Head of Cyber Defence & Incident Response (Cybersecurity)

Location: Hradec Kralove, Czechia; hybrid work model

Company

hirify.global supports businesses in digital transformation through secure, sustainable automation across digital and physical channels.

What you will do

• Lead cyber defence operations and incident response across on-premises and cloud environments, reporting to the CISO.
• Own the incident response lifecycle, including preparation, detection, analysis, containment, eradication, recovery, governance, and post-incident reviews.
• Act as incident commander during major security events, coordinating forensic triage, recovery, stakeholder communications, and executive updates.
• Manage the MSSP relationship, including service definitions, SLAs/KPIs, escalation paths, quality assurance, continuous improvement, and commercial governance.
• Optimise SIEM, SOAR, EDR/XDR, NDR, email security, vulnerability scanning, logging, alert quality, automation, and operational runbooks.
• Establish threat management, vulnerability management, threat hunting, tabletop exercises, security metrics, and continuous improvement programmes.

Requirements

• Strong experience leading cyber defence or SOC operations and incident response, including investigation, containment, recovery, and major incident coordination.
• Hands-on understanding of SIEM, SOAR, EDR/XDR, NDR, email security, log pipelines, detection engineering, and operational workflows.
• Experience managing an MSSP or outsourced SOC, including SLAs/KPIs, governance, escalations, and service improvement.
• Strong experience with vulnerability and threat management programmes, prioritisation, remediation SLAs, and executive reporting.
• Experience defending hybrid environments with identity signals, network telemetry, endpoint visibility, and cloud-native security monitoring.
• Fluent English at an excellent written and verbal communication level is required.

Nice to have

• GCIH, GCIA, GNFA, CISSP, CISM, or equivalent experience.
• Experience with threat hunting, purple teaming, and MITRE ATT&CK.
• Experience with Microsoft Defender, Sentinel, Splunk, CrowdStrike, Palo Alto, AWS, or Azure security services.
• Experience coordinating with IT, engineering, legal/privacy, and business leadership during investigations and recovery.

Culture & Benefits

• Hybrid work combining office and remote work according to role requirements.
• Access to a global 24/7 online learning platform and development opportunities.
• Competitive total rewards covering wellbeing and work-life balance.
• Employee assistance programme for mental health support.
• Inclusive communities and philanthropy programmes.