicate technical information to diverse audiences

Certifications

• Security+ or ISC² CISSP (or comparable certification)
• GCIH or other comparable incident response certifications (preferred)

Technical Skills (Desired)

• Experience with security monitoring and incident management tools
• Familiarity with incident tracking systems and workflow management platforms
• Knowledge of common attack vectors, threat tactics, and incident response methodologies
• Strong documentation and reporting skills

Key Responsibilities

• Lead and oversee day-to-day CSIRT operations in a 24x7 incident response environment
• Coordinate monitoring, triage, investigation, and response to cybersecurity events and incidents
• Provide guidance and escalation support to CSIRT analysts during complex or high-impact incidents
• Ensure incidents are properly documented, tracked, and resolved in accordance with established procedures
• Support incident coordination activities, including incident bridges and response communications
• Develop, maintain, and enhance incident response SOPs, playbooks, and reporting processes
• Provide situational awareness and status updates to leadership as required
• Support coordination with internal teams and external partners during incident response activities
• Participate in after-action reviews and contribute to lessons learned and process improvements
• Assist with training and mentoring CSIRT analysts to strengthen team capabilities

Benefits Overview

Corinth offers a comprehensive benefits package to support employees' health, well being, and financial security. Benefits for eligible employees include multiple medical plan options, dental and vision coverage, health savings and flexible spending accounts, employer sponsored life and disability insurance, and access to wellness and health advocacy resources. Employees are also eligible to participate in a 401(k) retirement savings plan with company match and immediate vesting. Paid time off benefits include paid holidays, paid time off (PTO), sick leave, paid volunteer time, parental leave, and other leave programs. All employees have access to an Employee Assistance Program (EAP) offering confidential counseling and support services. Professional development and training opportunities are also provided.

Corinth Consulting Group, LLC is an Equal Opportunity Employer. We are committed to a workplace free from discrimination and harassment in accordance with all applicable laws.