Incident Response Manager

Amach is an industry‑leading technology driven company with headquarters located in Dublin and remote teams in the UK and Europe. Our blended teams of local and nearshore talent are optimised to deliver high quality and collaborative solutions. Established in 2013, we specialise in cloud migration and development, digital transformation including agile software development, DevOps, automation, data and machine learning.

We’re hiring an Incident Response Manager to coordinate and manage our customers’ response to security incidents, ensuring they are handled in a structured, timely, and well‑communicated manner. This role acts as the central point of coordination across internal teams and the SOC provider, owning the end‑to‑end incident management workflow rather than hands‑on technical analysis. The focus is on orchestration, stakeholder communication, action tracking, and continuous improvement of incident response processes. This role will be suited to someone with a SOC background looking to move into an incident management‑focused role, or an experienced service/operational incident manager looking to transition into security incident response.

Please note: this is a hybrid role, requiring you to work onsite at our customer's office in London 2 days per week.

Required Experience

• Strong experience managing incidents in a structured, operational environment, ideally within a security or technology context
• Clear understanding of how incidents progress end‑to‑end (triage, escalation, coordination, resolution, post‑incident review)
• Experience working with third‑party or managed service providers, ideally in a SOC or similar outsourced model
• Excellent communication skills, with the ability to provide clear, timely updates to both technical and non‑technical audiences
• Highly organised, with strong action tracking and follow‑through capabilities
• Comfortable operating in high‑pressure, fast‑moving situations and managing multiple workstreams simultaneously

Key responsibilities & duties include

• Coordinate the response to security incidents from initial triage through to resolution
• Act as the central lead for incident communications, meetings, action tracking, and stakeholder updates
• Manage and mature the operational relationship with the SOC provider, ensuring effective detection, escalation and response
• Ensure the right technical and business stakeholders are engaged at the right time during incidents
• Maintain clear incident reports, documentation and post‑incident reviews (including lessons learned and post mortems)
• Support the development and refinement of incident severity levels and major incident processes
• Ensure incidents are managed in line with agreed processes
• Coordinate closely with the out‑of‑hours incident teams, ensuring continuity and effective handovers where required
• Drive continuous improvement in incident response operations, documentation and supplier engagement
• Proactively introduce and connect key internal stakeholders with the SOC and wider incident response ecosystem

Desirable Experience

• Background in a Security Operations Centre (SOC), either as an analyst or in an incident management capacity
• Familiarity with managed SOC models and early‑stage vendor relationships
• Experience contributing to or improving incident response processes, runbooks or governance

What’s in it for you

• An opportunity to join a fast‑growing company
• Options for career advancement
• Learning and development opportunities
• Flexible working environment
• Competitive salaries based on experience

Amach is an equal opportunity employer and makes employment decisions on the basis of merit. We celebrate diversity and are committed to creating an inclusive environment for all employees.