Vice President, Cyber Defense & Incident Response

About the role

The Vice President of Cyber Defense & Incident Response leads the organization’s ability to detect, analyze, respond to, and recover from security incidents. This senior position ensures a robust intelligence posture and coordinates across all IT and security domains.

Key responsibilities

• Oversee monitoring and correlation of log events across security devices, network infrastructure, applications, and operating systems.
• Design and maintain standard response procedures, conduct post‑incident reviews for priority incidents, and follow defined escalation policies.
• Plan and execute blue‑team/red‑team exercises, hackathons, and bug‑bounty programs to uncover and remediate security gaps.
• Lead threat‑intel activities, stay current with external intelligence, and collaborate with architecture teams on security strategy.
• Manage forensic analysis, investigations, and liaison with law‑enforcement and national CERT agencies.
• Produce after‑action reports, root‑cause analyses, and ensure timely communication with stakeholders.
• Create, review, and update SOPs, policies, and compliance documentation.

Required profile

• 20+ years of experience in IT and security, with at least 8‑10 years in security management.
• Strong governance, partner engagement, and team‑leadership capabilities.
• Bachelor’s degree in Engineering, Cyber Security, or a related field.
• Relevant certifications such as CISSP, CCSP, CISA, or CISM.

Required skills

• SIEM platforms and security monitoring tools.
• Antivirus (AV), Data Loss Prevention (DLP), Endpoint Detection & Response (EDR), and Proxy solutions.
• Network security appliances: NIPS, DDoS protection, firewalls.
• Network and system administration expertise.

What we offer

• Strategic leadership role shaping the organization’s cyber defense posture.
• Opportunity to work with cutting‑edge security technologies and cross‑functional teams.
• Influence on national‑level threat‑intel collaborations.