Remote It Incident Response Lead

Fusiontek; Remote; ZAR 200 000 - 1 000 000; Full time

Job summary

A Managed Security Service Provider is seeking an Incident Response Technical Lead in South Africa. The role involves managing technical recovery efforts, leading a team, and providing excellent client communication. Candidates should have a solid technical foundation, experience in leadership, and proficiency in various technologies including Azure, Active Directory, and network troubleshooting. Competitive salary and comprehensive benefits are offered, with opportunities for bonuses and educational reimbursement.

Benefits

Competitive salary

Quarterly bonus eligibility

Comprehensive benefits package

Paid time off

Educational reimbursement

Responsibilities

• Manage incident response recovery efforts from start to finish.
• Coordinate project mobilization and technical workstreams.
• Conduct frequent client and vendor communication.
• Document and track project tasks through the ticketing system.
• Serve as escalation point for technical questions.

Skills

Excellent comprehension and communication in English

Technical team leadership experience

Knowledge of Office / Azure cloud services

Active Directory knowledge

Complex networking troubleshooting

Understanding of operating systems

Advanced OS troubleshooting

SQL DB knowledge

Firewall configuration skills

Ingress / egress troubleshooting

Diverse firewall UIs knowledge

System architecture comprehension

Understanding of network and system performance

Time management skills

Verbal and written communication skills

Industry certifications

Recovery / remediation experience

Ticketing system experience

Job description

FusionTekis a Managed Security Service Provider (MSSP) with offices in multiple US locations and team members globally.

We're a tight-knit team of friendly, intelligent people focused on IT infrastructure management for small- to mid-sized businesses since .

We're also rapidly growing and are looking for top-tier candidates who share our four core values :

• We are team players, collectively working towards a common goal.
• We work each day with a growth mindset focused on the success of our coworkers, clients, and the company.
• We do the right thing with an honest and transparent approach that always puts our clients first.
• We take ownership of our work, always seeing it through to completion.
• We execute quickly and precisely, both internally and externally.

If this opportunity excites you, we invite you to continue reading!

Join our team as an Incident Response Technical Lead

We're seeking a proactive problem-solver with a client-focused attitude who thrives on tackling technical challenges.

As a Incident Response Tech Lead, you will provide excellence in high-touch technical management for incident response projects.

This includes frequent technical and non-technical written, verbal and video call (Zoom / Teams) updates with all stakeholders on a project, both within FusionTek and externally.

Throughout the day you'll be translating technology to clients who aren't always technical, so communication skills are paramount in this role.

A broad technical foundation is also required, as you will make decisions on the client's recovery strategy and will serve as escalation point and subject matter expert to FusionTek team members and the client.

We are currently staffing the following shifts :

2 : 00 PM – Midnight (Friday to Monday) - South Africa Standard Time (SAST)

Here’s what you’ll be doing :

• You'll primarily be focused on technical management of incident response recovery efforts from start to finish.
• This can include initial project mobilization, assignment and management of technical workstreams, and frequent client and vendor communication.
• There are daily (sometimes more frequently) update calls and associated reporting.
• Incident response projects can often begin over a weekend or outside of traditional business hours, and weekends are crucial recovery opportunities to lessen the impact the client feels as their businesses are often completely down.
• You'll work through our ticketing system to document, track, and escape project tasks and tickets, and you'll also work in our documentation platform to keep everything up to date along the way.
• You'll serve as an escalation point on technical questions from other engineers and the client.
• You'll be working with a team of intelligent people to deliver world-class service to our clients.

Looking for :

• Excellent comprehension and communication in the English language
• Previous experience leading a technical team
• Knowledge of Office / Azure cloud services
• Knowledge of Active Directory
• Knowledge of complex networking troubleshooting (VLANs / routing / subnetting / packet captures)
• Broad understanding of how operating systems work
• Knowledge of advanced OS troubleshooting (boot issues / corruption of profiles / OS files)
• Comfortable working in different OSs, both in CLI and GUI
• SQL DB knowledge is a plus
• Knowledge of advanced firewall configuration skills (creating and troubleshooting complex firewall policies / routes)
• Experience troubleshooting ingress / egress issues
• Comfortable working in diverse firewall UIs (SonicWall, Meraki, FortiGate, Cisco, WatchGuard, etc.)
• Strong comprehension of system architecture (i.e. - how servers' function, what their roles are, etc.)
• Understanding of the elements of network and system performance
• Time management skills are crucial to your success in this role
• Superb verbal and written communications skills are a must
• Demonstrated skillset through industry certifications or an agreed upon plan to obtain them
• Previous recovery / remediation experience a plus
• Experience working in a ticketing system is preferred, with Autotask experience a plus

Benefits

• Competitive salary : R, – R1,, per year
• Quarterly bonus eligibilityto reward performance
• Comprehensive benefits package
• Paid time off and leave policies in line with South African standards
• Educational reimbursementfor certification exams and access to company-supplied training resources