Security Incident Response Team Lead (CSIRT Lead)

Job Description

Responsibilities:
Lead and manage the Cyber Security Incident Response Team (CSIRT)
Design, document, and continuously update incident response processes and procedures
Perform technical analysis and effectively manage security incidents across multiple domains (network, systems, applications, and users)
Collaborate closely with other technical departments to enhance the organization’s overall security posture
Prepare and present technical and executive reports to the Chief Information Security Officer (CISO)
Plan and conduct security exercises, including Tabletop and Red/Blue Team exercises
Coordinate and communicate with legal authorities and the national CERT during critical incidents
Requirements:
Minimum of 5 years of experience in Information Security, with at least 2 years of experience managing a CSIRT team or a similar function
Strong expertise in cybersecurity concepts, network traffic analysis, and security tools such as SIEM and EDR
Familiarity with security frameworks and standards including NIST, ISO 27035, and MITRE ATT&CK
Hands-on experience responding to phishing, DDoS, ransomware, and other cybersecurity threats
Proven experience in digital forensics and security crisis management
Strong ability to produce technical documentation and executive-level reports
Excellent communication, leadership, and decision-making skills
Relevant international certifications such as CISSP, GCIH, CISM, or CEH are considered an advantage
Experience collaborating with internal or external CERT/CSIRT teams is a plus
Experience leading and delivering enterprise-scale security projects is a plus