Source Job

$55,000–$71,500/yr
Global

  • Lead and mentor the CTI support team to ensure smooth operations and high performance.
  • Serve as an escalation point for complex CTI-related customer queries and handle incident response support.
  • Collaborate with cybersecurity analysts and threat intelligence teams to optimize support workflows and processes.

Cyber Threat Intelligence Incident Response Team Leadership

20 jobs similar to Team Leader Support Specialist CTI

Jobs ranked by similarity.

  • Lead and develop squads of analysts across the Critical Incident Response Team, setting clear expectations and building an inclusive culture.
  • Own day-to-day CIRT operations, provide senior escalation, and act as Incident Commander for complex incidents.
  • Use metrics and feedback to drive continuous improvement and partner cross-functionally to strengthen MDR response.

Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services, including MDR and a portfolio of security technologies. It fosters a remote-first culture with employee-led diversity networks and a global partner ecosystem.

US

  • Lead vulnerability and exposure management, defining priorities and driving continuous improvement.
  • Manage and mentor security teams, fostering technical excellence and ownership.
  • Establish Continuous Threat Exposure Management and strengthen Attack Surface Management.

The company delivers cybersecurity services, specializing in vulnerability management and continuous threat exposure management. It promotes a collaborative, remote-first culture with autonomy, leadership development, and flexible working arrangements.

  • Maintain oversight of threat analysts and manage daily Security Operations Center activities.
  • Lead incident response and investigation to determine root cause and resolution.
  • Apply expertise in network intrusion analysis, digital forensics, and malware handling to protect customers.

Sophos provides cybersecurity solutions including Managed Detection and Response (MDR) services. It is a global, remote-first company with thousands of employees, fostering a collaborative and inclusive culture.

India

  • Oversee a team of cybersecurity professionals handling monitoring, triage, investigation, and incident response.
  • Act as the primary escalation point for complex investigations and coordinate with customers and internal teams.
  • Recruit, onboard, and develop MDR Security Analysts while driving continuous service improvement.

They provide managed detection and response (MDR) services to protect customer data through continuous monitoring, threat detection, and incident response. They operate in a global, 24/7 security operations environment with a collaborative, accountable team culture.

Europe

  • Lead and mentor a team of Incident Response analysts during active security incidents.
  • Serve as the primary customer-facing lead during investigations and crisis situations.
  • Coordinate incident triage, containment, eradication, and recovery efforts.

Check Point protects over 100,000 organizations worldwide from cyber and AI-driven threats with a prevention-first approach. Recognized by TIME, Newsweek, and Forbes, the company fosters a culture of smart, curious people who take ownership and solve complex problems.

$83,700–$94,500/yr
Ireland

  • Lead Europe-focused market and competitive research while contributing to global CMI priorities.
  • Analyze buyer priorities, competitor positioning, pricing, and regional differences.
  • Design and conduct primary and secondary research, including buyer conversations and win/loss analysis.

Huntress provides enterprise-grade cybersecurity accessible to businesses of all sizes. Founded in 2015, it is a remote-first team now securing over 6M endpoints and 17M identities worldwide, with a culture of inclusivity.

Global

  • Lead and provide hands-on technical guidance across threat hunting, threat intelligence, DFIR, and MDR services.
  • Leverage frontier and locally deployed AI models to enhance security investigations and automation.
  • Manage and mentor technical cybersecurity professionals while contributing to complex investigations.

VerTALENTS is a technology staffing subsidiary of VerSprite Cybersecurity, connecting top technical talent with industry clients for full-time and contract roles. It aims to add value for both clients and candidates while supporting a collaborative, remote cybersecurity delivery team.

$129,600–$129,600/yr
Germany

  • Lead OT incident response engagements for industrial customers, including investigations, threat hunts, and compromise assessments.
  • Serve as Incident Commander during active incidents, delivering decision-grade guidance and managing response communications.
  • Deliver advisory services like IR planning workshops and maturity assessments, while mentoring teammates and improving methodologies.

Dragos is a global leader in OT cybersecurity, protecting critical infrastructure through technology, threat intelligence, and expert services. The company is a remote-first, mission-driven team across North America, Europe, the Middle East, and APAC.

$109,400–$191,500/yr
Canada Unlimited PTO

  • Monitor tools and systems that defend production environments and correlate seemingly unrelated events.
  • Lead response to incidents affecting customers and track incidents to closure across functional teams.
  • Build and maintain incident response playbooks, handbooks, and cybersecurity standards.

ServiceNow is the AI control tower for business reinvention, bringing together any AI, any data, and any workflow. It serves 85% of the Fortune 500, fostering an AI-native culture where technology and talent are unstoppable together.

$97,500–$97,500/yr
Australia

  • Lead ICS/OT cyber threat intelligence efforts for an Australian customer, driving threat hunts and shaping government strategy.
  • Analyze network traffic and industrial protocols to surface anomalies using tools like Dragos Platform and Synapse.
  • Translate technical findings into MITRE ATT&CK for ICS mappings and deliver actionable intelligence to non-technical stakeholders.

Dragos is a global leader in operational technology (OT) cybersecurity, protecting critical infrastructure like water, power, and hospitals from cyber threats. The company has a remote-first, mission-driven team across North America, Europe, the Middle East, and APAC, built on authenticity, transparency, and trust.

US

  • Lead new business trials and POC engagements, translating technical outcomes into business impact for executives and security teams.
  • Track the US cyber threat landscape across telecom, BFSI, and enterprise sectors, producing custom intelligence briefs.
  • Build CloudSEK's regional community through thought leadership, partner enablement, and representing the company at events.

CloudSEK is an AI-powered cybersecurity product company that builds technology to identify and resolve digital threats in real-time. Founded in 2015, the company has grown rapidly, fostering a passionate, joyful, and highly driven culture.

$110,000–$125,000/yr
US

  • Monitor and analyze security events to identify potential threats and vulnerabilities within the organization's infrastructure.
  • Utilize advanced threat intelligence sources, security tools, and techniques to detect and investigate security incidents.
  • Collaborate with cross-functional teams to develop and implement proactive measures that strengthen the organization's security posture.

Valiant Solutions delivers cybersecurity and IT services to federal civilian, defense, and national security customers nationwide. The company is a multi-year Washington Business Journal Best Places to Place winner, with a distributed workforce supporting customers from coast to coast.

$86,000–$240,000/yr
Global Unlimited PTO

  • Lead rapid-response research into emerging threats, actively hunt across telemetry, and produce time-sensitive intelligence assessments.
  • Correlate endpoint, network, cloud, and identity data to develop campaign hypotheses and scope widespread adversary activity.
  • Develop operational detections using YARA, Sigma, and analytics, and publish high-quality research for internal and external audiences.

Arctic Wolf is a global leader in security operations, helping organizations stay resilient against evolving cyber threats. With over 3,000 Pack members worldwide, the company fosters a collaborative culture where talented people can do meaningful work.

$170,000–$170,000/yr
US

  • Lead and execute OT incident response engagements as Incident Commander, including triage investigations and threat hunts.
  • Develop advisory services: incident response planning workshops, maturity assessments, playbook design, and tabletop exercises.
  • Contribute to thought leadership through research, whitepapers, and webinars, and mentor team members in operational excellence.

Dragos is a global leader in OT cybersecurity, protecting critical infrastructure with technology, threat intelligence, and expert services. It is a remote-first, mission-driven team across North America, Europe, the Middle East, and APAC built on authenticity, transparency, and trust.

$349,600–$437,000/yr
US Unlimited PTO 16w maternity 16w paternity

  • Lead DoorDash's global Cyber Defense organization, including Incident Response, Detection Engineering, Threat Intelligence, Threat Hunting, and Insider Threat teams.
  • Collaborate with the CSO and senior leaders to align cyber defense strategy with business objectives and drive incident response.
  • Deploy advanced threat detection technologies, analyze threat intelligence, and mentor a growing security engineering team.

DoorDash is a technology and logistics company that enables on-demand delivery and empowers local economies. The company has grown to tens of thousands of employees across more than 40 countries, with a culture focused on empathy, speed, and innovation.

Ireland UK

  • Lead comprehensive threat prevention for global offices, executives, and employees across 26 offices and over 10,000 employees.
  • Conduct investigations using open-source intelligence, law enforcement databases, and social media to identify and manage threats.
  • Build relationships with law enforcement and collaborate with internal teams to manage the lifecycle of cases and provide actionable assessments.

Concentric is a risk consultancy specializing in delivering strategic security and intelligence services for private clients and corporations globally. The company is staffed by elite professionals from military, government, and intelligence backgrounds, and aims to be the most innovative, capable, and trusted Risk Management partner in the world.

$165,000–$185,000/yr
US

  • Manage a global 24/7 Security Operations Center, defining and streamlining processes, workflows, and playbooks.
  • Lead and mentor a team of security analysts through weekly 1:1s, feedback, and career growth initiatives.
  • Collaborate with product, support, and security teams to scale operations and operationalize new technologies.

Huntress is a remote-first cybersecurity company founded in 2015 by former NSA cyber operators, providing enterprise-grade security to businesses of all sizes. It secures over 5 million endpoints and 16 million identities worldwide with a 24/7 human-led Security Operations Center.

Australia

  • Lead and develop high-performing MDR teams during APJ hours, ensuring quality security operations and customer outcomes.
  • Drive continuous improvement through operational data, automation, and cross-team collaboration.
  • Manage escalations, maintain operational health, and build leadership capability within the team.

Sophos is a cybersecurity company providing managed detection and response services. It is a remote-first organization that promotes collaboration across locations and time zones.

$110,000–$170,000/yr
US

  • Lead incident response operations, including prioritization, resource allocation, shift coverage, and escalation processes.
  • Oversee cyber incidents from escalation through containment, remediation, recovery, and closure, serving as Incident Commander for significant events.
  • Supervise team performance, develop personnel, and communicate incident status and risks to executives and business stakeholders.

NBCUniversal is one of the world's leading media and entertainment companies, creating and distributing world-class content across film, television, streaming, and global theme parks. As a subsidiary of Comcast Corporation, the company operates a vast portfolio of iconic brands and fosters an inclusive culture that encourages employees to serve their communities.

US

  • Lead 24x7x365 incident coordination for escalated cyber threats, ensuring situational awareness and timely resolution.
  • Direct advanced incident response, including containment, remediation, recovery, and stakeholder communication.
  • Use Splunk SIEM, Microsoft Defender, and Cortex XSOAR to analyze security events and drive investigations.

Valiant Solutions is a security-focused IT solutions provider with public clients nationwide. Named one of the best places to work in the Washington DC area for 12 consecutive years, Valiant prides itself on an employee-centric culture and commitment to excellence.