Manager, Incident Response

🕒 September 2

🌐 Ireland, United Kingdom – Remote

🇮🇪 Ireland – Remote 🇬🇧 United Kingdom – Remote

💵 €89k - €133k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👔 Manager

👻 Ghost score 4%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Arctic Wolf

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2012

The cybersecurity industry has an effectiveness problem. Every year new technologies, vendors, and solutions emerge, and yet despite this constant innovation we continue to see high profile breaches in the headlines. All organizations know they need better security, but the dizzying array of options leave resource-constrained IT and security leaders wondering how to proceed. At Arctic Wolf, our mission is to End Cyber Risk through effective security operations. To achieve this, we believe that organizations must do three key things:

📋 Description

• Lead and mature Arctic Wolf's Incident Response practice through strategic leadership, operational management, and advanced technical expertise • Lead, mentor, develop, and manage a hybrid/remote team of Incident Response professionals • Recruit, hire, onboard, train, and retain DFIR talent • Oversee Incident Response service delivery and ensure consistent, scalable, high-quality outcomes • Scope, monitor, and manage incident response engagements; assign personnel based on skills, availability, customer needs, and goals • Maintain awareness of active investigations and recovery efforts, intervening when escalation or leadership is required • Develop operational processes, standards, quality assurance mechanisms, KPIs, service metrics, and reporting capabilities • Review incident reports, executive summaries, investigative findings, and customer deliverables • Lead and support advanced digital forensic and incident response investigations • Conduct and oversee host, network, cloud, and log-based forensic analysis across Windows, Linux, macOS, Azure, AWS, and Google Cloud • Guide containment, eradication, recovery, and remediation during active security incidents • Validate investigative findings and technical conclusions • Develop investigation strategies and incident response plans • Analyze evidence to determine threat activity and timelines, persistence mechanisms, data impact, and indicators of compromise • Serve as a senior trusted advisor during cybersecurity incidents • Communicate findings to executives, legal counsel, insurance carriers, and technical stakeholders • Lead scoping discussions and engagement planning • Support cyber extortion and ransomware negotiation strategy development and approval • Present recovery plans, investigative findings, and recommendations to customers • Build relationships with legal counsel, cyber insurance carriers, strategic partners, and customers • Support business development, industry events, and thought leadership initiatives • Partner with Directors and Executive Leadership on vision, strategy, growth, budgeting, forecasting, workforce planning, and scaling • Identify automation, innovation, tooling, and operational efficiency opportunities • Collaborate across Product, Engineering, Security Operations, Concierge, MDR, Sales, Marketing, and Customer Success • Participate in escalation, evening, weekend, and holiday on-call rotations • Conduct peer reviews, quality reviews, and case audits • Promote information sharing, documentation, and organizational learning • Perform other duties supporting Arctic Wolf's Incident Response mission

🎯 Requirements

• 3+ years of experience leading technical teams, people management, or service delivery organizations • Demonstrated experience leading complex cyber incident investigations and recovery efforts • Strong knowledge of host, network, cloud, and enterprise forensic analysis • Experience managing customer-facing engagements involving legal counsel, cyber insurance carriers, and executive stakeholders • Exceptional verbal and written communication skills • Experience developing operational processes, performance metrics, and quality assurance programs • Ability to lead multiple concurrent initiatives and prioritize effectively in high-pressure environments • Fluency in English, verbal and written • Background checks are required for this position • Offer may be conditioned on authorization to receive software or technology controlled under U.S. export control laws and regulations • Bachelor's degree in Information Security, Digital Forensics, Computer Science, Cybersecurity, or a related discipline (preferred) • Industry certifications such as GCFA, GCFE, CISSP, GCIH, EnCE, ACE, or equivalent (preferred) • Experience within consulting, managed security services, or incident response service organizations (preferred) • Experience presenting at industry conferences, customer events, or technical forums (preferred) • Experience supporting large-scale enterprise incident response programs and global service delivery teams (preferred) • Maintain required technical certifications and professional development goals

🏖️ Benefits

• Equity for all employees • 28 days annual leave • 10 public holidays • Paid volunteering days off • Comprehensive private benefits plan including medical, mental health, dental, disability, and value-added services • Pension Plan with employer contribution • Robust Employee Assistance Program (EAP) with mental health service • Employee Discount Program with Beneplace • Variable incentive compensation • New hire equity grants • Comprehensive benefits package • Accommodations for candidates and employees with disabilities and/or other specific needs where possible