Incident Response Team Leader
Posted
Summary
Leads and mentors a team of Incident Response analysts at Check Point during active security incidents, coordinating triage, containment, eradication, and recovery while acting as the customer-facing lead. Role centers on DFIR work with EDR, SIEM, threat intelligence, and forensic tools, based in Madrid.
- Lead and mentor a team of Incident Response analysts during active security incidents
- Serve as the primary customer-facing lead during investigations and crisis situations
- Coordinate incident triage, containment, eradication, and recovery efforts
- Deliver executive-level communications, incident briefings, and post-incident reporting
- Drive operational readiness, process improvement, and collaboration across security teams
- 5+ years of experience in Incident Response, or DFIR
- Strong knowledge of ransomware, cloud, identity, and enterprise attack investigations
- Excellent customer-facing communication and stakeholder management skills
- Experience leading remote teams in high-pressure environments
- Proficient with EDR, SIEM, threat intelligence, and forensic investigation tools
- GIAC, GCFA, GCIH, CISSP, or similar certifications
Preferred
- Fluent in Spanish as well as English
- Experience in consulting or managed security services environments