Incident Response Lead

About the Role

CyberOne is a UK-based firm specializing in managed detection, cloud security, and penetration testing. Utilizing AI-augmented services powered by Microsoft, they provide rapid threat containment and risk reduction for enterprise and regulated industries. They are hiring an Incident Response Lead to work remotely from the Philippines, tasked with managing complex security incidents, leading cross-functional teams, and providing strategic counsel to executive stakeholders.

Requirements

• Proven experience leading high-stakes cybersecurity incident responses.
• Ability to translate technical security risks into strategic business advice for executive and board-level audiences.
• Technical proficiency in enterprise environments, specifically Windows, Active Directory, and Microsoft 365.
• Experience with SIEM, EDR, identity telemetry, and tools such as Microsoft Sentinel and Defender XDR.
• Deep understanding of attacker tactics, including persistence, lateral movement, and data exfiltration, alongside familiarity with NIST SP 800-61 and MITRE ATT&CK frameworks.
• Strong ability to manage high-pressure environments.
• Certifications like GCIH, GCFA, CISSP, or CISM are preferred but not mandatory if offset by equivalent practical experience.

Responsibilities

• Lead the end-to-end management of cyber incidents, including severity classification, impact assessment, and operational prioritization.
• Serve as the central point of contact for technical teams, clients, and third-party partners, managing war rooms and stakeholder communication.
• Oversee containment, recovery, and remediation efforts while ensuring rigorous evidence preservation.
• Facilitate client preparedness through tabletop exercises and IR plan reviews.
• Perform quality assurance on investigation reports, mentor junior SecOps staff, and optimize service playbooks based on post-incident analysis.

Benefits & Perks

• A fully remote position based in the Philippines with ongoing opportunities for professional growth through specialized training and internal mentorship programs.