Incident Response Team Leader (Remote US)

APPLY NOW

Copy Link WhatsApp Linkedin Facebook Twitter Email

Back to Job Openings

Copy Link WhatsApp Linkedin Facebook Twitter Email

Incident Response Team Leader (Remote US)

Managerial Managerial

United States: Dallas TX, Atlanta GA, Tampa FL, Houston TX, Charlotte NC, Indianapolis IN, Oklahoma City OK

Services/Support | Full Time | Job Id: 25693

Why Join Us?

As the world's leading vendor of Cyber Security, facing the most sophisticated threats and attacks, we've assembled a global team of the most driven, creative, and innovative people. At Check Point, our employees are redefining the security landscape by meeting our customers' real-time needs and providing our cutting-edge technologies and services to an ever-growing customer base.

Check Point Software Technologies has been honored by Time Magazine as one of the World's Best Companies and Newsweek's list of Americas Best Cybersecurity Companies. We've also earned a spot on the Forbes list of the World's Best Places to Work for five consecutive years and recognized as one of the World's Top Female-Friendly Companies. If you're passionate about making the world a safer place and want to be part of an award-winning company culture, we invite you to join us.

We are seeking an experienced Incident Response Team Leader to lead a team of IR analysts supporting enterprise customers across the US. This is a hands-on leadership role focused on cyber incident management, customer engagement, threat containment, and operational excellence.

Key Responsibilities

• Lead and mentor a team of Incident Response analysts during active security incidents
• Serve as the primary customer-facing lead during investigations and crisis situations
• Coordinate incident triage, containment, eradication, and recovery efforts
• Deliver executive-level communications, incident briefings, and post-incident reporting
• Drive operational readiness, process improvement, and collaboration across security teams

Qualifications

• 5+ years of experience in Incident Response, or DFIR
• Strong knowledge of ransomware, cloud, identity, and enterprise attack investigations
• Excellent customer-facing communication and stakeholder management skills
• Experience leading remote teams in high-pressure environments
• Proficient with EDR, SIEM, threat intelligence, and forensic investigation tools
• GIAC, GCFA, GCIH, CISSP, or similar certifications

Preferred

• Experience in consulting or managed security services environments

Must be eligible to work in the US without sponsorship from an employer now or in the future.

EOE M/F/Veterans/Disabled

Apply Now

Basic information

Next: Education

First Name *

Please enter your first name (Use English characters only)

Last Name *

Please enter your last name (Use English characters only)

Email *

Please enter/ correct your email address

Phone *

Location (City) *

Location is a required field

LinkedIn Profile URL

Please correct your LinkedIn profile

Gender * Please select Male Female Non-binary / X Gender Decline to State

Gender is a required field

Resume/CV * Attach Resume

Continue

Education

Next: Equal Employment Opportunity

Are you a student?

Yes No

Education Info

Graduation date

Please select month and enter a valid year

Current GPA

Willing to relocate?

Yes No

Where to?

Are you eligible to work in the U.S. without sponsorship now or in future?

Yes No

Compensation Expectations

Continue

Back

Equal Employment Opportunity

We are legally required to collect certain statistical data from individuals pursuing employment with us.

Any information you voluntarily provide will be used only for reporting purposes and will not be used in making employment decisions.

Ethnicity * Please select Decline to State Ethnicity Unknown Hispanic or Latino Not Hispanic or Latino

Ethnicity is a required field

Race * Please select White Black or African American American Indian and Alaska Native Asian Native Hawaiian and Other Pacific Islander Balance of Not Hispanic or Latino Decline to State

Race is a required field

Voluntary Self-Identification of Post-Offer Protected Veterans Click here *

I am not a veteran

I belong to the following classification of protected veterans:

Disabled Veteran

Recently Separated Veteran

Active Duty Discharge:

Active Wartime or Campaign Badge Veteran

Armed Forces Service Medal Veteran

I am NOT a protected veteran. (I served in the military but do not fall into any veteran categories listed above)

I choose not to identify my veteran status

This is a required field

Voluntary Self-Identification of Disability CC-305 Form Click here *

YESI Have a disability NOI don't have a disability Prefer not to answer

This is a required field

Check Point is committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please send an email to accommodations@checkpoint.com and let us know the nature of your request and your contact information.

I hereby agree that my information will be processed according to Check Point's Privacy Notice.

Please confirm

Back