Senior Manager – Incident Response

About the role

As Senior Manager of the Incident Response & Forensics team, you will lead blue‑team operations for a high‑impact, operationally critical cyber‑defence environment. You will combine deep technical expertise in digital forensics with people‑management responsibilities, acting as the main escalation point for crisis management and decision‑making.

Key responsibilities

• Own and oversee a team delivering reactive and proactive defensive security projects, including a DFIR lab for an on‑site VIP customer.
• Serve as technical lead on active incident response engagements, coordinating investigations, threat hunting and resolution of large‑scale incidents.
• Lead host‑ and network‑based forensics across Windows, Linux, macOS and mobile platforms, and produce detailed technical reports for stakeholders.
• Drive continuous improvement of the DFIR service, document processes and mentor team members.

Required profile

• Minimum 10 years of IT security experience, with at least 6 years in an incident response role and 4 years managing such teams.
• Strong English communication skills, both spoken and written, and the ability to explain technical findings to non‑technical audiences.
• Proven ability to stay calm under pressure, work in rotating shift/on‑call schedules and make immediate impact.

Required skills

• Expert knowledge of blue‑team operations, threat hunting and network forensic principles.
• Deep experience with digital forensics methodologies and tools across Windows, Linux and macOS.
• Familiarity with PICERL, NIST IR standards and industry incident handling processes (e.g., 800‑61 r2).
• Scripting skills in Shell, Python or PowerShell are a plus.