Incident response Lead
Core
Lead the identification, assessment, containment, investigation, and resolution of cybersecurity incidents to protect the organization, customers, and services.
Role type
Senior Incident Response Lead
Builds
Secure production environments (cloud, containers, identity systems, networks) and customer-facing applications
Domain
Cybersecurity / Incident Response
Deliverable
client delivery
Required skills
Incident leadership, technical analysis, threat containment, eradication, recovery, stakeholder communication, root cause analysis, corrective action tracking, playbook development, severity modeling, tabletop exercise facilitation
Preferred skills
NIST incident response guidance, ISO/IEC 27035, SANS incident handling practices, MITRE ATT&CK, GCIH, GCFA, GCFE, CISSP, CISM
Technologies
Cloud platforms, containers, enterprise identity systems, networks, customer-facing applications
Responsibilities
Lead major security incidents with clarity and control; Identify and declare incidents while assessing scope and attacker behavior; Contain threats, eradicate root causes, and restore services; Deliver transparent reporting to executives and governance teams; Facilitate root cause analyses for long-term improvements; Track corrective actions to completion.
Seniority
Senior, hands-on IC with leadership responsibilities
