Incident Response Lead
At DEFEND, our dream is to improve everyday life by creating a cyber resilient world. We're looking for an Incident Response Lead to lead organisations through their most critical cyber moments. You will coordinate major incident response engagements, proactively hunt for threats that evade existing controls, and conduct compromise assessments that surface hidden intrusion before it escalates. This role is both a frontline leader during active incidents and a recognised subject matter expert for customers and DEFEND colleagues alike. You will be trusted to lead complex investigations end to end, drive recovery with clarity and precision, and strengthen cyber resilience in the face of evolving threats.
In this role you'll...
- Take the lead when it matters, coordinating major cyber incidents from initial investigation through containment and secure recovery.
- Get hands-on with complex investigations, working through forensic evidence to understand what happened, how far an attacker got, and what needs to happen next.
- Hunt for what others have missed, using threat intelligence and adversary behaviour to uncover threats that have bypassed existing controls.
- Lead compromise assessments and threat hunting to identify signs of current or historic intrusion and help customers understand their exposure and risk.
- Turn technical findings into clear advice, giving technical teams and executives the confidence to make decisions during high-pressure situations.
- Help build a stronger response capability, mentoring others and improving the playbooks, processes and approaches we use across incident response and threat hunting.