Zaintech

4 weeks ago

Incident Response Team Leader

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Lead cybersecurity incident response engagements, manage complex investigations, and oversee incident response delivery across customer and enterprise environments. Provide technical leadership, coordinate resources during incidents, and drive improvements in cyber resilience and compliance with NCSC licensing requirements.

Location: Amman

Workplace: Onsite

Employment Type: Full time

Job Function: Administration & Executive Assistance

Seniority: Mid level

Key Responsibilities

•Lead cybersecurity incident response engagements from identification through recovery.
•Direct technical response teams during Major security incidents, Ransomware attacks and Data breaches.
•Coordinate containment, eradication, recovery, and remediation activities.
•Act as the primary incident commander during major incidents.
•Oversee complex investigations involving Malware outbreaks, Insider threats, Targeted attacks and Data exfiltration incidents.
•Validate investigation findings and response recommendations.
•Provide technical leadership during high-severity incidents.
•Support digital forensics activities where required.
•Lead, mentor, and develop Incident Response Analysts.
•Conduct technical coaching, performance management, skills development initiatives and incident response readiness activities.
•Support recruitment and onboarding of new team members.
•Drive continuous capability development across the incident response function.
•Serve as the primary customer-facing lead during major incidents.
•Provide executive briefings and incident status updates.
•Support regulatory, compliance, and reporting obligations.
•Ensure adherence to Incident response policies, Service level agreements and NCSC operational requirements.
•Develop and maintain Incident response frameworks, Playbooks, Runbooks and Response procedures.
•Lead tabletop exercises and simulation activities.
•Conduct post-incident reviews and lessons learned sessions.
•Drive improvements to organizational cyber resilience and response capabilities.

Key Requirements

•Bachelor's degree (minimum) in information technology or a related field.
•Minimum 5 years in cybersecurity / information security, including 3 or more years specifically in incident response.
•At least one valid NCSC-approved IR certification like (ECIH , CCIM, or Blue Team Level 2, or another equivalent certification in the same field that is approved by the NCSC.
•Technical command. Hands-on expertise in incident triage, forensics-aware investigation, containment, and recovery across endpoint, network, and cloud.
•Leadership. Proven ability to lead an analyst team under pressure and communicate clearly with clients and the NCSC.

Experience:5+ yearsInformation technologyCybersecurity

Education:Bachelor's

Skills:Incident responseCybersecurityForensicsLeadershipStakeholder management

Certifications:ECIHCCIMBlue Team Level 2GCIHGCFA

Languages:English

Tech Stack:ECIHCCIMBlue Team Level 2GCIHGCFAMSSPSOCEDRSOARCloudEndpointNetwork

Company Brief

Zaintech

Zaintech is the digital services and technology arm of Zain Group, delivering cloud, managed services, cybersecurity, contact center, and digital transformation solutions to enterprises and carriers across the Middle East and Africa.

Industry: Consulting

Company Size: Large (251 to 1,000 employees)

Growth: Established Company

Headquarters: Kuwait City, Kuwait

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Zaintech

4 weeks ago

Incident Response Team Leader

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Location: Amman

Workplace: Onsite

Employment Type: Full time

Job Function: Administration & Executive Assistance

Seniority: Mid level

Key Responsibilities

•Lead cybersecurity incident response engagements from identification through recovery.
•Direct technical response teams during Major security incidents, Ransomware attacks and Data breaches.
•Coordinate containment, eradication, recovery, and remediation activities.
•Act as the primary incident commander during major incidents.
•Oversee complex investigations involving Malware outbreaks, Insider threats, Targeted attacks and Data exfiltration incidents.
•Validate investigation findings and response recommendations.
•Provide technical leadership during high-severity incidents.
•Support digital forensics activities where required.
•Lead, mentor, and develop Incident Response Analysts.
•Conduct technical coaching, performance management, skills development initiatives and incident response readiness activities.
•Support recruitment and onboarding of new team members.
•Drive continuous capability development across the incident response function.
•Serve as the primary customer-facing lead during major incidents.
•Provide executive briefings and incident status updates.
•Support regulatory, compliance, and reporting obligations.
•Ensure adherence to Incident response policies, Service level agreements and NCSC operational requirements.
•Develop and maintain Incident response frameworks, Playbooks, Runbooks and Response procedures.
•Lead tabletop exercises and simulation activities.
•Conduct post-incident reviews and lessons learned sessions.
•Drive improvements to organizational cyber resilience and response capabilities.

Key Requirements

•Bachelor's degree (minimum) in information technology or a related field.
•Minimum 5 years in cybersecurity / information security, including 3 or more years specifically in incident response.
•At least one valid NCSC-approved IR certification like (ECIH , CCIM, or Blue Team Level 2, or another equivalent certification in the same field that is approved by the NCSC.
•Technical command. Hands-on expertise in incident triage, forensics-aware investigation, containment, and recovery across endpoint, network, and cloud.
•Leadership. Proven ability to lead an analyst team under pressure and communicate clearly with clients and the NCSC.

Experience:5+ yearsInformation technologyCybersecurity

Education:Bachelor's

Skills:Incident responseCybersecurityForensicsLeadershipStakeholder management

Certifications:ECIHCCIMBlue Team Level 2GCIHGCFA

Languages:English

Tech Stack:ECIHCCIMBlue Team Level 2GCIHGCFAMSSPSOCEDRSOARCloudEndpointNetwork

Company Brief

Zaintech

Industry: Consulting

Company Size: Large (251 to 1,000 employees)

Growth: Established Company

Headquarters: Kuwait City, Kuwait

Website LinkedIn