Incident Response Team Lead

Sygnia is the foremost global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With a team of deep digital combat, leading- edge, purpose-built technology, and enterprise security specialists, it enables companies to proactively build cyber resilience and defeat attacks within their networks. Sygnia is a trusted advisor and service provider of technology and security teams, executives and boards of leading organizations worldwide. Sygnia supports clients at each stage of their security journey, bringing frontline experience and technological acumen to help them be unstoppable in the face of cyber threats.

The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cyber security. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber.

Sygnia is looking for an experienced Incident Response Team Leader (IR TL) to lead incident response investigations and security assessment projects for clients worldwide. This is a leadership role within Sygnia’s Incident Response department and an integral part of the company’s global IR service delivery organization.

The role combines hands-on technical leadership, team management, client engagement and project leadership. The IR TL will lead and mentor highly skilled cyber security researchers and forensic experts while managing complex investigations and helping clients respond to sophisticated cyber threats.

Following a substantial and successful tenure in the position, the IR TL will have opportunities for continued professional growth and advancement across a variety of technical, managerial and client-facing roles within Sygnia.

Main Responsibilities

• Lead a team of top-tier cyber security researchers and forensic experts conducting assessments and in-depth analysis in complex investigations, as well as security assessments.
• Guide and empower team members, enhancing their technical and research skills.
• Lead client-facing projects including incident response and hunting efforts for large-scale sophisticated attacks, to contain and defeat real-world cyber threats.
• Collaborate and work with clients’ IT and Security teams during investigations.
• Design and improve internal incident response technologies, methodologies, and processes.

Main Requirements

• At least 3 years of senior-level experience leading or conducting incident response investigations and research in a professional cybersecurity environment, within the civilian sector.
• Experience conducting incident response investigations and research in a professional cybersecurity environment, including direct client-facing experience, preferably within the civilian sector.
• Excellent English – spoken and written.
• In-depth understanding of the lifecycle of advanced security threats, attack vectors and methods of exploitation.
• Strong technical understanding of network fundamentals, common internet protocols and system and security controls.
• Experience with the tools and techniques used in security event analysis, incident response, computer forensics, malware analysis, or other areas of security operations.
• Multidisciplinary knowledge and competencies, such as:
• Hands-on experience in data analysis, preferably network traffic or log analysis, using relevant data analysis and data science platforms such as Jupyter, Splunk, pandas and SQL.
• Familiarity with cloud infrastructure, web applications and servers, and Android and iOS mobile platforms.
• Experience with malware analysis and reverse engineering.
• Familiarity with enterprise SIEM platforms, such as Splunk, QRadar and ArcSight.
• Exceptional reporting and analytics abilities, as well as strong written and oral presentation skills. The ability to articulate complex technical issues in a concise and confident manner and provide status updates to a variety of audiences, including technical personnel and executive-level management.
• Ability to work in a dynamic matrix organizational structure, with people across all levels of the company, including executives and technical stakeholders.
• Team-oriented, with excellent communication skills.
• Decisive, bright and positive leader who strives for excellence.
• Previous experience in strategy or cybersecurity consulting – an advantage.
• Willingness to travel abroad as required.
• Willingness to work irregular hours, including evenings, nights, weekends and holidays, as required by incident response engagements.