Apply on Employer Site

City of Ashland Kentucky · 3 weeks ago

Cyber Security Manager: Incident Detection and Response

United States

Full-time

Remote

Senior Level

7+ years exp

Ashland Inc. is a global specialty chemicals company with a commitment to innovation and sustainability. They are seeking a Cyber Security Manager: Incident Detection and Response to lead and develop a team focused on cyber incident investigations and enhancing the company's cyber defense posture.

Government Administration

Responsibilities

Lead, mentor, and develop a blended IDR team (IR, SOC operations, threat detection, and security tooling engineers)

Lead cyber incident investigations across the environment and oversee root cause analysis

Lead the design and operation of detection capabilities aligned with compliance requirements and risk appetite

Oversee the development of threat models and provide guidance on improving cyber defense posture

Execute and oversee a process of a data driven methodology for measuring cyber defense effectiveness

Coordinate cross-functional response activities with IT infrastructure, applications, OT/ICS teams, legal, HR, communications, and other stakeholders

Establish and track metrics to measure defense effectiveness, report outcomes and trends to leadership

Qualification

Incident ResponseThreat DetectionSecurity OperationsDigital ForensicsCybersecurity CertificationsPeople ManagementCloud SecurityPerformance ManagementCoachingTalent DevelopmentRoot Cause AnalysisTeam LeadershipCross-Functional Coordination

Required

Strong understanding of security operations, digital forensics, incident response, and threat detection methodologies

Demonstrated ability to lead technical teams in an operational environment

7–10+ years of progressive experience in cybersecurity, with at least 3–5 years directly in Security Operations Center (SOC), Incident Response, or Threat Detection roles

3+ years of people management or team-lead experience, including performance management, coaching, and talent development

Hands-on experience in leading cyber incident investigations from detection through containment and recovery

Proven experience managing or partnering with an MSSP/MDR/SOC-as-a-Service provider

Preferred

Bachelor's degree in Computer Science, Information Security, Engineering, or related field preferred; equivalent experience considered

Relevant professional certifications preferred, such as: Incident Response / Blue Team: GCIH, GCIA, GCED, GCFR, GNFA, GCTI, GCFA; General Security: CISSP, CISM, CCSP; Cloud or platform specific: Azure, AWS, or similar

Experience in industrial/OT/ICS environments (e.g., chemical, energy, manufacturing) strongly preferred