Incident Response Team Leader
Posted Updated
Summary
Leads a team of incident response analysts supporting Check Point's enterprise customers across EMEA, acting as the hands-on, customer-facing lead during security incidents — coordinating triage, containment, eradication, and recovery, and delivering executive briefings and post-incident reports. Focus areas include ransomware, cloud, and identity investigations using EDR, SIEM, and forensic tools
We are seeking an experienced Incident Response Team Leader to lead a team of IR analysts supporting enterprise customers across EMEA. This is a hands-on leadership role focused on cyber incident management, customer engagement, threat containment, and operational excellence.
- Lead and mentor a team of Incident Response analysts during active security incidents
- Serve as the primary customer-facing lead during investigations and crisis situations
- Coordinate incident triage, containment, eradication, and recovery efforts
- Deliver executive-level communications, incident briefings, and post-incident reporting
- Drive operational readiness, process improvement, and collaboration across security teams
- 5+ years of experience in Incident Response, or DFIR
- Strong knowledge of ransomware, cloud, identity, and enterprise attack investigations
- Excellent customer-facing communication and stakeholder management skills
- Experience leading remote teams in high-pressure environments
- Proficient with EDR, SIEM, threat intelligence, and forensic investigation tools
- GIAC, GCFA, GCIH, CISSP, or similar certifications
Preferred
- Fluent in English
- Experience in consulting or managed security services environments