Incident Response Team Leader

Check Point Software Technologies; Madrid; On-site; EUR 75,000 - 110,000; Full time

Job summary

Check Point Software Technologies is seeking an experienced Incident Response Team Leader to guide a team of IR analysts supporting enterprise customers across EMEA. This role centers on hands-on cyber incident management, customer engagement, threat containment, and operational excellence from Madrid and beyond.

You will lead investigations, coordinate triage and recovery, and deliver executive-level briefings while driving readiness and collaboration across security teams in a fast-paced

Qualifications

• 5+ years of Incident Response or DFIR experience.
• Strong knowledge of ransomware, cloud, identity, and enterprise investigations.
• Excellent customer-facing communication and stakeholder management skills.
• Experience leading remote teams in high-pressure environments.
• Proficient with EDR, SIEM, threat intel, and forensic investigation tools.
• GIAC, GCFA, GCIH, CISSP, or similar certifications.

Responsibilities

• Lead and mentor a team of Incident Response analysts during active security incidents
• Serve as the primary customer-facing lead during investigations and crisis situations
• Coordinate incident triage, containment, eradication, and recovery efforts
• Deliver executive-level communications, incident briefings, and post-incident reporting
• Drive operational readiness, process improvement, and collaboration across security teams

Skills

Incident Response

DFIR

Customer-facing

Remote team leadership

EDR

SIEM

Threat intelligence

Forensic tools

Certifications (GIAC GCFA GCIH CISSP)

Job description

As the world’s leading vendor of Cyber Security, facing the most sophisticated threats and attacks, we’ve assembled a global team of the most driven, creative, and innovative people. At Check Point, our employees are redefining the security landscape by meeting our customers’ real-time needs and providing our cutting‑edge technologies and services to an ever‑growing customer base.

Check Point Software Technologies has been honored by Time Magazine as one of the World’s Best Companies and Newsweek’s list of Americas Best Cybersecurity Companies. We've also earned a spot on the Forbes list of the World’s Best Places to Work for five consecutive years and recognized as one of the World’s Top Female‑Friendly Companies. If you're passionate about making the world a safer place and want to be part of an award‑winning company culture, we invite you to join us.

We are seeking an experienced Incident Response Team Leader to lead a team of IR analysts supporting enterprise customers across EMEA. This is a hands‑on leadership role focused on cyber incident management, customer engagement, threat containment, and operational excellence.

Job Description

• Lead and mentor a team of Incident Response analysts during active security incidents
• Serve as the primary customer‑facing lead during investigations and crisis situations
• Coordinate incident triage, containment, eradication, and recovery efforts
• Deliver executive‑level communications, incident briefings, and post‑incident reporting
• Drive operational readiness, process improvement, and collaboration across security teams

Qualifications

• 5+ years of experience in Incident Response, or DFIR
• Strong knowledge of ransomware, cloud, identity, and enterprise attack investigations
• Excellent customer‑facing communication and stakeholder management skills
• Experience leading remote teams in high‑pressure environments
• Proficient with EDR, SIEM, threat intelligence, and forensic investigation tools
• GIAC, GCFA, GCIH, CISSP, or similar certifications

Preferred

• Fluent in Spanish as well as English
• Experience in consulting or managed security services environments