Global Cybersecurity Incident Response Lead

Global Sports Jobs Limited; Greater London; On-site; GBP 120,000 - 180,000; Full time

Job summary

Creative Artists Agency (CAA) in London seeks an executive-level Incident Response Lead to drive end-to-end detection, containment, and response to security events across Europe and the Pacific. The role combines hands-on security work with leadership within the Information Security group and collaboration with IT.

You will develop runbooks, mentor analysts, and guide global incident response strategy, leveraging cloud services and threat intelligence to accelerate containment and improve

Qualifications

• 8+ years in IT, with at least 5 years in incident response or forensics.
• Bachelor's or Master's degree, or equivalent work experience.
• Ability to mentor junior security analysts.
• Cloud-based incident response and log analysis experience.
• Experience developing scripts/tools to enhance investigations.
• Strong background in servers, OS, networks, and security controls.

Responsibilities

• Act as executive point of contact during major incidents.
• Define and execute global incident response strategy for international ops.
• Lead incident response teams and mentor staff.
• Coordinate with technical and business stakeholders during IR process.
• Conduct day-to-day IR activities and SOC detection/response tasks.
• Monitor threat intelligence to identify signs of incidents (threat hunting).
• Design runbooks and playbooks for incident response.
• Develop strategies to contain and limit impact of incidents.
• Perform host/network/cloud/log analysis and forensics in IR investigations.
• Influence and contribute to the organisation's IR efforts.
• Review logs and reports with findings and recommendations.

Skills

Incident response

Threat hunting

Forensics

Cloud security

Threat intelligence

Scripting

NIST framework

Leadership mentoring

Incident management

Education

Bachelor's or Master's in a relevant field

Job description

Creative Artists Agency (CAA) in London seeks an executive-level Incident Response Lead to drive end-to-end detection, containment, and response to security events across Europe and the Pacific. The role combines hands-on security work with leadership within the Information Security group and collaboration with IT.

You will develop runbooks, mentor analysts, and guide global incident response strategy, leveraging cloud services and threat intelligence to accelerate containment and improve