Incident Response Manager – Cyber Security

Location: Netherlands

Working Model: Hybrid

Language: Fluent Dutch & English

Employment: Permanent

The Opportunity

We are looking for an experienced Incident Response Manager to join a growing Cyber Security practice in the Netherlands.

This is an opportunity to play a key role in building and developing an Incident Response capability that currently consists of two consultants. You will combine hands-on Incident Response expertise with leadership, customer engagement and responsibility for developing the wider practice.

The position would suit someone with a strong technical IR background who is ready to take greater ownership of a team and help shape how the service develops.

Key Responsibilities

• Help build and grow the Incident Response practice in the Netherlands.
• Lead and coordinate responses to complex cyber security incidents.
• Support and develop the existing Incident Response consultants.
• Manage incidents across triage, investigation, containment, eradication, recovery and post-incident review.
• Perform and coordinate Digital Forensics & Incident Response (DFIR) activities.
• Work directly with customers during business-critical security incidents.
• Develop Incident Response playbooks, processes and procedures.
• Conduct root-cause analysis and provide recommendations following incidents.
• Support cyber readiness assessments, tabletop exercises and simulations.
• Work closely with SOC, Threat Intelligence, Forensics and wider Cyber Security teams.
• Participate in the team’s on-call Incident Response capability.
• Help shape the longer-term growth and direction of the IR offering.

Your Background

You should bring approximately 3-4+ years of relevant Incident Response / DFIR experience, ideally gained within a consulting, MSSP or enterprise security environment.

Experience responding to incidents such as ransomware, malware, phishing, account compromise, data breaches and advanced cyber attacks would be highly valuable.

You should also have knowledge of areas such as SIEM, EDR/XDR, endpoint and network investigations, cloud environments, threat intelligence and frameworks including MITRE ATT&CK and NIST.

Previous leadership experience is beneficial, but we are equally interested in strong Senior Incident Response Consultants ready to take the next step into management.

Essential Requirements

Fluent Dutch is required due to the customer-facing and on-call nature of the position.

Candidates must also be based in the Netherlands and comfortable supporting customers locally when required.

This is a strong opportunity for someone who doesn’t simply want to join an established IR function, but wants to help build one and have genuine influence over its future direction.

Darwin Recruitment is acting as an Employment Agency in relation to this vacancy.

Anthony Furlonge