Senior Incident Response Lead | Global Cyber Defense

Check-Point-Software-Technologies-2; Madrid; On-site; EUR 80,000 - 120,000; Full time

Job summary

Check Point is seeking an experienced Incident Response leader to guide a team of analysts during security incidents. You will serve as the primary customer-facing lead during investigations and crises, coordinating triage, containment, eradication, and recovery.

This role requires strong communication with executives, managers, and security teams, and the ability to drive preparedness, process improvements, and cross-team collaboration across global customers.

Qualifications

• 5+ years of experience in Incident Response or DFIR.
• Strong knowledge of ransomware, cloud, identity, and enterprise attack investigations.
• Excellent customer-facing communication and stakeholder management skills.
• Experience leading remote teams in high-pressure environments.
• Proficiency with EDR, SIEM, threat intelligence, and forensic investigation tools.
• GIAC, GCFA, GCIH, CISSP, or similar certifications.

Responsibilities

• Lead and mentor a team of Incident Response analysts during active security incidents
• Serve as the primary customer-facing lead during investigations and crisis situations
• Coordinate incident triage, containment, eradication, and recovery efforts
• Deliver executive-level communications, incident briefings, and post-incident reporting
• Drive operational readiness, process improvement, and collaboration across security teams

Skills

Leadership

Customer-facing communication

Remote team leadership

Tools

EDR

SIEM

Forensic investigation tools

Threat intelligence tools

Job description

Check Point is seeking an experienced Incident Response leader to guide a team of analysts during security incidents. You will serve as the primary customer-facing lead during investigations and crises, coordinating triage, containment, eradication, and recovery.

This role requires strong communication with executives, managers, and security teams, and the ability to drive preparedness, process improvements, and cross-team collaboration across global customers.