Manager, Cyber Defence

Lead and manage incident response and cyber investigation engagements with clients.,Execute digital forensic evidence collection and analysis across operating systems, hard drives, and networks.,Analyze logs and metadata to identify Indicators of Compromise (IOCs) and potential threat actors.,Perform host and network-based traffic monitoring across Windows, Linux, and mobile platforms.,Conduct investigations in cloud environments, including SaaS and PaaS platforms.,Fulfill regular on-call responsibilities for urgent incident response activities.,Develop and modify custom tools, plugins, or scripts (Python, PowerShell, Bash) to solve specific technical challenges.

At least 5 years of experience in incident response, ideally within a consulting or internal CSIRT environment.,Demonstrated expertise in forensic evidence handling and chain-of-custody procedures.,Possession of at least one relevant professional certification (e.g., GCIH, GCFE, EnCE, CCFP).,Experience in technical domains such as Penetration Testing, Red Teaming, or SOC/Blue Teaming is a plus.,Knowledge of networking protocols, web protocols, and cloud architecture.

Bachelor's Degree in Computer Science, Information Technology, or a related field

Must be willing to participate in on-call shifts for emergency incident response; occasional travel for client site investigations may be required.