European Cybersecurity Site Leader - SOC & CSIRT

As the European Cybersecurity Site Leader, you will provide strategic, operational, and people leadership for both the Security Operations Center (SOC) and the Computer Security Incident Response Team (CSIRT), with a primary focus on incident response, investigations, and crisis coordination.

Key responsibilities include

• Provide overall site leadership in Amsterdam, Netherlands for the European SOC and CSIRT teams, ensuring operational excellence, resilience, and alignment with global cybersecurity strategy.
• Lead and mature the CSIRT function, owning end-to-end incident response lifecycle including intake, triage, containment, eradication, recovery, and post-incident reviews.
• Act as the senior incident response leader during high-severity and crisis incidents, coordinating technical teams, business stakeholders, legal, communications, and executive leadership.
• Define, implement, and continuously improve incident response processes, procedures, playbooks, and standards in alignment with industry best practices.
• Oversee SOC operations, ensuring effective threat monitoring, detection, escalation, and handoff between SOC and CSIRT functions.
• Establish and track KPIs, metrics, and reporting for SOC and CSIRT performance, including incident trends, response effectiveness, and operational health.
• Build and maintain strong partnerships with Business Information Security Officers (BISOs), IT, Legal, Risk, Privacy, and senior business leaders across Europe and globally.
• Serve as a trusted advisor and subject matter expert on cybersecurity incidents, threat landscape, and response readiness for executive leadership.
• Lead talent management activities including hiring, mentoring, performance management, succession planning, and development of high-performing teams.
• Drive training, exercises, and simulations (e.g., tabletop exercises, crisis drills) to continuously improve incident readiness and team capabilities.
• Stay current with emerging threats, attacker techniques, industry trends, and regulatory requirements, incorporating insights into operational improvements.