Incident Response Lead

Amsterdamlead

SecurityOtherLeadCybersecurityIncident Response Analyst

0 views0 saves0 applied

Key Responsibilities

Cloud platforms Network and perimeter security Identity and access systems Supply chain and third-party risks Partner with SOC, Threat Intelligence,

Requirements Summary

Experience 8+ years in cybersecurity, with significant hands-on incident response leadership experience. Proven experience leading large-scale,

Technical Tools

SecurityOtherLeadCybersecurityIncident Response Analyst

~2 min read

Incident Response Leadership

→
Lead and coordinate of security incidents across Nebius’ cloud, infrastructure, and corporate environments.
→
Act as Incident Commander during major incidents, driving containment, eradication, and recovery efforts.
→
Support and maintain clear incident classification, escalation, and decision-making frameworks.
→
Ensure 24/7 readiness through on-call structures, runbooks, and playbooks.

Detection, Triage, and Investigation

→
Partner with SOC, Threat Intelligence, and Threat Hunting teams to improve detection fidelity and reduce MTTR.
→
Ensure evidence handling meets legal, regulatory, and forensic standards.
→
Lead regulatory-ready incident documentation, timelines, and root cause analysis (RCA).
→
Support audits, regulatory inquiries, and executive reporting related to security incidents.

Executive & Cross-Functional Coordination

→
Deliver clear, factual, and risk-based incident briefings to senior leadership.
→
Support customer and partner communications when security incidents impact trust or service availability.

Program Development & Continuous Improvement

→
Drive lessons-learned processes and ensure findings result in measurable control improvements.
→
Define and track incident response KPIs (MTTD, MTTR, containment effectiveness).

Required Qualifications:

Experience

→
8+ years in cybersecurity, with significant hands-on incident response leadership experience.
→
Proven experience leading large-scale, high-impact security incidents in cloud or infrastructure-heavy environments.
→
Experience operating in regulated or compliance-driven environments (SOC, ISO, financial services, cloud providers, etc.).

Technical Expertise

→
Practical experience with SIEM, SOAR, EDR, NDR, and forensic tooling.
→
Ability to validate technical findings independently and challenge assumptions.

Leadership & Communication

→
Demonstrated ability to lead under pressure and make high-quality decisions with incomplete data.
→
Clear, concise communicator capable of briefing executives and non-technical stakeholders.
→
Strong cross-functional leadership skills without relying on direct authority.