Senior Incident Response Lead - Remote

Placements24; LegKraal Gate; Hybrid; ZAR 900,000 - 1,600,000; Full time

Benefits offered by this job

Health insurance

Retirement fund

Performance-based bonuses

Professional development

Job summary

Placements24 is seeking a Senior Information Security Engineer (Incident Response) to lead responses to security incidents from a remote location within South Africa. You will conduct forensic investigations, refine IR playbooks, and collaborate with threat intel and IT teams to ensure rapid containment and recovery.

The ideal candidate brings 6+ years in information security, with 4+ years in IR/forensics, and hands-on experience with SIEM/EDR, scripting, and modern forensic tools.

Qualifications

• Minimum six years in information security with four+ years in IR and forensics.
• Experience leading IR for complex security incidents.
• Familiarity with forensic tools and methodologies; strong technical acumen.

Responsibilities

• Lead end-to-end incident response for breaches and cyber events.
• Develop and test comprehensive incident response plans and playbooks.
• Perform in-depth forensic analysis, log/memory/disk investigations.
• Identify threats, vulnerabilities, and attack vectors and report findings.
• Contain, eradicate and recover from incidents in a timely manner.
• Collaborate with threat intel, SOC and IT teams; mentor juniors.
• Develop automation for IR tasks; conduct post-incident reviews.
• Stay current on TTPs and evolving threat landscapes.

Skills

Incident Response

Digital Forensics

Threat Analysis

Scripting (Python/PowerShell)

Security Tools (SIEM/EDR)

Communication

Mentorship

Education

Bachelor's degree in CS/C cybersecurity

Tools

EnCase

FTK

Volatility

SIFT Workstation

Splunk

ELK

Job description

Placements24 is seeking a Senior Information Security Engineer (Incident Response) to lead responses to security incidents from a remote location within South Africa. You will conduct forensic investigations, refine IR playbooks, and collaborate with threat intel and IT teams to ensure rapid containment and recovery.

The ideal candidate brings 6+ years in information security, with 4+ years in IR/forensics, and hands-on experience with SIEM/EDR, scripting, and modern forensic tools.