Cyber Security Specialist – Blue Team / Incident Response Lead

About the role

We are looking for a hands‑on leader to head high‑severity cyber incidents for a large‑scale enterprise environment. The role combines incident response leadership with strategic improvement of detection and response capabilities across cloud, identity, endpoint, network, SaaS and hybrid platforms.

Key responsibilities

• Lead investigation, containment and remediation of high‑severity security incidents.
• Conduct advanced investigations across cloud, identity, endpoint, network, SaaS and hybrid environments.
• Develop and refine incident response playbooks, tabletop exercises and operational readiness.
• Partner with security engineering to enhance SOAR automation, AI‑assisted response workflows and security operations.
• Collaborate with infrastructure, cloud and identity teams to strengthen enterprise security posture.
• Drive continuous improvement through post‑incident reviews, metrics and threat‑informed enhancements.

Required profile

• 6+ years of experience in Incident Response, Blue Team or Security Operations.
• Proven track record as an incident lead or escalation point for complex security events.
• Strong knowledge of cloud security, identity‑based threats, MITRE ATT&CK and hybrid environments.
• Experience with SOAR platforms, security automation and modern detection and response tools.
• Exposure to AI‑enabled security operations is a plus.

Required skills

• Cloud security
• Identity security
• MITRE ATT&CK framework
• SOAR platforms
• Security automation
• Detection and response platforms
• AI‑enabled security operations