As a Senior Incident Responder, you will join Sage’s Global Cyber Defence Operations team and take direct ownership of high‑severity security incidents impacting Sage’s systems, data, and customers.

This role is requires experienced incident responders who have already operated beyond SOC or alert triage and have senior experience operating in live, high-pressure security incidents leading complex investigations in real time, where information is incomplete and decisions must be made quickly and containment must be managed across multiple technical teams.

You will own escalated incidents end‑to‑end - from initial scoping of escalation through investigation, containment strategy, remediation coordination, and root‑cause analysis - across Sage’s primarily cloud‑based environment. These incidents span cloud, identity, application, and endpoint telemetry, often requiring you to work across multiple systems and teams to reach resolution.

In addition to incident re...