Cyber Security Defense Manager – Incident Response

Save This Job
Apply Now

Fusion HCR is Hiring!

Role: Cyber Security Defense Manager – Incident Response
Location: Las Vegas, NV 89118
Work Arrangement: Hybrid; local candidates only
Employment Type: Full-time direct hire
Industry: Gambling Facilities and Casinos

Join a premier casino entertainment organization seeking an experienced cybersecurity leader to oversee incident response operations and strengthen enterprise security capabilities. This high-visibility role will lead incident response activities, detection engineering improvements, and a strategic transition between managed security service providers. The successful candidate will work closely with security, technology, legal, compliance, and business stakeholders to protect critical systems and support organizational resilience. This opportunity is well suited to a hands-on leader with experience managing complex incidents, developing security operations teams, and improving detection and response programs in regulated or highly distributed environments.

Position Overview

Fusion HCR is seeking a Cyber Security Defense Manager – Incident Response to lead the full incident response lifecycle, including preparation, detection, containment, eradication, recovery, and post-incident improvement. The manager will oversee daily response operations, coordinate investigations, guide forensic analysis, and provide clear reporting to executive leadership.

A significant priority will be leading the transition of managed security service provider activities to a new partner while maintaining effective detection and response coverage. The role will also advance SIEM, EDR/XDR, threat intelligence, behavioral analytics, and blue-team capabilities across endpoint, cloud, identity, network, and email environments. Success requires strong technical judgment, operational leadership, vendor-management expertise, and the ability to coordinate effectively during high-impact security incidents.

Key Responsibilities

  • Lead the complete incident response lifecycle, including preparation, identification, containment, eradication, recovery, and lessons learned.

  • Manage incident triage, investigations, forensic coordination, escalation, and executive-level reporting.

  • Develop, maintain, and test incident response playbooks, runbooks, and escalation procedures.

  • Improve detection capabilities through SIEM tuning, EDR/XDR configuration, threat intelligence, and behavioral analytics.

  • Partner with SOC, threat hunting, and security engineering teams to reduce false positives and improve MTTD and MTTR.

  • Lead the end-to-end MSSP transition, including planning, knowledge transfer, SLA alignment, risk mitigation, and cutover execution.

  • Establish governance, performance monitoring, service reviews, and incident handoff protocols for the new MSSP.

  • Build, mentor, and develop incident response analysts, responders, and cross-functional partners.

  • Coordinate with executives, legal, compliance, IT, risk, business units, regulators, law enforcement, and external specialists during major incidents.

  • Align program practices with NIST, ISO 27001, MITRE ATT&CK, and applicable regulatory requirements.

Required Qualifications

  • At least 10 years of progressive cybersecurity experience, including at least five years in incident response, digital forensics, or security operations leadership.

  • Demonstrated experience leading cyber incident response teams and managing complex, high-impact incidents.

  • Proven success managing cybersecurity vendor transitions, MSSP changes, or outsourcing handovers.

  • Strong knowledge of SIEM, EDR/XDR, SOAR, and threat intelligence platforms.

  • Experience with incident response frameworks, detection engineering, threat hunting, and security operations.

  • Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field; a master’s degree is preferred.

  • Relevant certification such as CISSP, CISM, GIAC GCFA, GCIH, GCTI, or a comparable credential.

  • Ability to communicate effectively with technical teams, executives, legal and compliance stakeholders, and external partners.

  • Experience operating in a regulated environment or supporting enterprise-scale security programs.

  • Availability to work a hybrid schedule in the Las Vegas area.

Why Join Us

  • Lead a high-visibility incident response function within a premier casino entertainment organization.

  • Direct a strategic MSSP transition with significant impact on enterprise security operations.

  • Shape long-term improvements in detection engineering, response maturity, and blue-team capabilities.

  • Collaborate with executive leadership, technology teams, legal, compliance, and business stakeholders.

  • Work on complex cybersecurity challenges spanning enterprise endpoints, cloud, identity, network, and email environments.

  • Contribute to a culture of continuous learning through exercises, simulations, and post-incident reviews.

  • Help strengthen security practices aligned with recognized frameworks and regulatory requirements.

  • Pursue meaningful leadership, technical development, and long-term career growth.

Job ID: 5843