Incident Response Manager

Sygnia is the foremost global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With a team of deep digital combat, leading- edge, purpose-built technology, and enterprise security specialists, it enables companies to proactively build cyber resilience and defeat attacks within their networks. Sygnia is a trusted advisor and service provider of technology and security teams, executives and boards of leading organizations worldwide. Sygnia supports clients at each stage of their security journey, bringing frontline experience and technological acumen to help them be unstoppable in the face of cyber threats.

The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cyber security. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber.

Sygnia is looking for an experienced Incident Response Manager (IRM) to lead incident response services for clients across EMEA. This is a senior management role within Sygnia’s Incident Response department and an integral part of the company’s global IR service delivery organization.

The role combines technical leadership, crisis management, client engagement, and cross-functional project leadership. Following a substantial and successful tenure in the position, the IRM will have opportunities for continued professional growth and advancement across a variety of roles within Sygnia.

Main Responsibilities

• Lead incident response and threat-hunting engagements involving large-scale and sophisticated cyberattacks, with the objective of containing, mitigating, and defeating real-world threats.
• Lead dynamic, cross-functional teams of cybersecurity researchers, forensic experts, and other specialists assembled according to the specific needs of each engagement. Team members do not report directly to the IRM outside the scope of the project.
• Maintain clear, concise, and timely internal communication, providing regular updates to technical, financial, legal, business, and executive stakeholders within Sygnia.
• Lead client-facing communication throughout investigations and work closely with clients’ IT, security, legal, and executive teams, as well as relevant external stakeholders.
• Serve as a trusted advisor to clients during high-pressure and business-critical situations.
• Collaborate with Sygnia’s global teams to ensure consistent, high-quality incident response delivery across regions.
• Strengthen client relationships, identify relevant business opportunities, and support the introduction of additional Sygnia services.
• Contribute to Sygnia’s broader strategic objectives through professional publications, thought leadership, marketing initiatives, and business development activities.
• Design, develop, and continuously improve internal incident response methodologies, processes, and capabilities.

Main Requirements

• At least 5 years of experience leading teams through direct management, project-based leadership, matrix management, or a combination of these models.
• Proven ability to lead diverse groups of specialists who do not report directly to the role, while maintaining alignment, accountability, and effective execution.
• A decisive, intellectually sharp, and positive leader with a strong commitment to excellence.
• Calm and thoughtful leadership style, with the ability to make sound decisions in highly dynamic and fast-paced environments.
• Strong crisis-management capabilities, including the ability to objectively assess situations, manage complex stakeholder relationships, and continuously evaluate actions and priorities.
• Exceptional written, verbal, and presentation skills in English, with the ability to explain complex technical matters clearly and confidently to both technical professionals and executive leadership. Additional languages are an advantage.
• In-depth understanding of advanced cyber threats, attack vectors, adversary techniques, and exploitation methods.
• Strong technical knowledge of network fundamentals, common internet protocols, operating systems, and security controls.
• Familiarity with the tools and techniques used in security event analysis, incident response, digital forensics, malware analysis, and broader security operations.
• Ability to work in a project-based model involving urgent and unplanned engagements, including availability outside regular working hours and on weekends when required.
• Willingness to travel internationally as needed.
• Previous experience in strategy or cybersecurity consulting is an advantage.
• An academic degree in a technological or scientific discipline is an advantage.