Head of Security Operations & Incident Response
Core
Lead Security Operations and Incident Management, ensuring effective monitoring, investigation, escalation and response to cybersecurity events and incidents.
Role type
Senior IC Head of Security Operations & Incident Response
Builds
SOC/Security Operations capabilities, incident response frameworks, SOPs, playbooks, and escalation processes
Domain
Cybersecurity / Information Security
Required skills
Incident lifecycle management, SOC leadership, SIEM/EDR/XDR proficiency, threat detection, root-cause analysis, stakeholder management, cyber incident exercises, automation, security analytics
Preferred skills
Digital forensics, Threat Intelligence partnership, MITRE ATT&CK, Cyber Kill Chain, NIST CSF, CISSP/GCIH/GCIA/GCFE/GREM certifications
Technologies
SIEM, EDR, XDR, security analytics, automation tools
Responsibilities
Lead root-cause analysis and post-incident reviews, Drive continuous improvement of Incident Response frameworks, Oversee and strengthen SOC/Security Operations capabilities, Lead cyber incident exercises and simulations, Establish operational metrics and reporting, Lead, mentor and develop Cybersecurity Operations and Incident Response professionals
Seniority
Senior, hands-on IC with leadership responsibilities
