{"id":1749645,"url":"https://alion.io/job/darwin-recruitment-cyber-security-incident-response-manager","title":"Cyber Security incident response Manager","company":{"id":2211481,"name":"Darwin Recruitment","domain":"darwinrecruitment.com","url":"https://alion.io/company/darwinrecruitment","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":{"grade":"B","score":75,"open_postings":16,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-09-25T00:00:00Z","employer_posted_date":"2026-09-25","last_verified_at":"2026-10-03T16:17:12Z","board_verified":false,"closed_at":null,"days_open":37,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":37},"description":"Incident Response Manager - Cyber Security\nLocation: Netherlands\nWorking Model: Hybrid\nLanguage: Fluent Dutch & English\nEmployment: Permanent\nThe Opportunity\nWe are looking for an experienced Incident Response Manager to join a growing Cyber Security practice in the Netherlands.\nThis is an opportunity to play a key role in building and developing an Incident Response capability that currently consists of two consultants. You will combine hands-on Incident Response expertise with leadership, customer engagement and responsibility for developing the wider practice.\nThe position would suit someone with a strong technical IR background who is ready to take greater ownership of a team and help shape how the service develops.\nKey Responsibilities\nHelp build and grow the Incident Response practice in the Netherlands.\nLead and coordinate responses to complex cyber security incidents.\nSupport and develop the existing Incident Response consultants.\nManage incidents across triage, investigation, containment, eradication, recovery and post-incident review.\nPerform and coordinate Digital Forensics & Incident Response (DFIR) activities.\nWork directly with customers during business-critical security incidents.\nDevelop Incident Response playbooks, processes and procedures.\nConduct root-cause analysis and provide recommendations following incidents.\nSupport cyber readiness assessments, tabletop exercises and simulations.\nWork closely with SOC, Threat Intelligence, Forensics and wider Cyber Security teams.\nParticipate in the team’s on-call Incident Response capability.\nHelp shape the longer-term growth and direction of the IR offering.\nYour Background\nYou should bring approximately 3-4+ years of relevant Incident Response / DFIR experience, ideally gained within a consulting, MSSP or enterprise security environment.\nExperience responding to incidents such as ransomware, malware, phishing, account compromise, data breaches and advanced cyber attacks would be highly valuable.\nYou should also have knowledge of areas such as SIEM, EDR/XDR, endpoint and network investigations, cloud environments, threat intelligence and frameworks including MITRE ATT&CK and NIST.\nPrevious leadership experience is beneficial, but we are equally interested in strong Senior Incident Response Consultants ready to take the next step into management.\nEssential Requirements\nFluent Dutch is required due to the customer-facing and on-call nature of the position.\nCandidates must also be based in the Netherlands and comfortable supporting customers locally when required.\nThis is a strong opportunity for someone who doesn’t simply want to join an established IR function, but wants to help build one and have genuine influence over its future direction.\nDarwin Recruitment is acting as an Employment Agency in relation to this vacancy.\nAnthony Furlonge","description_format":"text","description_chars":2848,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Dutch","level":"Advanced (C1)","optional":false},{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Netherlands","iso":"NL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Incident Response","Recruiting & Staffing","Employer of Record & PEO"],"lifecycle":[{"event":"open","at":"2026-10-03T07:59:00Z"}],"visa":[],"liveness":{"score":12,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.527,"p_room":0.55,"age_days":37,"expected_fill_days":25,"reasons":["conf:685","stale_co","urgency","velocity","win:tail","comp:brand"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/darwin-recruitment-cyber-security-incident-response-manager","json_url":"https://alion.io/job/darwin-recruitment-cyber-security-incident-response-manager.json","meta":{"generated_at":"2026-11-01T13:47:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21155,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2211481},"rest":"https://alion.io/mcp/rest/get_company?id=2211481"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdarwin-recruitment-cyber-security-incident-response-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdarwin-recruitment-cyber-security-incident-response-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdarwin-recruitment-cyber-security-incident-response-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/darwin-recruitment-cyber-security-incident-response-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdarwin-recruitment-cyber-security-incident-response-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1749645}},{"tool":"search_jobs","arguments":{"company":"darwinrecruitment.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1749645},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}