Cyber Incident Response Commander | CERT / SOC

Job summary

Lead significant cybersecurity incidents from severity assessment and declaration through containment, mitigation, recovery, and reporting, coordinating technical, business, legal, and communications teams. Maintain and improve response plans and playbooks, document lessons learned, identify incident patterns, prepare audit evidence, and contribute to CERT and cyber defense initiatives.

Job details

Cyber Incident Response Commander | CERT / SOC Amaris Consulting is looking for a Cyber Incident Response Commander to join the CERT of a global transport and logistics organisation. This is an intermediate-level opportunity for a cybersecurity professional with experience coordinating security incidents, maintaining response processes and working with technical and business stakeholders during high-pressure situations. Key responsibilities Act as Incident Commander for significant information-security incidents. Assess incident severity and formally declare major incidents when required. Coordinate technical, business, legal and communication teams. Manage incidents through containment, mitigation, recovery and reporting. Prioritize forensic activities and ensure effective collaboration between response teams. Maintain and improve Incident Response Plans, procedures and playbooks. Adapt response plans to different scopes, including ships, regions and subsidiaries. Document lessons learned and recommend process improvements. Establish relationships between incidents and identify recurring patterns. Prepare evidence and documentation for internal and external audits. Participate in CERT projects, Cyber Defense Center activities and compliance initiatives. Work with international and offshore teams across different regions. Profile 4 to 6 years of experience in Cyber Incident Response, CERT, SOC, SecOps or GRC. Ideally 5+ years in roles involving similar responsibilities. Experience acting as an Incident Commander during cybersecurity incidents. Knowledge of incident-response methodologies such as NIST, ISO 27035 or the SANS six-step process. Understanding of SOC operations, security tools and digital-forensics techniques. Experience writing and maintaining Incident Response Plans and playbooks. Ability to communicate cybersecurity incidents clearly to management and executives. Relevant certifications such as GCFA, CIH, CISSP, CEH, ECSA or ITIL Foundation are an asset. Strong analytical, communication and decision-making skills. Ability to remain calm and structured during crisis situations. Professional fluency in English. Experience in transport, shipping or logistics would be an advantage. If you are an experienced cybersecurity professional who can lead complex incidents and help improve enterprise response capabilities, please send us your updated CV.

What you’ll do

Lead significant cybersecurity incidents from severity assessment and declaration through containment, mitigation, recovery, and reporting, coordinating technical, business, legal, and communications teams. Maintain and improve response plans and playbooks, document lessons learned, identify incident patterns, prepare audit evidence, and contribute to CERT and cyber defense initiatives.

Requirements

Candidates should have 4–6 years of experience in incident response, CERT, SOC, SecOps, or GRC, including experience serving as an incident commander and maintaining response plans or playbooks. They should understand incident-response methodologies, SOC operations, security tools, and digital forensics, and communicate effectively in English under pressure; relevant certifications and transport or logistics experience are advantageous.

Listed skills

• crisis management · Preferred
• Process Improvement · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Cyber Incident Response
• Incident Command
• Incident Severity Assessment
• Incident Response Planning
• Incident Containment and Recovery
• Digital Forensics
• SOC Operations
• Security Operations
• Crisis Management
• Stakeholder Coordination
• Executive Communication
• Audit Documentation
• Process Improvement
• NIST
• ISO 27035
• SANS Six-Step Process

Job areas

• Security & Safety
• Technology
• Management & Leadership
• Consulting
• Transportation

More jobs from Mantu