Manager, Incident Response

About This Opportunity

We are representing a confidential cybersecurity organization in their search for a Manager, Incident Response based in the United Kingdom. Our client is a leader in managed security services, recognized globally for innovation and operational excellence in protecting organizations from cyber threats.

This is a strategic leadership role that combines team management, operational oversight, and hands-on technical incident response expertise. You will lead a team of digital forensics and incident response professionals while maintaining the technical depth required to support complex investigations, ransomware engagements, business email compromise cases, and large-scale recovery efforts.

Responsibilities

Team Leadership & People Management

• Lead, mentor, develop, and manage a hybrid/remote team of Incident Response professionals
• Recruit, hire, onboard, train, and retain top DFIR talent
• Conduct performance reviews, career development planning, coaching sessions, and succession planning
• Foster a culture of collaboration, accountability, technical excellence, and continuous improvement
• Serve as an escalation point for personnel, client, and delivery-related issues

Incident Response Operations

• Oversee delivery of Incident Response services ensuring consistent, scalable, and high-quality outcomes
• Scope incoming matters and manage incident response engagements across the team
• Assign personnel to engagements based on skillsets, availability, and customer needs
• Maintain awareness of all active investigations and step in when escalation is required
• Review incident reports, executive summaries, investigative findings, and customer deliverables prior to delivery
• Establish and maintain KPIs, service metrics, and operational reporting capabilities
• Drive continuous improvement initiatives that enhance efficiency and customer satisfaction

Technical Incident Response & Forensics

• Lead and support advanced digital forensic and incident response investigations
• Conduct and oversee host, network, cloud, and log-based forensic analysis
• Perform investigative activities involving Windows, Linux, macOS, Azure, AWS, and Google Cloud environments
• Guide containment, eradication, recovery, and remediation activities during active security incidents
• Validate investigative findings and technical conclusions developed by team members
• Conduct forensic analysis to determine threat actor activity, timeline, persistent mechanisms, and indicators of compromise
• Participate directly in the most complex, high-risk, or high-visibility engagements

Customer & Stakeholder Engagement

• Serve as a senior trusted advisor during active cybersecurity incidents
• Communicate technical findings to executive leadership, legal counsel, insurance carriers, and technical stakeholders
• Lead scoping discussions and engagement planning for new incident response matters
• Support cyber extortion and ransomware negotiation strategy development
• Present recovery plans, investigative findings, and strategic recommendations to customer stakeholders
• Build and maintain relationships with legal counsel, cyber insurance carriers, and strategic partners

Strategic Leadership & Program Development

• Partner with leadership to execute vision, strategy, and growth plans for the Incident Response organization
• Identify opportunities for automation, innovation, tooling improvements, and operational efficiencies
• Define and standardize processes, methodologies, documentation, and service delivery frameworks
• Drive reporting and analytics initiatives that demonstrate business impact and operational efficiency
• Support strategic planning, budgeting, forecasting, and workforce planning initiatives

What We're Looking For

Required Qualifications

• 3+ years of experience leading technical teams, people management, or service delivery organizations
• Demonstrated experience leading complex cyber incident investigations and recovery efforts
• Strong knowledge of host, network, cloud, and enterprise forensic analysis
• Experience managing customer-facing engagements involving legal counsel, cyber insurance carriers, and executive stakeholders
• Exceptional verbal and written communication skills
• Experience developing operational processes, performance metrics, and quality assurance programs
• Ability to lead multiple concurrent initiatives and prioritize effectively in high-pressure environments
• Fluency in English, verbal and written

Preferred Qualifications

• Bachelor's degree in Information Security, Digital Forensics, Computer Science, Cybersecurity, or related discipline
• Industry certifications such as GCFA, GCFE, CISSP, GCIH, EnCE, ACE, or equivalent
• Experience within consulting, managed security services, or incident response service organizations
• Experience presenting at industry conferences, customer events, or technical forums
• Experience supporting large-scale enterprise incident response programs and global service delivery teams

Key Skills

• Digital Forensics & Incident Response (DFIR)
• Leadership and Team Development
• Incident Command and Crisis Management
• Cyber Extortion and Ransomware Response
• Executive Communication and Customer Relationship Management
• Strategic Planning and Operational Excellence
• Process Development and Standardization
• Performance Metrics and Reporting
• Cloud and Enterprise Incident Response
• Cross-Functional Collaboration and Project Management

How We Work With You

Get A Job.ai is representing our client in this confidential search. When you apply through our platform at getajob.ai, our recruiting team will review your qualifications and conduct an initial screening. Qualified candidates will be presented to our client for consideration. Please apply exclusively through Get A Job.ai and do not attempt to contact the client directly, as we are managing this search on their behalf.

Equal Employment Opportunity

Get A Job.ai is committed to fostering an inclusive recruitment process. We consider all qualified applicants and provide accommodations as needed throughout the hiring process.