Senior DFIR Incident Response Lead — Remote

rgare; Ireland; Hybrid; EUR 120,000 - 180,000; Full time

Job summary

RGA is seeking a senior incident response professional to lead complex cyber investigations and elevate the organization's resilience across global operations. The role combines hands-on DFIR, advisory leadership, and security program oversight in both remote and hybrid settings.

You will guide security teams, engage executives and legal stakeholders, and drive AI-assisted workflows to improve investigation speed and reporting quality.

Qualifications

• 5+ years in incident response, DFIR, or security operations.
• Experience leading major cyber incidents including ransomware or cloud compromise.
• Demonstrated forensic tool proficiency (FTK/Encase/X-Ways/Magnet Axiom/SIFT).

Responsibilities

• Lead enterprise incident response and cyber crisis engagements từ detection through recovery.
• Direct investigations across Windows, Linux, macOS, Microsoft 365, AWS, Azure, and hybrid environments.
• Perform advanced threat hunting using SIEM, EDR, and threat intel platforms.
• Develop containment, eradication, and remediation strategies aligned to risk.
• Produce executive briefings, technical reports, and post-incident reviews.
• Collaborate with legal, compliance, privacy and external stakeholders as needed.
• Drive adoption of AI-assisted workflows to speed investigations and reporting.

Skills

Digital forensics

Executive communication

Threat hunting

Log analytics

Incident response

Education

Bachelor's degree in Cybersecurity or related field

Industry certifications (GCFA/GCFE/GCIH/GCIA/CISSP/CISM/AWS/Azure security)

Tools

Splunk

Microsoft Defender

CrowdStrike Falcon

ServiceNow SIR

Cloud security tools

FTK

Encase

X-Ways

Magnet Axiom

SIFT

Job description

RGA is seeking a senior incident response professional to lead complex cyber investigations and elevate the organization's resilience across global operations. The role combines hands-on DFIR, advisory leadership, and security program oversight in both remote and hybrid settings.

You will guide security teams, engage executives and legal stakeholders, and drive AI-assisted workflows to improve investigation speed and reporting quality.