Incident Response Lead — DFIR Team Coach & Case Commander

Eye Security; Den Haag; On-site; EUR 90,000 - 130,000; Full time

Job summary

Eye Security seeks an Incident Response Lead to join our Security Operations department in the Netherlands. You will lead the people who own our most serious cases end to end, coordinating ransomware and BEC investigations, doing the forensic work, and being the person on the phone when a client needs a straight answer under real pressure.

Your first responsibility is people, not just process. You’re a first-line manager with direct accountability for the performance and development of your

Qualifications

• 6+ years hands-on incident response and digital forensics experience.
• Proven leadership and people-management experience.
• Strong incident-report writing and client communication under pressure.
• Fluent English; Dutch (C2) required for client-facing work.

Responsibilities

• Lead, coach, and develop the Incident Response team with regular feedback and performance reviews.
• personally handle the most complex or high-profile incidents when needed.
• Oversee end-to-end incident response: intake, coordination, technical execution, and reporting.
• Own delivery KPIs (time-to-containment, case quality, client satisfaction) and escalate when targets are at risk.
• Manage on-call and case-lead rostering, prioritising by severity and client exposure.
• Act as senior escalation point and incident commander for major incidents when required.
• Drive quality assurance for incident reporting and run structured peer reviews.
• Scale automation in evidence collection, timeline building, and reporting with engineering support.
• Improve IR playbooks, tooling, and SOPs to reflect volume and learnings.
• Represent Incident Response in cross-functional discussions with SOC, Prevention, Product, and Legal.

Skills

Incident Response

Leadership

People Management

English (Fluent)

Dutch (C2)

Tools

EDR

Cloud Security

Job description

Eye Security seeks an Incident Response Lead to join our Security Operations department in the Netherlands. You will lead the people who own our most serious cases end to end, coordinating ransomware and BEC investigations, doing the forensic work, and being the person on the phone when a client needs a straight answer under real pressure.

Your first responsibility is people, not just process. You’re a first-line manager with direct accountability for the performance and development of your