Manager, Incident Response

The Role

This management position combines strategic leadership with hands-on technical involvement, overseeing the delivery of incident response services across a hybrid/remote team. Day-to-day responsibilities span scoping engagements, managing active investigations, reviewing deliverables, and serving as a senior technical escalation point for complex ransomware, cyber extortion and business email compromise cases.

Skills & Experience

Candidates should bring deep expertise in digital forensics and incident response, including host, network, cloud and log-based forensic analysis. Strong people management experience is essential, alongside familiarity with case management, KPI reporting, and quality assurance processes. DFIR certifications and experience recruiting and developing technical talent are advantageous.

Who It Suits

The role suits an experienced DFIR professional ready to step fully into a leadership position without leaving technical work behind. It is ideal for someone who can balance mentoring a geographically distributed team with leading the most demanding investigations, and who thrives in a fast-paced managed security services environment.