Incident Response Team Leader

The Incident Response Team Leader is responsible for leading cybersecurity incident response activities, managing complex investigations, and overseeing the delivery of incident response services across customer and enterprise environments. The role provides technical leadership, operational oversight, and strategic direction for incident response engagements while ensuring effective coordination of resources during security incidents. 

This role serves as the primary escalation point for major cybersecurity incidents and plays a key role in strengthening incident response readiness, improving operational maturity, and ensuring compliance with NCSC licensing requirements.

Responsibilities:

Incident Response Leadership 

• Lead cybersecurity incident response engagements from identification through recovery. 
• Direct technical response teams during Major security incidents, Ransomware attacks and Data breaches 
• Coordinate containment, eradication, recovery, and remediation activities. 
• Act as the primary incident commander during major incidents. 

Advanced Incident Investigation 

• Oversee complex investigations involving Malware outbreaks, Insider threats, Targeted attacks and Data exfiltration incidents
• Validate investigation findings and response recommendations. 
• Provide technical leadership during high-severity incidents.