Incident Response Director

About the role

A Director of Incident Response is sought to lead an established team supporting critical national infrastructure, government and other high-profile environments. The role owns cyber incident management across several client environments, coordinates specialist response teams and turns technical findings into clear business risks and recommendations for CISOs and senior stakeholders.

Key responsibilities

• Lead the Incident Response function across multiple client environments
• Manage incident priorities, critical escalations and response outcomes
• Coordinate SOC, IR, DFIR, threat-hunting and cloud security specialists
• Maintain high standards across incident governance, reporting and service delivery
• Improve response processes, playbooks and team capability

Required profile

• Senior leadership experience in Incident Management, Incident Response, SOC, DFIR or Cyber Defence
• Proven experience managing and developing a cyber response team
• Experience handling multiple complex cyber incidents from escalation through containment, recovery and review
• Strong understanding of SOC operations and the full incident response lifecycle
• Confidence advising CISOs, clients and senior stakeholders
• Nice to have: experience with AI, GenAI or LLM-related incidents, knowledge of OWASP LLM guidance or MITRE ATLAS, and background in critical national infrastructure, government, consulting or client-facing cybersecurity

Required skills

• SIEM, EDR, XDR and cloud incident response
• Certifications such as GCIH, GCFA, GCIL, CISSP, CISM, CCSP, CREST CCIM or equivalent

What we offer

• Permanent, full-time position in the United Arab Emirates, on-site or hybrid
• Start date of January 2027
• Competitive basic salary plus benefits