Incident Response Team Leader

Check Point Software Technologies; Greater London; Remote; GBP 80,000 - 120,000; Full time

Job summary

Check Point Software Technologies is seeking an experienced Incident Response Team Leader to guide a team of IR analysts across EMEA. This hands-on leadership role focuses on cyber incident management, customer engagement, containment, and reporting.

You will drive crisis response, executive communications, and ongoing improvements while coordinating with security teams in a fast-paced, global environment.

Qualifications

• 5+ years of experience in Incident Response or DFIR.
• Strong knowledge of ransomware, cloud, identity, and enterprise investigations.
• Excellent customer-facing communication and stakeholder management skills.
• Experience leading remote teams in high-pressure environments.
• Proficient with EDR, SIEM, threat intel, and forensic tools.
• Certifications such as GIAC, GCFA, GCIH, CISSP or similar.

Responsibilities

• Lead and mentor a team of Incident Response analysts during active security incidents.
• Serve as the primary customer-facing lead during investigations and crisis situations.
• Coordinate incident triage, containment, eradication, and recovery efforts.
• Deliver executive-level communications, incident briefings, and post-incident reporting.
• Drive operational readiness, process improvement, and collaboration across security teams.

Skills

IR experience

Customer-facing communication

Remote team leadership

Education

GIAC/GCFA/GCIH/CISSP certs

Tools

EDR

SIEM

Threat intelligence

Forensic investigation tools

Job description

At Check Point, what you do matters. Every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation.

Our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and AI systems, stopping attacks before they happen.

This is where innovation meets real-world impact. You’ll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.

We’re proud to be recognized by TIME, Newsweek, and Forbes for excellence and workplace culture.

What really sets Check Point apart is the opportunity to grow, contribute, and help companies navigate their AI transformation securely.

If you’re excited to work at the forefront of AI-driven security on a global scale, this is the place to do it.

Job Description

We are seeking an experienced Incident Response Team Leader to lead a team of IR analysts supporting enterprise customers across EMEA. This is a hands-on leadership role focused on cyber incident management, customer engagement, threat containment, and operational excellence.

• Lead and mentor a team of Incident Response analysts during active security incidents
• Serve as the primary customer-facing lead during investigations and crisis situations
• Coordinate incident triage, containment, eradication, and recovery efforts
• Deliver executive-level communications, incident briefings, and post-incident reporting
• Drive operational readiness, process improvement, and collaboration across security teams

Qualifications

• 5+ years of experience in Incident Response, or DFIR
• Strong knowledge of ransomware, cloud, identity, and enterprise attack investigations
• Excellent customer-facing communication and stakeholder management skills
• Experience leading remote teams in high-pressure environments
• Proficient with EDR, SIEM, threat intelligence, and forensic investigation tools
• GIAC, GCFA, GCIH, CISSP, or similar certifications

Preferred

• Experience in consulting or managed security services environments