Senior Cyber Threat & Incident Response Lead

Northern Trust Corp; Limerick; On-site; EUR 90,000 - 150,000; Full time

Job summary

Northern Trust seeks a senior Cybersecurity leader to drive incident response and cyber defense capabilities. You will lead strategic initiatives, supervise analysts, and act as incident commander for major cyber events, partnering with threat intel, engineering, and risk teams.

You will mentor Tier1-3 analysts, develop playbooks, run tabletop exercises, and ensure detection coverage across MITRE ATT&CK. Applicants must have relevant degree and certifications, and rights to work in Ireland.

Qualifications

• Proven experience leading technical investigations and developing Cyber defence capabilities.
• Strong understanding of Malware Analysis, Threat Hunting, Identity Security, Endpoint Detection and Response.
• Experience with triage and developing detections on SIEM and XDR platforms (Microsoft Sentinel, Defender XDR, Splunk, CrowdStrike).

Responsibilities

• Lead strategic cybersecurity initiatives that enhance Security Operations and Incident Response capabilities.
• Act as senior escalation point and Incident Commander for major cyber security incidents.
• Guide analysts through complex investigations using SIEM, EDR, identity, cloud, and network telemetry.
• Partner with Detection Engineering to improve detection coverage and drive automation.
• Evaluate new security products and emerging technologies to strengthen the cyber defense posture.
• Provide executive-ready updates during incidents and drive lessons learned.

Skills

Cybersecurity leadership

Incident response

Threat hunting

Identity security

Endpoint security

Cloud security

MITRE ATT&CK

SIEM/XDR

SOAR automation

Mentoring

Education

Bachelor's degree in Cybersecurity or related field

Industry certifications

Tools

Microsoft Sentinel

Defender XDR

Splunk

CrowdStrike

Azure/AWS

Job description

Northern Trust seeks a senior Cybersecurity leader to drive incident response and cyber defense capabilities. You will lead strategic initiatives, supervise analysts, and act as incident commander for major cyber events, partnering with threat intel, engineering, and risk teams.

You will mentor Tier1-3 analysts, develop playbooks, run tabletop exercises, and ensure detection coverage across MITRE ATT&CK. Applicants must have relevant degree and certifications, and rights to work in Ireland.