Senior Cyber Incident Commander: Lead IR & Forensics

Michael Page International México Reclutamiento Especializado S.A. de C.V; Monterrey; On-site; MXN 1,071,000 - 1,786,000; Full time

Benefits offered by this job

Annual Bonus

Christmas Bonus (Aguinaldo) 41 días

Company Car

Fuel Allowance

Grocery Vouchers

Savings Fund 13%

Caja de Ahorro

Relocation assistance

Job summary

Michael Page International México Reclutamiento Especializado S.A. de C.V. busca un líder de Respuesta a Incidentes de ciberseguridad con más de 10 años de experiencia para dirigir respuestas a incidentes de alto impacto y coordinar equipos especializados.

El candidato ideal gestionará investigaciones, análisis forense y recuperación, trabajando con proveedores externos y socios MDR/MSSP, reportando a ejecutivos y asegurando la mejora continua de procesos y métricas de rendimiento.

Qualifications

• 10+ years of cybersecurity experience including Incident Response, Digital Forensics, Threat Hunting or SOC.
• Proven experience leading large-scale enterprise cyber incidents as Incident Commander or technical lead.
• Strong leadership experience managing technical cybersecurity teams and driving operational excellence.
• Advanced hands-on expertise in cyber incident investigations across endpoint, cloud, identity, and enterprise environments.
• Experience with global or Follow-the-Sun security operations models.
• Ability to communicate effectively with executive stakeholders and provide risk-based updates during critical incidents.

Responsibilities

• Lead the response to high-impact cybersecurity incidents, including ransomware, identity compromise, BEC, insider threats, supply chain attacks, and data breaches.
• Act as the Incident Commander, coordinating investigation, containment, recovery, and executive-level communications.
• Manage, mentor, and develop a team of cybersecurity investigators and incident responders.
• Define investigative strategies across endpoint, cloud, identity, email, SaaS, and network environments.
• Oversee digital forensics activities, root cause analysis, evidence handling, attack timeline reconstruction, and remediation planning.
• Integrate threat intelligence and threat hunting to strengthen detection and prevention capabilities.
• Manage relationships with external incident response providers and MDR/MSSP partners.
• Collaborate with SOC, Detection Engineering, Cloud Security, Vulnerability Management and Offensive Security teams to improve cyber resilience.
• Define, monitor, and optimize incident response metrics (MTTD, MTTR, detection effectiveness, investigation quality).
• Drive automation and AI adoption through SOAR platforms, scripting, APIs, and workflow optimization.
• Lead readiness exercises, update playbooks/runbooks, and continuously improve incident response processes.
• Communicate cyber risks, findings and incident updates to executives while coordinating with Legal/Compliance/Privacy/Regulatory teams.

Skills

Incident Response

Digital Forensics

Threat Hunting

SOC

Leadership

Team Management

Python

PowerShell

SOAR

MITRE ATT&CK

EDR investigations

AWS

Azure

Microsoft Entra ID

Microsoft 365

KQL

SIEM

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

SIEM

SOAR

EDR

Job description

Michael Page International México Reclutamiento Especializado S.A. de C.V. busca un líder de Respuesta a Incidentes de ciberseguridad con más de 10 años de experiencia para dirigir respuestas a incidentes de alto impacto y coordinar equipos especializados.

El candidato ideal gestionará investigaciones, análisis forense y recuperación, trabajando con proveedores externos y socios MDR/MSSP, reportando a ejecutivos y asegurando la mejora continua de procesos y métricas de rendimiento.