- London
- Hybrid, 3 days on-site
- Up to £80,000 base + bonus
We are looking for an experienced Senior Cyber Incident Responder to join our Cyber Security function and play a key role within our Incident Response capability.
This is a hands-on technical position focused on investigating and responding to complex cyber security incidents, while helping strengthen our wider approach to Security Monitoring, Digital Forensics and Threat Hunting.
You will work within a small, growing team with a broad remit, providing technical expertise throughout the incident lifecycle while helping improve how threats are detected, investigated and addressed.
Key Responsibilities
- Investigate and respond to complex cyber security incidents and potential security breaches.
- Perform analysis across network and host-based artefacts, forensic evidence and suspicious activity.
- Support the identification, containment, remediation and post-incident investigation of security threats.
- Develop and refine Security Monitoring controls, detection use cases and indicators of compromise.
- Contribute to Threat Hunting and Threat Intelligence capabilities and translate findings into improved detection.
- Support the continued development of Incident Response procedures, playbooks and forensic processes.
- Work closely with Cyber Security, technical and business teams to identify and mitigate security risks.
- Contribute to Vulnerability Management, remediation and security control improvements.
- Strong hands-on experience within Cyber Security Incident Response and Security Monitoring.
- Experience conducting technical investigations using network and host-based artefacts.
- Practical experience with Digital Forensics, packet analysis and Incident Response tooling.
- Strong experience with SIEM, Security Monitoring and Threat Hunting.
- Knowledge of frameworks and methodologies such as NIST, MITRE ATT&CK and Kill Chain.
- Broad understanding of network, operating system, infrastructure and application security.
- Experience with Vulnerability Management and security remediation.
- Strong communication skills and the ability to work effectively during complex security incidents.
- Relevant certifications such as GCIH, GCIA, GCFA or equivalent would be advantageous.
This is an opportunity to join a growing Incident Response capability within a large global organisation, combining hands-on investigation with the opportunity to influence how Security Monitoring, Threat Hunting and Digital Forensics capabilities continue to develop.