4+ years of experience acting as a leader in SOC, CSIRT, CERT, CDC or similar. Maintain 24/7 availability and participate in on-call rotation. Demonstrated experience leading Incident Response teams. Solid experience working with EDRs. Solid experience working with SIEM or similar technologies. Solid experience working with Endpoint Security technologies. Solid experience working with Secure Email technologies. Solid experience working with DLP technologies. Solid knowledge in Threat Intelligence. Experience working with cloud environments, preferably on AWS. Solid experience leveraging AI/ML tools and workflows to automate processes.