Senior Cybersecurity Incident Coordinator

Full Job Description

As a Senior Cybersecurity Incident Coordinator, you will independently coordinate customer engagements and concurrent operational workstreams, keep stakeholders aligned, and enable technical specialists to deliver effective response outcomes. Operational Management Coordinate intake and pre-engagement scoping with customers and technical leads: clarify needs, desired outcomes, dependencies, resource requirements and delivery timelines. Manage engagement staffing and capacity, including special-event support, matching available skills to demand and escalating resource gaps or conflicting priorities. Maintain escalation pathways, direct issues to the appropriate delivery teams, track progress and promptly raise urgent, sensitive or unresolved matters to leadership. Serve as an operational point of coordination for customers, technical teams, executives, consultants and partners; communicate priorities, decisions, dependencies and next steps clearly. Coordinate multiple concurrent engagements and workstreams, prioritise and delegate operational tasks, and maintain accurate status, schedules, risks, decisions and action records. Lead daily and weekly operational standups and status reporting, follow through on agreed actions, and provide clear follow-the-sun handovers with explicit ownership and outstanding risks. Partner with technical leads to translate investigation findings and uncertainty into clear customer updates. Coordinate dependencies for evidence preservation, containment and recovery while leaving technical decisions and execution with the responsible specialists. Collaborate with Legal, Security Research, Product Groups and other internal teams to address emerging issues and remove delivery blockers. Maintain and improve incident management procedures and operational workflows; identify demand trends and recurring bottlenecks, and use lessons learned to improve delivery. A relevant degree in Computer Science, Computer Security, Statistics, Mathematics or a related field, or equivalent practical experience in cybersecurity, incident management or related operations AND 5+ years of industry experience Demonstrated experience coordinating customer-facing cybersecurity incidents or complex security service delivery, including planning and stakeholder communications. Demonstrated ability to manage multiple concurrent workstreams, prioritise competing demands, delegate tasks and align resources and stakeholders under time pressure. Technical fluency in enterprise cybersecurity across endpoint, identity, cloud and network environments, sufficient to understand investigation findings, dependencies and uncertainty and communicate effectively with technical specialists and customers. Evidence of sound operational judgement, accurate record keeping, clear written and verbal communication, and effective follow-the-sun handovers. Flexibility to work shifts, including assignments during non-standard business hours that may include evening, nighttime, weekends, and/or holidays. Experience coordinating high-pressure incident response at enterprise scale, including executive communications, competing customer priorities and globally distributed teams. Experience in capacity planning, project management, process design and operational improvement, supported by relevant methodologies or frameworks. Familiarity with NIST CSF, MITRE ATT&CK, ISO 27001, and the dependencies between investigation, containment and recovery. Hands-on investigation, identity security, threat hunting, forensics, scripting, KQL or automation experience that strengthens coordination and operational efficiency; these are not mandatory entry requirements. Relevant security or incident/project management certifications, or equivalent practical expertise; demonstrated stakeholder influence, mentoring and resilience. DART This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. *