Manager, Incident Response

🕒 September 1

🇬🇧 United Kingdom – Remote

💵 £76k - £114k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👔 Manager

🇬🇧 UK Skilled Worker Visa Sponsor

This company has sponsored UK Skilled Worker visas in the past.

👻 Ghost score 3%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Arctic Wolf

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2012

The cybersecurity industry has an effectiveness problem. Every year new technologies, vendors, and solutions emerge, and yet despite this constant innovation we continue to see high profile breaches in the headlines. All organizations know they need better security, but the dizzying array of options leave resource-constrained IT and security leaders wondering how to proceed. At Arctic Wolf, our mission is to End Cyber Risk through effective security operations. To achieve this, we believe that organizations must do three key things:

📋 Description

• Lead and develop Arctic Wolf's Incident Response practice and team • Oversee delivery of consistent, scalable, high-quality Incident Response services • Scope, monitor, manage, and assign incident response engagements • Maintain awareness of active investigations and recovery efforts, escalating when required • Establish case management, utilization, resource planning, scheduling, workload balancing, KPIs, service metrics, and operational reporting • Develop processes, standards, quality assurance mechanisms, and continuous improvement initiatives • Review incident reports, executive summaries, investigative findings, and customer deliverables • Provide technical leadership during engagements and forensic activities • Lead and support advanced digital forensic and incident response investigations across Windows, Linux, macOS, Azure, AWS, and Google Cloud • Guide containment, eradication, recovery, and remediation activities • Develop investigation strategies and incident response plans • Serve as senior trusted advisor during cybersecurity incidents • Communicate findings to executives, legal counsel, insurance carriers, and technical stakeholders • Lead scoping and engagement planning; support cyber extortion and ransomware negotiation strategy • Present recovery plans, findings, and recommendations to customers • Build relationships with customers, legal counsel, cyber insurance carriers, and strategic partners • Support business development, industry events, and thought leadership • Partner with Directors and Executive Leadership on strategy and growth plans • Drive automation, innovation, tooling, reporting, analytics, quality assurance, and customer experience improvements • Collaborate across Product, Engineering, Security Operations, Concierge, MDR, Sales, Marketing, and Customer Success • Support budgeting, forecasting, workforce planning, and organizational scaling • Participate in evening, weekend, holiday, and escalation on-call rotations • Conduct peer reviews, quality reviews, and case audits • Maintain technical certifications and professional development goals

🎯 Requirements

• 3+ years of experience leading technical teams, people management, or service delivery organizations • Demonstrated experience leading complex cyber incident investigations and recovery efforts • Strong knowledge of host, network, cloud, and enterprise forensic analysis • Experience managing customer-facing engagements involving legal counsel, cyber insurance carriers, and executive stakeholders • Exceptional verbal and written communication skills • Experience developing operational processes, performance metrics, and quality assurance programs • Ability to lead multiple concurrent initiatives and prioritize effectively in high-pressure environments • Fluency in English, verbal and written • Background checks are required • Offer may be conditioned on authorization to receive software or technology controlled under U.S. export control laws and regulations • Preferred: Bachelor's degree in Information Security, Digital Forensics, Computer Science, Cybersecurity, or related discipline • Preferred: Industry certifications such as GCFA, GCFE, CISSP, GCIH, EnCE, ACE, or equivalent • Preferred: Experience within consulting, managed security services, or incident response service organizations • Preferred: Experience presenting at industry conferences, customer events, or technical forums • Preferred: Experience supporting large-scale enterprise incident response programs and global service delivery teams

🏖️ Benefits

• Equity for all employees • 28 days annual leave, 8 bank holidays and paid volunteering days off • Pension plan employer match • Training and career development programs • Robust Employee Assistance Program (EAP) with mental health service • Comprehensive private benefits plan including medical insurance, virtual GP, optical and dental cashback, life insurance (4x basic salary) and group income protection • Fertility support and paid parental leave • Variable incentive compensation • New hire equity grants • Disability accommodations where possible