Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 102 days ago

Incident Response Team Leader

Workable (global search)108,016 open roles

Where
Amman, Amman Governorate, Jordan
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIncident Response Team LeaderWorkable (global search) · Amman, Amman Governorate, Jordan

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Workable (global search)'s own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

7.9% of postings close within 7 days. Measured by our own scanner across the market. Workable (global search) postings stay open a median of 7 days.

Share of postings closed within
  1. 1.6%1 day
  2. 3.6%3 days
  3. 7.9%7 days
  4. 14.9%14 days
  5. 34.0%30 days
This job: posted 102 days ago

Workable (global search) median: 7 days open

The posting

The Incident Response Team Leader is responsible for leading cybersecurity incident response activities, managing complex investigations, and overseeing the delivery of incident response services across customer and enterprise environments. The role provides technical leadership, operational oversight, and strategic direction for incident response engagements while ensuring effective coordination of resources during security incidents.

This role serves as the primary escalation point for major cybersecurity incidents and plays a key role in strengthening incident response readiness, improving operational maturity, and ensuring compliance with NCSC licensing requirements.

Responsibilities:

Incident Response Leadership

  • Lead cybersecurity incident response engagements from identification through recovery.
  • Direct technical response teams during Major security incidents, Ransomware attacks and Data breaches
  • Coordinate containment, eradication, recovery, and remediation activities.
  • Act as the primary incident commander during major incidents.

Advanced Incident Investigation

  • Oversee complex investigations involving Malware outbreaks, Insider threats, Targeted attacks and Data exfiltration incidents
  • Validate investigation findings and response recommendations.
  • Provide technical leadership during high-severity incidents.
  • Support digital forensics activities where required.

Team Management & Development

  • Lead, mentor, and develop Incident Response Analysts.
  • Conduct Technical coaching, Performance management, Skills development initiatives and Incident response readiness activities
  • Support recruitment and onboarding of new team members.
  • Drive continuous capability development across the incident response function.

Governance & Stakeholder Management

  • Serve as the primary customer-facing lead during major incidents.
  • Provide executive briefings and incident status updates.
  • Support regulatory, compliance, and reporting obligations.
  • Ensure adherence to Incident response policies, Service level agreements and NCSC operational requirements

Program Development & Continuous Improvement

  • Develop and maintain Incident response frameworks, Playbooks, Runbooks and Response procedures
  • Lead tabletop exercises and simulation activities.
  • Conduct post-incident reviews and lessons learned sessions.
  • Drive improvements to organizational cyber resilience and response capabilities.

Our Culture & Code of Conduct:

At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our Code of Conduct, which serves as a guiding framework for responsible behavior across everything we do — from how we work with each other to how we engage with clients and partners globally.

Requirements

  • Bachelor's degree (minimum) in information technology or a related field.
  • Minimum 5 years in cybersecurity / information security, including 3 or more years specifically in incident response.
  • At least one valid NCSC-approved IR certification like (ECIH , CCIM, or Blue Team Level 2, or another equivalent certification in the same field that is approved by the NCSC.
  • Technical command. Hands-on expertise in incident triage, forensics-aware investigation, containment, and recovery across endpoint, network, and cloud.
  • Leadership. Proven ability to lead an analyst team under pressure and communicate clearly with clients and the NCSC.
  • Advanced degree in cybersecurity or a related discipline is preferable.
  • Additional credentials such as GCIH, GCFA, or vendor EDR/SOAR is preferable.
  • Experience in an MSSP, telco-affiliated SOC, or national CERT/CSIRT environment is preferable.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Workable (global search)'s own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Workable (global search)'s form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Workable (global search)'s answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.