Lead Incident Response

The role

You will lead the Incident Response team, managing people and coordinating serious cases like ransomware and business email compromise. You will perform forensic work and act as a senior escalation point for major incidents.

What you will do

• Lead, coach, and develop the Incident Response team
• Manage the caseload and personally take point on complex incidents
• Own end-to-end incident response service quality
• Own delivery KPIs including time-to-containment and client satisfaction
• Manage on-call and case-lead rostering and workload
• Act as senior escalation point and incident commander for major incidents
• Own quality assurance for incident reporting and peer reviews
• Own and scale automation across casework
• Drive continuous improvement of IR playbooks, tooling, and process
• Represent Incident Response in cross-functional discussions

Required qualifications

• 6+ years of hands-on incident response / digital forensics experience
• Deep, current knowledge of DFIR methodology, EDR platforms, cloud security, and attacker TTPs
• Composure and sound judgement under real pressure
• Strong incident-report writing
• Clear, calm, authoritative communication with clients and internal stakeholders
• Proven experience leading or supervising a technical team through high-pressure, time-critical work
• First-line management experience or a strong informal leadership track record
• Fluent English
• Dutch (C2) required for client-facing work

Nice to have

• Background in a CERT, CSIRT, MDR, or DFIR-focused environment
• Experience handling cases with legal or regulatory exposure
• Scripting/automation experience applied to investigation workflows
• Familiarity with compliance frameworks relevant to SMEs (NIS2, ISO 27001, GDPR)

About the company

Eye Security provides cybersecurity with embedded cyber insurance solutions for organisations across Europe. Headquartered in the Netherlands, they combine 24/7 detection and response with hands-on incident response.