[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"seo-content-expertise-forensic-methodology-us":3,"job-search-\u002Fen-us\u002Fjobs-by-expertise\u002Fforensic-methodology":4,"expertise-filters-\u002Fen-us\u002Fjobs-by-expertise\u002Fforensic-methodology":73,"featured-jobs-\u002Fen-us\u002Fjobs-by-expertise\u002Fforensic-methodology":186},{},{"total":5,"jobs":6},1,[7],{"id":8,"slug":9,"title":10,"raw_title":11,"is_featured":12,"company":13,"raw_hiringOrganization_logo_url":11,"processed_city_gmaps":16,"processed_country_iso_code_gmaps":18,"processed_home_office":20,"processed_salary_min":21,"processed_salary_max":22,"processed_salary_currency":23,"processed_salary_source":24,"processed_working_hours":25,"processed_employment_types":27,"processed_it_skills":28,"processed_it_skills_labels":30,"processed_job_expertise_skills":57,"processed_job_expertise_skills_labels":58,"max_cpc":5,"actual_cpc":72},57190,"manager-security-incident-response-5h0-hub-international-limited","Manager, Security Incident Response",null,false,{"name":14,"slug":15,"logo_url":11},"Hub International Limited","hub-international-limited",[17],"Chicago",[19],"US","onsite",130000,150000,"USD","estimated",[26],"FULL_TIME","permanent",{"aws":29,"cdn":29,"dns":29,"edr":29,"gcp":29,"waf":29,"http":29,"o365":29,"saml":29,"sans":29,"siem":29,"soar":29,"azure":29,"entra":29,"oauth":29,"python":29,"tcp\u002Fip":29,"powershell":29,"nist 800-61":29,"log analysis":29,"shell scripting":29,"digital forensics":29,"evidence handling":29,"incident response":29,"timeline reconstruction":29,"microsoft active directory":29},4,[31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56],"PowerShell","Python","Shell scripting","TCP\u002FIP","DNS","CDN","HTTP","WAF","OAuth","SAML","AWS","Azure","GCP","Microsoft Active Directory","Entra","O365","SIEM","EDR","SOAR","Digital forensics","Incident response","Log analysis","Timeline reconstruction","Evidence handling","NIST 800-61","SANS",{"threat hunting":29,"kpi development":29,"team management":29,"project management":29,"tabletop exercises":29,"root cause analysis":29,"forensic methodology":29,"playbook development":29,"technical archeology":29,"detection engineering":29,"security policy compliance":29,"escalation framework design":29,"incident response management":29},[59,60,61,62,63,64,65,66,67,68,69,70,71],"Incident Response Management","Detection Engineering","Threat Hunting","Forensic Methodology","Root Cause Analysis","KPI Development","Team Management","Project Management","Security Policy Compliance","Technical Archeology","Playbook Development","Escalation Framework Design","Tabletop Exercises",1.5,{"industry":74,"employment_type":81,"expertise_skills":84,"it_skills":113,"salary_currency":182,"processed_working_hours":184},[75,78],{"key":76,"label":77,"count":5},"insurance","Insurance",{"key":79,"label":80,"count":5},"employee benefits brokerage","Employee Benefits Brokerage",[82],{"key":27,"label":83,"count":5},"PERMANENT",[85,87,89,91,93,96,98,101,103,105,107,109,111],{"key":86,"label":60,"slug":86,"count":5},"detection-engineering",{"key":88,"label":70,"slug":88,"count":5},"escalation-framework-design",{"key":90,"label":62,"slug":90,"count":5},"forensic-methodology",{"key":92,"label":59,"slug":92,"count":5},"incident-response-management",{"key":94,"label":95,"slug":94,"count":5},"kpi-development","Kpi Development",{"key":97,"label":69,"slug":97,"count":5},"playbook-development",{"key":99,"label":100,"slug":99,"count":5},"project-management","Project management",{"key":102,"label":63,"slug":102,"count":5},"root-cause-analysis",{"key":104,"label":67,"slug":104,"count":5},"security-policy-compliance",{"key":106,"label":71,"slug":106,"count":5},"tabletop-exercises",{"key":108,"label":65,"slug":108,"count":5},"team-management",{"key":110,"label":68,"slug":110,"count":5},"technical-archeology",{"key":112,"label":61,"slug":112,"count":5},"threat-hunting",[114,117,120,123,126,129,132,134,137,140,143,146,149,151,154,156,159,162,164,167,170,173,176,179],{"key":115,"label":116,"slug":115,"count":5},"aws","Aws",{"key":118,"label":119,"slug":118,"count":5},"ms-azure","MS Azure",{"key":121,"label":122,"slug":121,"count":5},"cdn","Cdn",{"key":124,"label":125,"slug":124,"count":5},"digital-forensics","Digital Forensics",{"key":127,"label":128,"slug":127,"count":5},"dns","Dns",{"key":130,"label":131,"slug":130,"count":5},"edr","Edr",{"key":133,"label":45,"slug":133,"count":5},"entra",{"key":135,"label":136,"slug":135,"count":5},"evidence-handling","Evidence Handling",{"key":138,"label":139,"slug":138,"count":5},"gcp","Gcp",{"key":141,"label":142,"slug":141,"count":5},"http","Http",{"key":144,"label":145,"slug":144,"count":5},"incident-response","Incident Response",{"key":147,"label":148,"slug":147,"count":5},"log-analysis","Log Analysis",{"key":150,"label":44,"slug":150,"count":5},"microsoft-active-directory",{"key":152,"label":153,"slug":152,"count":5},"nist-800-61","Nist 800-61",{"key":155,"label":46,"slug":155,"count":5},"o365",{"key":157,"label":158,"slug":157,"count":5},"oauth","Oauth",{"key":160,"label":161,"slug":160,"count":5},"powershell","Powershell",{"key":163,"label":32,"slug":163,"count":5},"python",{"key":165,"label":166,"slug":165,"count":5},"saml","Saml",{"key":168,"label":169,"slug":168,"count":5},"sans","Sans",{"key":171,"label":172,"slug":171,"count":5},"shell-scripting","Shell Scripting",{"key":174,"label":175,"slug":174,"count":5},"siem","Siem",{"key":177,"label":178,"slug":177,"count":5},"soar","Soar",{"key":180,"label":181,"slug":180,"count":5},"tcpip","Tcp\u002FIp",[183],{"key":23,"label":23,"count":5},[185],{"key":26,"label":26,"count":5},{"total":187,"jobs":188},0,[]]