Lead and mentor a team of reverse engineers, design scalable solutions, and conduct full‑scope reverse engineering across hardware, firmware, software, and network protocols.
Lead enterprise incident response and cyber crisis engagements from detection through recovery, directing investigations across host, network, cloud, identity, and SaaS environments, and driving AI-assisted workflows to improve investigation speed and reporting quality.
Compensation
$126,710.00 - $188,840.00 Annual
Responsibilities
Lead enterprise incident response and cyber crisis engagements from detection through recovery
Direct host, network, cloud, identity, and SaaS investigations across Windows, Linux, macOS, Microsoft 365, AWS, Azure, and hybrid environments
Perform advanced threat hunting and compromise assessments using SIEM, EDR, forensic, and threat intelligence platforms
Develop containment, eradication, and remediation strategies aligned to business risk
Produce executive briefings, technical reports, board‑ready updates, and post‑incident reviews
Requirements
Master’s degree in Arts/Sciences (MA/MS) or equivalent experience
Lead enterprise incident response and cyber crisis engagements, directing investigations across multiple platforms and driving AI-assisted workflows to improve operational efficiency.
Responsibilities
Lead enterprise incident response and cyber crisis engagements from detection through recovery
Direct host, network, cloud, identity, and SaaS investigations across Windows, Linux, macOS, Microsoft 365, AWS, Azure, and hybrid environments
Perform advanced threat hunting and compromise assessments using SIEM, EDR, forensic, and threat intelligence platforms
Develop containment, eradication, and remediation strategies aligned to business risk
Produce executive briefings, technical reports, board-ready updates, and post-incident reviews
Requirements
Bachelor's degree in Cybersecurity, Computer Science, Information Security, Engineering, Intelligence Studies, or a related discipline
Support and improve the overall cybersecurity posture of the Sponsor’s systems and applications, including incident response, vulnerability assessment, and security monitoring.
Responsibilities
Deliver improvements in cybersecurity posture
Design, implement, and optimize security monitoring solutions
Lead and participate in cyber incident response activities
Develop and refine incident response playbooks
Conduct vulnerability assessments and penetration tests
Lead and manage security incidents across EMEA, bridging follow-the-sun operations across global time zones.
Locations (3)
United Kingdom
Ireland
Poland
Responsibilities
Lead triage, scoping, containment, and eradication for medium-to-high severity security incidents across endpoint, identity, SaaS, and cloud environments.
Investigate identity compromises, phishing campaigns, and suspicious account activities using Google Admin Console.
Analyse ingress edge telemetry, CDN traffic patterns, WAF events, and web server logs to detect, trace, and mitigate web attacks, DDoS conditions, and botnet/scraping abuse.
Maintain and continuously update incident response plans and runbooks for efficient incident response, collaborating with engineering to automate containment workflows.