Job Search

We are seeking an experienced Assistant Vice President, Crisis & Incident Responder to lead the coordination and management of significant technology, operational, and business incidents. This role will act as a senior point of escalation during high-impact events, ensuring that response activities are structured, timely, and aligned with established resilience and risk-management practices. You will work closely with technology, cybersecurity, operations, communications, risk, compliance, and executive stakeholders to protect critical services and minimise business disruption.

Responsibilities will include directing incident response bridges, establishing impact assessments, assigning actions, maintaining clear executive-level communications, and ensuring accurate, timely status reporting throughout an event. You will assess severity and business impact, coordinate internal and external support teams, manage escalations, and help determine recovery priorities. Following incidents, you will lead post-incident reviews, identify root causes and control weaknesses, track remediation plans, and provide meaningful management information on trends, performance, and recurring risks. You will also contribute to crisis exercises, scenario testing, response playbooks, business continuity planning, and the ongoing improvement of incident-management processes and tooling.

The successful candidate will have substantial experience in major incident management, crisis response, operational resilience, technology operations, or a related discipline, ideally within a complex, highly regulated, or global environment. You should be confident making decisions under pressure, communicating with senior audiences, and coordinating diverse teams during periods of uncertainty. Strong analytical, organisational, and stakeholder-management skills are essential, together with the ability to translate technical or operational issues into clear business impacts. Experience with service-management frameworks, crisis-management methodologies, business continuity, cybersecurity incidents, and structured problem management is highly desirable. Professional certifications in areas such as IT service management, business continuity, operational resilience, or risk management would be advantageous.

We are seeking a Cyber Defense Incident Responder – Assistant Director to lead the identification, investigation, containment, and recovery of cybersecurity incidents across a complex technology environment. This senior role will provide operational leadership to incident response activities, helping protect critical systems, data, and services from evolving cyber threats. You will oversee the coordination of high-severity incidents, ensure timely escalation, and support clear communication with technical teams, senior stakeholders, and relevant external parties.

Key responsibilities include developing and maintaining incident response procedures, playbooks, and escalation frameworks; directing investigations into suspected security breaches, malware infections, unauthorized access, and other cyber events; and coordinating forensic analysis, threat hunting, containment, eradication, and recovery activities. You will assess the potential impact of incidents, ensure accurate documentation and reporting, and lead post-incident reviews to identify lessons learned and strengthen defensive capabilities. The role will also contribute to security monitoring improvements, tabletop exercises, metrics, risk assessments, and the continuous enhancement of detection and response processes. You may supervise or mentor incident responders and help build a culture of operational readiness across security and technology teams.

Applicants should have substantial experience in cyber defense, security operations, digital forensics, or incident response, including experience managing complex or high-impact incidents. Strong knowledge of attack techniques, threat intelligence, vulnerability management, network and endpoint security, and common security frameworks is required. Experience with SIEM, EDR, SOAR, forensic, and case-management technologies will be highly valued. Professional security certifications such as CISSP, CISM, GIAC, or equivalent qualifications are desirable. You will need excellent analytical, leadership, communication, and decision-making skills, with the ability to remain calm under pressure, translate technical risk for non-technical audiences, and coordinate multiple teams during time-sensitive events. A commitment to confidentiality, continuous learning, and resilient security operations is essential.

We are seeking a Senior Manager, Global Cyber Security Incident Response to lead and evolve a global incident response capability. This role will be responsible for directing the identification, containment, investigation and recovery of significant cyber security incidents across a complex, international environment. You will provide calm, decisive leadership during high-impact events, coordinate technical and business stakeholders, and ensure that response activities protect critical services, data and customer trust. The role will also contribute to the development of a mature, intelligence-led and continuously improving Global CSIRT function.

Key responsibilities include leading incident response teams and third-party partners through suspected and confirmed security incidents; establishing incident command, escalation and communications processes; and ensuring timely reporting to senior leadership and relevant stakeholders. You will oversee forensic investigations, threat hunting, malware analysis, vulnerability-driven response and post-incident reviews, translating technical findings into clear business risks and practical remediation plans. You will develop and maintain global playbooks, operating procedures, service metrics and readiness plans, while coordinating cyber exercises, simulations and lessons-learned activities. The position will work closely with security operations, technology, risk, legal, privacy, communications and business continuity teams to strengthen resilience and regulatory preparedness.

The successful candidate will bring substantial experience leading cyber security incident response, digital forensics or security operations within a large, distributed organisation. You will have strong knowledge of incident management frameworks, attack techniques, threat intelligence, cloud environments, identity security, network technologies and relevant security tooling. Experience managing high-severity incidents, influencing senior stakeholders and leading geographically dispersed teams is essential. Professional certifications such as CISSP, GCIH, GCFA, CISM or equivalent are desirable. We are looking for an inclusive and collaborative leader with excellent communication skills, sound judgement, strong analytical ability and the confidence to make informed decisions under pressure. The role may require participation in an on-call or out-of-hours escalation rota.

We are seeking an experienced Cyber Defense Incident Responder to lead the identification, investigation, containment, and resolution of cybersecurity incidents across a complex technology environment. In this senior role, you will provide strategic direction and operational leadership for incident response activities, helping to protect critical systems, data, and services from evolving cyber threats. You will coordinate high-priority investigations, assess business impact, and ensure incidents are managed efficiently from initial detection through recovery and post-incident review.

Responsibilities will include leading incident response operations, developing and improving response procedures, and overseeing the use of security monitoring, endpoint detection, network analysis, and threat intelligence tools. You will conduct or guide forensic investigations, analyse indicators of compromise, validate attack vectors, and recommend effective containment and remediation measures. The role will also involve coordinating with infrastructure, applications, risk, privacy, legal, and communications teams during significant incidents. You will prepare executive-level briefings, incident reports, metrics, and lessons-learned reviews, while ensuring that response activities align with applicable policies, regulatory obligations, and industry standards. You may also contribute to cyber exercises, threat hunting, vulnerability remediation, and the development of operational playbooks.

Applicants should have substantial experience in cybersecurity incident response, digital forensics, security operations, or a closely related discipline, together with demonstrated experience leading complex investigations and managing incidents under pressure. Strong knowledge of common attack techniques, malware behaviour, identity and access threats, cloud environments, network security, and security frameworks is required. Experience supervising technical teams, coordinating cross-functional stakeholders, and communicating complex risks to senior audiences is highly desirable. Relevant professional certifications in incident response, digital forensics, security operations, or information security will be advantageous. The successful candidate will demonstrate sound judgement, excellent written and verbal communication skills, a structured investigative approach, and a commitment to continuous improvement and collaborative leadership.

We are seeking a Cyber Defense Incident Responder – Associate Director to lead the identification, investigation, containment, and resolution of complex cybersecurity incidents. This role will provide senior-level direction during high-impact events, helping protect critical systems, data, and business operations from evolving cyber threats. The successful candidate will combine strong technical expertise with sound judgment, clear communication, and the ability to coordinate effectively across security, technology, risk, legal, and business teams.

Key responsibilities include overseeing the end-to-end incident response lifecycle, from triage and forensic investigation through containment, eradication, recovery, and post-incident review. You will lead investigations into malware, ransomware, phishing, account compromise, insider threats, data loss, and other security events. The role will involve analysing logs, endpoint activity, network traffic, identity events, and threat intelligence to determine attack scope, root cause, and business impact. You will also maintain and improve incident response procedures, playbooks, escalation processes, and crisis communications, while ensuring incidents are documented accurately and lessons learned are translated into measurable security improvements.

The ideal candidate will have substantial experience in cyber defense, digital forensics, security operations, or incident response, including proven experience leading investigations and coordinating responses to significant incidents. Strong knowledge of common attack techniques, security monitoring platforms, endpoint detection and response tools, SIEM technologies, cloud environments, identity systems, and forensic methodologies is expected. Professional certifications such as CISSP, GCIH, GCFA, GCIA, or equivalent qualifications are advantageous. Excellent written and verbal communication skills are essential, together with the ability to explain technical risk to senior stakeholders and remain composed in high-pressure situations. Experience managing or mentoring security professionals and contributing to strategic security initiatives will be highly valued.

We are seeking a Cyber Defense Incident Responder – Associate Director to lead the identification, investigation, containment, and resolution of sophisticated cybersecurity incidents. This role will provide senior-level technical direction during high-impact events, coordinate response activities across security, technology, risk, legal, and business teams, and help strengthen the organisation’s overall cyber resilience. The successful candidate will be comfortable operating in a fast-paced environment where sound judgment, clear communication, and decisive action are essential.

Responsibilities include managing the end-to-end incident response lifecycle, including detection triage, scoping, forensic investigation, threat containment, eradication, recovery, and post-incident review. You will analyse security alerts and telemetry from SIEM, endpoint detection and response, network monitoring, identity, cloud, and other security platforms. The role will lead investigations involving malware, ransomware, phishing, credential compromise, insider threats, data loss, cloud security events, and advanced persistent threats. You will develop and maintain incident response playbooks, improve operating procedures, support cyber exercises, and provide concise briefings and written reports for senior stakeholders. The position will also help mentor analysts and responders, coordinate third-party support when required, and contribute to threat hunting and proactive detection engineering.

Applicants should have substantial experience in cyber incident response, digital forensics, security operations, or a closely related discipline, including experience leading investigations or response teams. Strong knowledge of attack techniques, incident handling frameworks, network and host-based analysis, identity security, cloud environments, and common security tooling is required. Experience with scripting or automation, forensic utilities, and threat intelligence platforms is desirable. Relevant certifications such as CISSP, GIAC, GCIH, GCFA, or equivalent qualifications would be advantageous. You should demonstrate excellent analytical and problem-solving skills, the ability to prioritise under pressure, and confidence communicating complex technical issues to both technical and non-technical audiences. The role may involve participation in an on-call rota and responding to critical incidents outside standard working hours.

We are seeking a Cyber Defense Incident Responder – Associate Director to lead the identification, investigation, containment, and remediation of complex cybersecurity incidents. This role will provide senior technical direction during high-impact events, helping to protect critical systems, sensitive information, and business operations. You will work closely with security operations, threat intelligence, digital forensics, infrastructure, application, and risk teams to coordinate effective incident response across the organisation.

Key responsibilities include directing the end-to-end response to suspected and confirmed security incidents; assessing alerts and evidence to determine scope, severity, and business impact; developing containment, eradication, and recovery strategies; and ensuring that response actions are documented clearly and completed within agreed timeframes. You will lead investigations involving endpoint, identity, network, cloud, application, and email environments, using forensic analysis and threat-hunting techniques to identify attacker activity and persistence. The role will also contribute to incident response playbooks, crisis exercises, detection improvements, post-incident reviews, and executive-level reporting. You will help establish consistent processes, mentor incident responders, and support continuous improvement of defensive capabilities and operational resilience.

The successful candidate will bring significant experience in cyber incident response, security operations, digital forensics, or a closely related discipline, together with demonstrated experience leading complex investigations and coordinating cross-functional response teams. Strong knowledge of attack frameworks, malware analysis, network and endpoint security, cloud environments, identity systems, and common security tooling is expected. Experience with SIEM, EDR, SOAR, threat intelligence, and forensic platforms is highly desirable. Relevant professional certifications in incident handling, security, forensics, or cloud technologies are advantageous. You should be an analytical and decisive leader with excellent written and verbal communication skills, capable of explaining technical risk to both specialist and senior non-technical audiences. The role may require participation in an on-call or out-of-hours incident response rotation.

We are seeking a Cyber Defense Incident Responder – Associate Director to lead the detection, investigation, containment, and resolution of complex cybersecurity incidents. This senior role will provide technical direction during high-impact events, coordinate response activities across security, technology, risk, legal, and business teams, and help strengthen the organisation’s overall cyber resilience. The successful candidate will act as a trusted escalation point for sophisticated threats, ensuring incidents are managed efficiently, documented accurately, and resolved in line with established procedures and regulatory expectations.

Key responsibilities include leading investigations involving malware, ransomware, phishing, insider threats, account compromise, data exposure, and advanced persistent threats; directing triage, forensic analysis, threat hunting, containment, eradication, and recovery efforts; and validating the effectiveness of response actions. You will develop and maintain incident response playbooks, improve operational processes, contribute to tabletop exercises, and deliver clear briefings to senior stakeholders. The role will also involve mentoring incident responders, supporting the development of detection and monitoring capabilities, partnering with intelligence teams to assess emerging threats, and driving lessons-learned reviews and remediation initiatives following significant incidents.

Applicants should have substantial experience in cyber incident response, digital forensics, security operations, or a closely related discipline, together with proven experience leading complex investigations and coordinating cross-functional teams. Strong knowledge of security monitoring, endpoint detection and response, network analysis, identity security, cloud environments, malware analysis, and forensic tooling is expected. Professional certifications such as CISSP, GCFA, GCIH, GCIA, or equivalent credentials are desirable. Excellent communication, decision-making, and stakeholder-management skills are essential, as is the ability to remain calm and effective during high-pressure situations. Experience in a regulated or enterprise environment, familiarity with incident response frameworks such as NIST or SANS, and a commitment to continuous improvement would be advantageous.

We are seeking an experienced Cyber Defense Incident Responder to lead and coordinate the response to complex cybersecurity incidents across a diverse technology environment. In this Assistant Director-level role, you will provide strategic direction and hands-on expertise throughout the incident lifecycle, from detection and triage through containment, eradication, recovery, and post-incident review. You will help strengthen operational resilience, protect critical information assets, and ensure that response activities are timely, coordinated, and well documented.

Key responsibilities include directing investigations into suspected and confirmed security incidents; assessing business and technical impact; coordinating response activities with security operations, infrastructure, applications, legal, risk, privacy, communications, and executive stakeholders; and providing clear situation updates to senior leadership. You will develop and maintain incident response procedures, playbooks, escalation criteria, and reporting standards. The role will also involve leading root-cause analysis, identifying control improvements, supporting threat hunting and forensic investigations, and ensuring lessons learned are incorporated into defensive strategies. You may oversee third-party responders and participate in an on-call or escalation rotation when required.

Applicants should have substantial experience in cyber incident response, digital forensics, security operations, or a closely related discipline, together with experience leading investigations and managing high-impact events. Strong knowledge of attack techniques, threat intelligence, endpoint and network telemetry, identity systems, cloud environments, vulnerability management, and security monitoring is expected. Familiarity with frameworks such as NIST or SANS and experience using SIEM, EDR, SOAR, case management, and forensic tools are highly desirable. Excellent communication, judgement, prioritisation, and stakeholder-management skills are essential, as is the ability to explain technical risk to non-technical audiences. Relevant professional certifications and a degree or equivalent practical experience in cybersecurity, information technology, or a related field are advantageous.

We are seeking an experienced Cyber Defense Incident Responder to support the leadership and delivery of a modern cyber defense function. In this role, you will help direct the identification, investigation, containment, and remediation of security incidents across enterprise systems, networks, applications, and cloud environments. You will serve as a senior escalation point for complex incidents, helping to ensure that threats are managed quickly, consistently, and in line with established response procedures.

Key responsibilities include coordinating incident response activities, assessing alerts and intelligence, leading forensic investigations, and analysing evidence from endpoint, network, identity, and cloud security platforms. You will develop and refine playbooks, procedures, and response workflows; support threat hunting and proactive detection improvement; and provide clear technical updates to senior stakeholders during high-impact events. The role will also involve conducting post-incident reviews, identifying root causes, tracking corrective actions, and contributing to security metrics, risk reporting, and operational resilience initiatives. You may also be asked to coach analysts, coordinate incident simulations, and collaborate with infrastructure, engineering, legal, privacy, and business teams.

Applicants should have substantial experience in cyber incident response, digital forensics, security operations, or a related discipline, together with experience handling complex or high-severity incidents. Strong knowledge of security monitoring, endpoint detection and response, SIEM technologies, network analysis, malware investigation, vulnerability management, and cloud security is expected. Familiarity with recognised incident response frameworks and industry standards is highly desirable. Excellent analytical, communication, decision-making, and leadership skills are essential, along with the ability to remain calm under pressure and translate technical findings for non-technical audiences. Relevant professional certifications or equivalent practical experience will be advantageous.