Senior Incident Response Lead — Crisis & Client-Facing IR

Check Point Software Technologies; Madrid; On-site; EUR 90,000 - 130,000; Full time

Job summary

Check Point Software Technologies in Madrid is seeking an experienced Incident Response Lead to guide a team of analysts through active incidents, coordinate triage and containment, and communicate with executives during crises.

This role emphasizes hands-on investigations, remote team leadership, and collaboration across security functions to strengthen incident response readiness in a fast-evolving cyber landscape.

Qualifications

• 5+ years of experience in Incident Response or DFIR.
• Strong knowledge of ransomware, cloud, identity, and enterprise investigations.
• Excellent customer facing communication and stakeholder management.
• Experience leading remote teams in high-pressure environments.

Responsibilities

• Lead and mentor a team of Incident Response analysts during active security incidents.
• Serve as the primary customer-facing lead during investigations and crisis situations.
• Coordinate incident triage, containment, eradication, and recovery efforts.
• Deliver executive-level communications, incident briefings, and post-incident reporting.
• Drive operational readiness, process improvement, and collaboration across security teams.

Skills

Incident Response

DFIR

Customer facing

Remote team leadership

EDR/SIEM proficiency

Forensic investigations

Threat intelligence

CISSP/GCFA/etc

Tools

EDR

SIEM

Forensic tools

Threat intel platforms

Job description

Check Point Software Technologies in Madrid is seeking an experienced Incident Response Lead to guide a team of analysts through active incidents, coordinate triage and containment, and communicate with executives during crises.

This role emphasizes hands-on investigations, remote team leadership, and collaboration across security functions to strengthen incident response readiness in a fast-evolving cyber landscape.