Incident Response Lead — Hybrid & Flexible Hours

Tamarind Intelligence; Madrid; Híbrido; EUR 80.000 - 130.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Breakfast in the office 4 days a week

Hybrid work model

Medical Insurance (including Dental &

Life Insurance

Vacation 23 days

Descripción de la vacante

RingCentral seeks an experienced cybersecurity incident response leader to protect the organization, customers, and services. You will oversee identification, containment, and resolution of major incidents, coordinating across multiple teams and communicating with executives.

The role requires strong incident leadership, RCA work, and experience with cloud platforms, containers, and enterprise identity systems. Hybrid work model with in-office coverage four days a week is offered.

Formación

• Significant professional experience in cybersecurity, incident response, security operations, digital forensics, threat detection, or related discipline.
• Demonstrated experience leading complex cybersecurity incidents involving multiple technical and business teams.
• Experience coordinating containment, eradication, recovery, and impact assessment activities.
• Experience communicating security incidents to senior leadership.
• Experience leading or facilitating root cause analyses.
• Experience tracking corrective actions through completion.
• Practical experience with modern production environments (cloud, containers, identity systems, networks, customer-facing apps).
• Ability to participate in on-call or major-incident escalation arrangements.
• Experience responding to incidents involving customer data or personal data.
• Experience developing incident response playbooks, severity models, reporting standards, and tabletop exercises.
• Strong written and spoken English.

Responsabilidades

• Incident Leadership & Control: lead major security incidents with clarity and authority.
• Declaration, Scoping & Technical Analysis: identify and declare incidents; assess scope and impact.
• Threat Containment, Eradication & Recovery: contain threats and restore production services.
• Stakeholder Facilitation & Multi-Audience Communication: report to executives and partners.
• Root Cause Analysis (RCA) & Problem Management: drive long-term security improvements.
• Corrective Action & Continuous Capability Improvement: ensure actions are completed and verified.

Conocimientos

Incident leadership

Cybersecurity

Incident response

Security operations

Communication to leadership

Root-cause analysis

On-call readiness

Herramientas

Cloud platforms

Containers

Identity systems

Networks

Descripción del empleo

RingCentral seeks an experienced cybersecurity incident response leader to protect the organization, customers, and services. You will oversee identification, containment, and resolution of major incidents, coordinating across multiple teams and communicating with executives.

The role requires strong incident leadership, RCA work, and experience with cloud platforms, containers, and enterprise identity systems. Hybrid work model with in-office coverage four days a week is offered.