Security Incident Response Manager

About us

Amach is an industry‑leading technology‑driven company with headquarters located in Dublin and remote teams in UK and Europe. Our blended teams of local and nearshore talent are optimised to deliver high quality and collaborative solutions. Established in 2013, we specialise in cloud migration and development, digital transformation including agile software development, Dev Ops, automation, data and machine learning…

We’re hiring an Incident Response Manager to coordinate and manage our customers' response to security incidents, ensuring they are handled in a structured, timely, and well‑communicated manner.

This role acts as the central point of coordination across internal teams and the SOC provider, owning the end‑to‑end security incident response lifecycle rather than hands‑on technical analysis. The focus is on orchestration, stakeholder communication, action tracking, and continuous improvement of security incident response processes.

This role is suited to someone with a security background looking to step into an incident response management role, or someone with prior experience managing security incidents who understands security operations and response workflows.

Please note:

this is a hybrid role, requiring you to work onsite at our customer’s office in London 2 days per week.

• Hands‑on background in security operations or security incident response, with a clear understanding of common security incident types and response approaches
• Experience managing or coordinating incidents in a structured, operational security environment
• Strong understanding of the security incident lifecycle, including triage, escalation, containment, remediation, and post‑incident review
• Experience working with SOC teams or managed security service providers, either internally or via third parties
• Excellent communication skills, with the ability to provide clear, timely updates to both technical security teams and senior business stakeholders
• Highly organised, with strong action taking, prioritisation, and follow‑through capabilities
• Comfortable operating in high‑pressure, time‑critical security incidents, often with multiple parallel work streams

• Coordinate the response to security incidents from initial detection and triage through to resolution
• Act as the central lead for security incident communications, meetings, action tracking, and stakeholder updates
• Manage and mature the operational relationship with the SOC provider, ensuring effective detection, escalation and response
• Ensure the appropriate security, technical and business stakeholders are engaged at the right time during incidents
• Maintain clear incident reports, documentation, and post‑incident reviews (including lessons learned and post mortems)
• Support the development and refinement of security incident severity levels and major incident processes
• Ensure incidents are managed in line with agreed processes
• Coordinate closely with the out‑of‑hours incident teams, ensuring continuity and effective handovers where required
• Drive continuous improvement in incident response operations, documentation and supplier engagement
• Proactively introduce and connect key internal stakeholders with the SOC and wider incident response ecosystem

• Background in a Security Operations Centre (SOC), either as an analyst or in an incident management capacity
• Familiarity with managed SOC models and early‑stage vendor relationships
• Experience contributing to or improving incident response processes, runbooks or governance

• An opportunity to join a fast‑growing company
• Options for career advancement
• Learning and development opportunities
• Flexible working environment
• Competitive salaries based on experience

Amach is an equal opportunity employer and makes employment decisions on the basis of merit. We celebrate diversity and are committed to creating an inclusive environment for all employees. This job description is intended to convey essential responsibilities and qualifications for this role, but it is not an exhaustive list of tasks…