Careers
Incident Coordinator
Security Operations · Remote US on a rotation · Full time · Accepting applications.
About Bridgham Cyber
Bridgham Cyber is a cybersecurity advisory and managed security firm based in Raleigh, North Carolina. The firm serves regulated and semi-regulated US companies of 400 to 1,000 employees: community banks, credit unions, lenders, law firms and investment advisers. Each client engages the firm under one program at one annual fee. The firm holds every client relationship and takes every client call. We commit our people, our judgment and our partner bench to protecting the firms that rely on us. Our people are trusted advisors to boards and management teams, and their work has a lasting impact on the clients they serve.
About the role
The Incident Coordinator holds the incident clock. When the monitoring partner escalates, the coordinator opens the record, reaches the client and the response partner, keeps the two-hour clock to incident start, and writes the timeline the client's board and insurer will read.
Your impact
- Open the incident record when the monitoring partner escalates.
- Reach the client and the response partner.
- Keep the two-hour clock to incident start.
- Write the timeline the client's board and insurer will read.
Who you will work with
The role reports to the Vice President, Delivery. During an incident the coordinator works with the monitoring and response partners and the client's technology lead.
You may be a good fit if you
- Have 3 to 6 years in a SOC, an IR firm or an MDR provider.
- Are calm on the phone at 2 am.
- Write a clean timeline under pressure.
Strong candidates may also have
- GCIH or GCFA.
- Experience working alongside cyber insurers and breach counsel.
- Familiarity with the incident notice rules for banks and credit unions.
Details
- Location
- Remote US on a rotation
- Type
- Full time
- Compensation
- Compensation is set at the 90th percentile of the market for the role. The firm shares the full range, including base salary and any variable component, at the first conversation.
- Start
- On acceptance of an offer. The start date is agreed with each candidate.
- Status
- Accepting applications.
How to apply
Deadline to apply: none. Applications are reviewed on a rolling basis. Send a résumé and one page of recent writing to careers@bridghamcyber.com with the role title in the subject line. The process is a 30-minute introductory call, a short work sample, a second interview and two references. It runs two to three weeks end to end. Bridgham Cyber is an equal opportunity employer and engages contractors on the same basis. The firm considers qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.

