{"id":77177,"url":"https://alion.io/job/bitdefender-incident-response-manager","title":"Incident Response Manager","company":{"id":11797,"name":"Bitdefender","domain":"bitdefender.com","url":"https://alion.io/company/bitdefendersrl","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":100,"open_postings":4,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":57,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bucharest, Romania"],"countries":["RO"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":39000,"max_usd":91000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2094},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Commander.js","optional":false},{"name":"Incident Management","optional":false},{"name":"ITIL","optional":false},{"name":"JavaScript","optional":true},{"name":"Jira","optional":true},{"name":"Node JS","optional":true},{"name":"SIEM","optional":true},{"name":"VPN","optional":true}],"status":"live","first_seen_at":"2026-07-30T10:51:19Z","employer_posted_date":"2026-07-31","last_verified_at":"2026-10-18T08:33:39Z","board_verified":true,"closed_at":null,"days_open":79,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":79},"description":"Bitdefender is a cybersecurity leader delivering best-in-class threat prevention, detection, and response solutions worldwide. Guardian over millions of consumer, enterprise, and government environments, Bitdefender is one of the industry’s most trusted experts for eliminating threats, protecting privacy, digital identity and data, and enabling cyber resilience. With deep investments in research and development, Bitdefender Labs discovers hundreds of new threats each minute and validates billions of threat queries daily. The company has pioneered breakthrough innovations in antimalware, IoT security, behavioral analytics, and artificial intelligence and its technology is licensed by more than 180 of the world’s most recognized technology brands. Founded in 2001, Bitdefender has customers in 170+ countries with offices around the world. For more information, visit https://www.bitdefender.com\nThe Enterprise Support and Services team based in Bucharest is looking for a new enthusiastic member!\nAs an Incident Response Manager, you will be reporting directly to the Director of Enterprise Support and Services. You will lead the coordination of security incidents affecting our enterprise customers, acting as incident commander from identification through resolution and post-incident review. You will also be the bridge between Enterprise Support and Services and our digital forensics and incident response (DFIR) team, ensuring that incidents flow smoothly between the two organizations, with clear ownership, clean hand-offs and no loss of momentum.\nThis is a senior position. We are looking for someone who has managed security incidents before and can establish the incident response processes, escalation paths and playbooks that keep response fast and well-coordinated. The right person will be comfortable interfacing with clients and managing intricate and sensitive client relationships, remaining composed and decisive under pressure, and fostering these relationships until resolution has been reached. For our strategic accounts, you will act as a trusted advisor and their voice inside the company during and after an incident.\nWe expect the ideal candidate to contribute to our positive team culture by sharing our values: outstanding service to our customers, partners, and each other; respect, accountability, and excellence in everything we do.\nIn this process, you will work closely with the DFIR team, enterprise support engineers and escalation managers, as well as security or sales experts, in a dynamic and competitive environment, which will enrich your experience and broaden your perspective.\nResponsibilities\nLead the coordination of major security incidents affecting enterprise customers, acting as incident commander from identification through containment, resolution and post-incident review\nAct as the primary interface between Enterprise Support and Services and the DFIR team, ensuring clear ownership, clean hand-offs and effective collaboration throughout the incident lifecycle\nEstablish and maintain incident response processes, escalation paths and playbooks, and continuously improve them based on lessons learned\nAct as a trusted advisor and the voice of strategic accounts inside the company during and after security incidents\nCoordinate containment, eradication and recovery activities together with the DFIR team, the MDR SOC and engineering teams\nProvide clear, timely and accurate status updates to customers and internal senior stakeholders, tailoring the message to each audience\nInitiate and manage the hierarchical escalation process for high-severity incidents, engaging senior stakeholders when needed\nOwn the post-incident review process: after-action reports, lessons learned and follow-up actions tracked to closure\nSupport incident readiness through playbook development, tabletop exercises and escalation drills\nDefine, monitor and report on incident management KPIs and SLAs, and use these insights to drive continuous service improvement\nParticipate in an on-call rotation to ensure incident response coverage outside standard business hours\nBuild strong relationships with other internal teams: DFIR, MDR SOC, enterprise support, product delivery, product management and sales\nAdhere to our company’s values and principles\nTechnical requirements\nMinimum 5 years of professional experience in the following areas:\nIncident response management, with proven experience running major security incidents end to end\nBuilding or maturing incident response processes, playbooks and escalation procedures\nWorking alongside or within DFIR, SOC or security operations teams\nGood understanding of attacker tactics, techniques and procedures (TTPs) and the MITRE ATT&CK framework\nIT Service Management and incident management processes (ITIL knowledge is desirable)\nStrong IT technical background: operating systems, virtualization, networking\nWorking knowledge of IT security technologies, for example:\nEDR / XDR\nSIEM and security monitoring\nNetwork security (firewalls, IDS/IPS, VPN)\nCloud and email security\nThreat intelligence and threat hunting\nOther requirements\nIndustry-standard incident response certifications - GIAC (e.g., GCIH, GCFA, GNFA) and/or CREST (e.g., CREST Certified Incident Manager) - or equivalent\nProven ability to remain composed and lead effectively in high-stress, high-pressure situations\nExcellent verbal and written communication skills, quick learner, dynamic, energetic and customer-oriented\nAble to translate technical findings for executive and non-technical audiences\nProven ability to lead, influence, and coordinate across functional groups not directly in the reporting structure\nExperience creating and improving procedures, processes and documentation\nExperience implementing methodologies to improve customer satisfaction and build strong internal relationships\nWork independently; receive minimal guidance\nExperience dealing with international teams and customers\nDemonstrated strong work ethic\nAbility to work in a fast-paced environment\nAvailability to participate in an on-call rotation\nPrior experience working with business applications, like Salesforce, Jira, Office\nFluent in both written and spoken Romanian and English\nFrench is a plus#LI-SA1","description_format":"text","description_chars":6257,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Romanian","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Romania","iso":"RO","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Threat Intelligence","Endpoint Security","Managed Security"],"lifecycle":[{"event":"open","at":"2026-07-30T10:51:19Z"}],"visa":[],"liveness":{"score":35,"band":"fade","label":"Fading","p_open":1,"p_active":0.793,"p_room":0.44,"age_days":78,"expected_fill_days":57,"reasons":["conf:2","velocity","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/bitdefender-incident-response-manager","json_url":"https://alion.io/job/bitdefender-incident-response-manager.json","meta":{"generated_at":"2026-10-18T09:53:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14602,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":11797},"rest":"https://alion.io/mcp/rest/get_company?id=11797"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbitdefender-incident-response-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbitdefender-incident-response-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbitdefender-incident-response-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bitdefender-incident-response-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbitdefender-incident-response-manager"}]}