Interim Security Lead — SaaS, Cloud & Incident Response

Phorest; Ireland; Remote; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Private healthcare

Wellness days

Employee pension plan

Life assurance

Bike to work scheme

Job summary

Phorest is seeking an Interim Security Manager for a 3-month contract to lead security operations and incident response. You will work closely with Engineering Foundations, IT, and security teams to manage alerts, investigations, and risk documentation.

The role requires hands-on cloud security experience in AWS, strong incident response skills, and the ability to build trust with engineers and non-technical stakeholders. Flexible remote options are available.

Qualifications

• 2+ years of people leadership or team leadership.
• recognised security qualification (CISSP, CISM or Security+) or equivalent hands-on experience.
• Strong working knowledge of AWS security including GuardDuty, WAF, CloudWatch, IAM and SCPs.
• Experience running day-to-day detection, triage and response.

Responsibilities

• Own day-to-day security operations and incident response.
• Triage cloud security alerts (GuardDuty, CloudWatch) and investigate anomalies.
• Oversee endpoint and IT security alerts and guide investigations.
• Protect public endpoints with AWS WAF and related controls.
• Review third-party tools for compliance (SOC 2, ISO 27001, GDPR).
• Support PCI DSS, HIPAA and GDPR activities and threat modelling.
• Provide day-to-day guidance and coaching to IT/security teams.

Skills

Security leadership

Cloud security

Incident response

Security operations

Communication

Education

CISSP/CISM/Security+ or equivalent

Tools

AWS GuardDuty

CloudWatch

AWS WAF

IAM & SCPs

EDR & vulnerability scanners

Job description

Phorest is seeking an Interim Security Manager for a 3-month contract to lead security operations and incident response. You will work closely with Engineering Foundations, IT, and security teams to manage alerts, investigations, and risk documentation.

The role requires hands-on cloud security experience in AWS, strong incident response skills, and the ability to build trust with engineers and non-technical stakeholders. Flexible remote options are available.