NATO Incident Response Lead

NATO Incident Response Lead

Remote with required overseas travel

Annual base salary: $150,000–$200,000

ACTIVE NATO SECRET CLEARANCE REQUIRED TO APPLY

Applicants must already hold an active NATO Secret security clearance. Candidates without this clearance do not meet the application requirements.

About the role

Lead cybersecurity incident response activities supporting NATO operations. Coordinate technical teams, direct investigations, manage escalations, and serve as the primary operational contact during response activities.

Responsibilities

• Lead incident investigation, containment, recovery, and lessons learned across endpoints, servers, networks, and cloud environments.
• Coordinate response teams, assign priorities, manage escalations, and communicate operational status.
• Oversee collection and analysis of digital evidence, security logs, memory, and network traffic.
• Assess the scope of compromise and recommend containment and recovery actions.
• Support threat hunting, malware analysis, and threat intelligence activities.
• Review technical findings, incident timelines, status briefings, and final reports.
• Develop incident response playbooks, support exercises, and recommend process improvements.
• Follow NATO procedures for classified information and evidence handling.

Qualifications

• Active NATO Secret security clearance at the time of application is mandatory.
• Relevant cybersecurity operations, incident response, digital forensics, or threat-hunting experience.
• Experience coordinating technical response teams, managing escalations, and briefing stakeholders.
• Working knowledge of enterprise systems, network security, and security monitoring tools.
• Ability to communicate technical findings clearly and work with multinational teams.
• Citizenship in a NATO member nation and residence within a NATO member nation.
• Relevant cybersecurity certifications preferred.

Work location and travel

Work remotely from your home location, with required travel for on-site support at NATO locations overseas and in North America. Primary overseas sites include The Hague, Netherlands, and Brussels, Mons, and Braine-l’Alleud, Belgium. On-call coverage may be required. Final schedules and travel requirements depend on the assignment.

Compensation and benefits

• Annual base salary: $150,000–$200,000, based on experience and assignment.
• Bonus eligibility after one full year of employment.
• Health benefits and 401(k).

Applicants must be available for required overseas travel and must hold active NATO Secret clearance before applying.

Pay: $150,000.00 - $200,000.00 per year

Benefits:

• 401(k)

Application Question(s):

• Do you currently hold an active NATO Secret security clearance? This is mandatory to apply. Please answer Yes or No. Do not provide clearance documents or classified information.

Work Location: Remote