Incident Response Manager

Sygnia is the foremost global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With a team of deep digital combat, leading- edge, purpose-built technology, and enterprise security specialists, it enables companies to proactively build cyber resilience and defeat attacks within their networks. Sygnia is a trusted advisor and service provider of technology and security teams, executives and boards of leading organizations worldwide. Sygnia supports clients at each stage of their security journey, bringing frontline experience and technological acumen to help them be unstoppable in the face of cyber threats.

The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cyber security. Described by Forbes as a “cyber security delta force”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber.

Sygnia is looking for an experienced Incident Response Manager (IRM) to lead incident response services for clients across APAC. This is a senior management role within Sygnia’s Incident Response department and an integral part of the company’s global IR service delivery organization.

The role combines technical leadership, crisis management, client engagement, and cross-functional project leadership. Following a substantial and successful tenure in the position, the IRM will have opportunities for continued professional growth and advancement across a variety of roles within Sygnia.

Main Responsibilities

• Lead incident response and threat-hunting engagements involving large-scale and sophisticated cyberattacks, with the objective of containing, mitigating, and defeating real-world threats.
• Support the investigation strategy and technical direction of engagements, ensuring that evidence collection, analysis, containment, and remediation activities address the client’s most critical risks and business priorities.
• Lead dynamic, cross-functional teams of cybersecurity researchers, forensic experts, and other specialists assembled according to the specific needs of each engagement. Team members do not report directly to the IR Manager outside the scope of the project.
• Critically assess technical findings, challenge assumptions, identify investigative gaps, and guide the team toward clear and defensible conclusions.
• Maintain clear, concise, and timely internal communication, providing regular updates to technical, financial, legal, business, and executive stakeholders within Sygnia.
• Lead client-facing communication throughout investigations and work closely with clients’ IT, security, legal, and executive teams, as well as relevant external stakeholders.
• Serve as a trusted advisor to clients during high-pressure and business-critical situations.
• Collaborate with Sygnia’s global teams to ensure consistent, high-quality incident response delivery across regions.
• Strengthen client relationships, identify relevant business opportunities, and support the introduction of additional Sygnia services.
• Contribute to Sygnia’s broader strategic objectives through professional publications, thought leadership, marketing initiatives, and business development activities.
• Design, develop, and continuously improve internal incident response methodologies, processes, and capabilities.

Main Requirements

• At least five years of relevant leadership experience in incident response, cybersecurity consulting, crisis management, or a comparable technical environment.
• Demonstrated ability to lead technically complex investigations, evaluate evidence, guide specialists, make risk-based decisions, and communicate defensible conclusions.
• Proven ability to lead diverse groups of specialists who do not report directly to the role while maintaining alignment, accountability, and effective execution.
• A decisive, intellectually sharp, and positive leader with a strong commitment to excellence.
• A calm and thoughtful leadership style, with the ability to make sound decisions in highly dynamic and fast-paced environments.
• Strong crisis-management capabilities, including the ability to objectively assess situations, manage complex stakeholder relationships, and continuously evaluate actions and priorities.
• Exceptional written, verbal, and presentation skills in English, with the ability to explain complex technical matters clearly and confidently to technical professionals and executive leadership. Additional languages are an advantage.
• Strong technical understanding of advanced cyber threats, attack vectors, adversary techniques, exploitation methods, and incident response methodologies.
• Ability to assess technical findings, identify gaps or unsupported assumptions, and translate evidence into appropriate investigative and response decisions.
• Strong knowledge of network fundamentals, common internet protocols, operating systems, and security controls.
• Familiarity with the tools and techniques used in security-event analysis, incident response, digital forensics, malware analysis, and broader security operations.
• Ability to work in a project-based environment involving urgent and unplanned engagements, including availability outside regular working hours and on weekends when required.
• Willingness to travel internationally as needed.
• Previous experience in strategy or cybersecurity consulting is an advantage.
• An academic degree in a technological or scientific discipline is an advantage.