Incident Response Lead

Placements24; East London; On-site; ZAR 900,000 - 1,500,000; Full time

Benefits offered by this job

Competitive salary

Health insurance

Pension plan

Professional development

Performance bonuses

On-site East London office

Job summary

Placements24 is seeking an experienced Incident Response Lead to build and manage an elite incident response team in East London, Eastern Cape. You will lead detection, analysis, containment, and recovery of complex security incidents affecting client environments.

The ideal candidate holds a related degree, has 6+ years in cybersecurity with 3+ in leadership, strong forensics and malware analysis skills, and earn relevant certifications.

Qualifications

• Bachelor’s degree in a related field is required.
• 6+ years in cybersecurity with at least 3 years in incident response or leadership.
• Proven experience leading IR for complex security breaches.
• Certifications such as GCIH, GCFA, CISSP, or CISM are desirable.

Responsibilities

• Lead and manage a team of incident response analysts, providing technical guidance and mentorship.
• Develop, implement, and maintain incident response plans, playbooks, and procedures.
• Oversee detection, containment, eradication, and recovery phases of security incidents.
• Conduct in-depth analysis including malware analysis and digital forensics.
• Coordinate IR activities with internal teams and external stakeholders, including clients and law enforcement.
• Perform post-incident reviews and recommend improvements to security posture.

Skills

Leadership

Communication

Team management

Incident response leadership

Education

Bachelor's degree in Computer Science, Cybersecurity, IT or related field

Tools

SIEM tools

Digital forensics tools

Malware analysis tools

Job description

About the Role

Our client, a rapidly growing cybersecurity services provider based in East London, is seeking an experienced Incident Response Lead to build and manage their elite incident response team. This critical role involves leading the charge in detecting, analyzing, and responding to sophisticated cyber threats and security incidents affecting client environments. You will be responsible for developing and refining incident response playbooks, coordinating response efforts, and conducting post-incident analysis to prevent future occurrences. The ideal candidate will possess extensive experience in managing security incidents, strong technical expertise in forensics and malware analysis, and exceptional leadership and communication skills. This position requires a dedicated on-site presence at our East London, Eastern Cape, ZA office.

Key Responsibilities

• Lead and manage a team of incident response analysts, providing technical guidance and mentorship.
• Develop, implement, and maintain comprehensive incident response plans, playbooks, and procedures.
• Oversee the detection, containment, eradication, and recovery phases of security incidents.
• Conduct in-depth analysis of security incidents, including malware analysis and digital forensics.
• Coordinate incident response activities across internal teams and with external stakeholders, including clients and law enforcement.
• Perform post-incident reviews and recommend improvements to security posture and incident response capabilities.
• Manage and maintain incident response tools and technologies.
• Stay abreast of the latest cyber threats, attack vectors, and incident response techniques.
• Develop and deliver incident response training and awareness programs.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Minimum of 6 years of experience in cybersecurity, with at least 3 years in an incident response or leadership role.
• Proven experience leading incident response efforts for complex security breaches.
• Strong technical skills in digital forensics, malware analysis, network traffic analysis, and SIEM tools.
• In-depth knowledge of threat actor tactics, techniques, and procedures (TTPs).
• Experience with various operating systems (Windows, Linux, macOS) and network protocols.
• Excellent leadership, communication, and interpersonal skills, with the ability to manage high-pressure situations.
• Relevant certifications such as GCIH, GCFA, CISSP, or CISM are highly desirable.
• Experience working in a consulting or managed security services (MSSP) environment is a plus.
• This role requires full-time commitment at our East London, Eastern Cape, ZA office.

Benefits

• A competitive annual salary of R.
• Comprehensive health, dental, and vision insurance plans.
• Generous contributions to a retirement savings plan.
• Significant opportunities for professional development, training, and advanced certifications.
• Performance bonuses and recognition programs.
• Opportunity to work with cutting-edge security technologies and tackle challenging threats.
• Collaborative and growth-oriented work environment in East London.