Mgr-Security Incident Response

POSITION OVERVIEW:

Leads the strategic development and execution of security incident response initiatives to enhance the organization's resilience against cyber threats.

ESSENTIAL JOB DUTIES/RESPONSIBILITIES:

1. Manage, lead and develop a professional security incident response team fostering technical growth, security telemetry sourcing, data ingestion, security testing center, and continuous improvement.

2. Oversee planning, design, implementation, testing, and operation of incident response processes and systems to ensure effective threat detection, containment, and remediation.

3. Serve as the Incident Commander during major incidents, by engagement translating technical issues into clear business risks timely and actionable updates for stakeholders and executives.

4. Direct post-incident forensics and root-cause analysis, ensuring lessons learned translate into improved defenses and remediation plans.

5. Plan and execute red/purple team exercises, breach and attack simulation, cyber deception operations and other readiness activities to test and strengthen response capabilities.

6. Develop and maintain incident response playbooks, escalation protocols, cross-team coordination, User and Entity Behavior Analytics (UEBA) program, and model alert correlation processes.

7. Work as an integral part of security management team, supporting business and technology, synchronizing communications and actions.

8. Develop scripts, tools, or processes to enhance team capabilities and operational effectiveness.

9. Foster collaboration with remote teams to ensure consistent incident response and security operations.

10. Comply with all applicable laws/regulations, as well as company policies/procedures.

11. Perform other duties as assigned.

QUALIFICATIONS:

* Bachelor's degree in business, computer science, information systems and / or related field or equivalent formal training

* Five (5) years of experience in information technology, cyber security, or incident.

* Certification in one of the following GCIH/GCFA/GCFE/GNFA/GREM/GPEN/OSCP, preferred

* Knowledge of malware analysis, Lockheed Cyber Kill Chain, Mitre Attack, and network traffic monitoring techniques.

* Experience leading large-scale incidents in a commander role.

* Strong knowledge of post-attack forensics and incident containment strategies

* Experience with security incident response tools and methodologies

* Excellent analytical and problem-solving skills with SIEM data analytics for effective incident investigation of root cause.

* Excellent communication skills for clear reporting and collaboration with technical teams and executives

JOB CONDITIONS:

* Some travel required

Preferred Qualifications:

Pay Transparency: The compensation listed reflects the pay range/rate of pay reasonably expected for this position. If this opportunity includes multiple job levels, pay information represents the min/max range for all levels. Actual pay is determined by job-related factors permitted by law, such as relevant experience. Eligible employees offered: Medical/Dental/Vision Plans, EAP, Personal/Sick PTO, 401(k), Bonus Potential, Tuition Reimbursement, Adoption Assistance, Paid Parental Leave, Paid Bereavement, Employee Discounts, Vacation (FT only), Paid Holidays (FT Only). Posting Date: 11/17/25. Will remain posted 60 days (unless filled/cancelled sooner). Current FedEx employees apply at enterprisecareers.fedex.com. Others apply at careers.fedex.com.

Pay: Pay Range: $135,000.00 - $175,000.00 per year

Additional Details: While this is a remote position, the successful candidate must reside within 50 miles of a FedEx Freight location in Dallas TX, Colorado Springs CO, Pittsburgh PA, Memphis TN, Phoenix AZ, Kansas City MO, Milwaukee WI, Chicago IL, or Minneapolis MN

FedEx Freight is an Equal Opportunity Employer, including disabled and veterans.

• Know Your Rights
• Pay Transparency

If you have a disability and you need assistance in order to apply for a position with FedEx Freight, please call 800-888-8252 or e-mail at ADAAssistance@freight.fedex.com.

FedEx Freight will not discharge or in any other manner discriminate against any employee or applicant for employment because such employee or applicant has inquired about, discussed, or disclosed the compensation of the employee or applicant or another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information.