Cyber Defense Incident Responder - Assistant Director
We are seeking an experienced Cyber Defense Incident Responder to lead and coordinate the response to complex cybersecurity incidents across a diverse technology environment. In this Assistant Director-level role, you will provide strategic direction and hands-on expertise throughout the incident lifecycle, from detection and triage through containment, eradication, recovery, and post-incident review. You will help strengthen operational resilience, protect critical information assets, and ensure that response activities are timely, coordinated, and well documented.
Key responsibilities include directing investigations into suspected and confirmed security incidents; assessing business and technical impact; coordinating response activities with security operations, infrastructure, applications, legal, risk, privacy, communications, and executive stakeholders; and providing clear situation updates to senior leadership. You will develop and maintain incident response procedures, playbooks, escalation criteria, and reporting standards. The role will also involve leading root-cause analysis, identifying control improvements, supporting threat hunting and forensic investigations, and ensuring lessons learned are incorporated into defensive strategies. You may oversee third-party responders and participate in an on-call or escalation rotation when required.
Applicants should have substantial experience in cyber incident response, digital forensics, security operations, or a closely related discipline, together with experience leading investigations and managing high-impact events. Strong knowledge of attack techniques, threat intelligence, endpoint and network telemetry, identity systems, cloud environments, vulnerability management, and security monitoring is expected. Familiarity with frameworks such as NIST or SANS and experience using SIEM, EDR, SOAR, case management, and forensic tools are highly desirable. Excellent communication, judgement, prioritisation, and stakeholder-management skills are essential, as is the ability to explain technical risk to non-technical audiences. Relevant professional certifications and a degree or equivalent practical experience in cybersecurity, information technology, or a related field are advantageous.
Cyber Defense Incident Responder - Assistant Director
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Consultant
- Security Analyst
- Identity Access Management IAM
- IT Security Manager
- Security Architect
- Data Protection
- Governance and Compliance
- Cyber Security Consultant
- Risk Analyst
- SOC Analyst
- Application Security
LATEST JOBS
- Data Protection Advisor
- Senior Consultant - IAM Securi...
- Identity and Access Management...
- Security Reverse / Anti-Bot En...
- Security Operations Centre Man...
- Senior Security Architect
- Legal, Data Protection & Infor...
- Cyber Governance and Assurance...
- OT Security Engineer
- Senior Security Operational Ce...
- GRC Analyst
- Cyber Risk Lead (Legacy Coordi...