Incident Response Manager (m/f/d)

In today's threat landscape, effective incident response can make the difference between a minor disruption and a major business impact. As our Incident Response Manager, you'll play a central role in strengthening cyber resilience across a global organization.

You'll lead a highly skilled team responsible for identifying, investigating, containing, and responding to security incidents while continuously improving detection and response capabilities. Beyond managing day-to-day operations, you'll drive strategic initiatives, shape response methodologies, and help build a security culture that proactively adapts to emerging threats.

This role combines leadership, technical expertise, and business impact. You'll work closely with technology teams, business stakeholders, and senior leadership to ensure security incidents are handled effectively while continuously enhancing the organization's ability to detect and respond to cyber threats.

If you're passionate about cyber defense, enjoy leading high-performing teams, and thrive in fast-paced environments where your decisions directly influence business resilience, we'd love to hear from you.

• Lead and manage our threat detection and response strategies, plans, capabilities, activities, and improvements
• Oversee the daily operations of the TDR team, ensuring timely, accurate, and effective security incident response and proactive threat hunting activities
• Serve as a primary liaison between technical teams and business units to reduce the impact of security incidents and maintain business operations
• Guide and mentor the TDR team, fostering a collaborative and cohesive environment, promoting knowledge sharing, and encouraging continuous improvement
• Develop and maintain TDR playbooks, defining procedures, best practices, and escalation protocols to enhance response capabilities
• Review incident response cases, offering guidance on anomaly-based detection, and facilitating improvements in detection and analysis
• Provide timely and detailed post-incident reports, summarizing root cause analyses, and making recommendations to stakeholders and executive sponsors Drive the continuous improvement of processes and procedures

• Master’s or bachelor’s degree Information Technology, Cybersecurity, or related field
• Five years of experience in cybersecurity, with a primary focus on Threat Detection and Response (TDR) functions in large companies
• Experience in incident response, security monitoring, digital forensics and/or advanced malware analysis
• Proven experience in a managerial role within TDR, demonstrating the ability to lead and coordinate a high-functioning team
• Strong understanding of TDR principles, including security products, network protocols, data center operations, and cloud computing
• Familiarity with cybersecurity tools and platforms, including Microsoft Sentinel, Microsoft Defender, IBM QRadar, and Palo Alto, to enhance monitoring and response functions
• Experience in identifying, managing, and producing executive-level incident updates, reports, and recommendations to guide decision-making and risk management