Lead Incident Response

Forensic Focus; Rotterdam, Den Haag; Hybrid; EUR 66,000 - 84,000; Full time

Job summary

Forensic Focus is seeking a Lead Incident Response professional to head a DFIR team in the Netherlands. You will guide investigations from intake through reporting, while managing rostering and delivery KPIs, and acting as incident commander for major cases.

Fluent English and Dutch are required, with a strong background in DFIR, EDR platforms, cloud security, and attacker TTPs. The role combines leadership with hands-on incident response in a client-facing environment.

Qualifications

• 6+ years hands-on incident response and digital forensics experience.
• Strong knowledge of DFIR methodology, EDR platforms, cloud security and attacker TTPs.
• Proven people-management experience.
• Fluent English and Dutch.

Responsibilities

• Lead the incident response team from intake to client reporting.
• Manage rostering, oversee delivery KPIs, and act as incident commander for major incidents.
• Provide hands-on involvement in high-pressure, client-facing casework.
• Balance coaching and leadership with ongoing frontline duties.

Skills

DFIR

Digital Forensics

EDR

Cloud security

TTPs

People management

English&Dutch

Tools

Automation tools

Job description

# Lead Incident Response*Eye Security***Rotterdam and The Hague**Hybrid · Lead/Principal · Full-time### The RoleThis role leads an incident response team handling serious cases such as ransomware and business email compromise, from intake through investigation to client reporting. The lead personally takes on complex cases, manages rostering, oversees delivery KPIs, and acts as incident commander for major incidents.### Skills & ExperienceRequires 6+ years of hands-on incident response and digital forensics experience, strong knowledge of DFIR methodology, EDR platforms, cloud security and attacker TTPs, plus proven people-management experience. Fluent English and Dutch required; CERT/CSIRT/MDR background and automation skills are advantageous.### Who It SuitsSuited to an experienced DFIR practitioner ready to step into first-line management, balancing coaching and leadership responsibilities with continued hands-on involvement in high-pressure, client-facing incident casework.Typical advertised salary forIncident Response roles in Netherlands:**€66,000–€84,000**(median €78,000 — from19 recent listings analysed by Forensic Focus).Compare Incident Response salaries in Netherlands →Learn More/Apply