Cyber Incident Manager

Incident Response and Leadership

• Lead incident management activities in response to all high priority cyber-security incidents, with the ability to remain calm and focused during crisis situations.
• Ability to manage conflicting priorities and multiple tasks in a high-pressure environment.
• Strong leadership skills with the ability to motivate and manage response teams during high-pressure situations.
• Co-ordinate resources across the organisation to develop and execute response plans that ensure cyber-security incidents are managed effectively and efficiently and limit or mitigate business impact.
• Communicate effectively with internal stakeholders, including senior leadership with the ability to provide rapid and concise summaries of complex situations.
• Deliver and co-ordinate Post Incident activities which include producing detailed incident reports and conducting Post Incident Reviews.
• Contribute to and participate in cyber-security incident readiness activities which can include simulations and tabletop exercises.

• Identify gaps and continuously improve detection and response capabilities by creating and fine-tuning use cases, developing automation and documenting processes and playbooks.
• Identifying lessons learned to improve future incident response and detection strategies.
• Contribute to development of detection mechanisms for sophisticated adversarial techniques based on the MITRE ATT&CK framework.

• Support the planning and response of purple teaming activities.
• Develop scenarios and artifacts that mimic real-world adversary groups for simulated testing.

• Mentor and coach a multidisciplinary team of analysts and investigators, from a technical perspective.
• Contribute to CTF exercises or other similar initiatives to maintain continuously development of team skills.
• Champion new processes and run coaching sessions to cross skill team members.
• Assist the leadership team with quality control and feedback reviews.
• Develop training materials and deliver training as part of the team's continuous development.
• Conduct and lead in Cyber Incident Response exercises.

• Operations Management & Issue Resolution:
  Ensure smooth operations and continuity by proactively identifying and addressing operational issues, team dynamics, and inefficiencies in ticket handling. Flexible working arrangement:
  Remote working with occasional in person team building activities.
• Collaborative Culture:
  Experience a supportive and inclusive work environment that values teamwork and innovation. We believe in open communication and knowledge sharing, ensuring that every team member feels empowered and valued.
• Work-Life Balance:
  We understand the importance of maintaining a healthy work-life balance. Our flexible working arrangements and supportive policies enable you to excel in your role while enjoying your personal life.
• Report Writing:
  Ability to write reports that convey highly technical information whilst remaining accessible to a non-technical audience (including at executive level).
• Communication:
  Exhibit excellent written/verbal communication skills, with the ability to develop documentation and explain technical details in a concise manner.
• Mentorship: training and guiding junior team members, promoting a culture of knowledge sharing and continuous learning.
• Critical Thinking, Adaptability & Problem-Solving:
  Demonstrate strong analytical skills and flexibility to adapt to changing priorities and emerging cybersecurity threats while effectively solving problems.
• Time Management & Organization:
  Prioritize tasks efficiently and maintain organized documentation and processes to enhance team productivity.
• Teamwork & Positive Attitude:
  Foster a collaborative environment where team members feel supported, practicing active listening, motivating the team, and maintaining a positive demeanour, especially in high-pressure situations.
• 5+ years of experience in an Incident Management role, with a minimum of 3 years in a SOC or incident response leadership role.
• Relevant advanced certifications (e.g., GCIA, GSEC, CEH, GCDA, GCIH, GCFA, OSCP) are highly…