IR / SOC Lead

We’re looking for an experienced Incident Response Specialist to join our cybersecurity team. In this role, you’ll manage cyber incidents end-to-end — from detection and investigation through containment and full resolution. You’ll work with a range of advanced security tools to defend against evolving threats and have the opportunity to lead and collaborate with a highly talented team.

Key Responsibilities & Requirements:

• Proven Incident Investigation Experience – Skilled at analyzing alerts from EDR, Cloud, and Workspace (Google/O365) systems to detect and validate malicious activity.
• SIEM Expertise – Hands-on experience with tools such as Sentinel, Splunk, or Chronicle for log searching, correlation, and false-positive investigation.
• Advanced Analytical Thinking – Ability to connect data across multiple sources (endpoint, cloud, email) to build a complete incident picture.
• Incident Response Methodology – Practical experience across the IR lifecycle: detection, containment, investigation, recovery, and lessons learned.
• Phishing & Email Security – Proficient in investigating suspicious emails, including header analysis and SPF/DKIM/DMARC validation.
• Strong Communication Skills – Confident in leading incident discussions with both clients and internal teams during live events.
• Independent & Proactive – Capable of managing workload, making decisions under pressure, and escalating when needed.

This is a unique chance to make a real impact, contribute to building robust security processes, and grow as part of a forward-looking cybersecurity organization.