Incident Response Analyst - Technology Vendor

Ready to take the next step in your career?

Join a multi-award-winning cyber security specialist, established in 2015 and certified to ISO 27001, CREST, and PCI-DSS standards. Its true "eyes-on-screen" 24/7/365 UK-based Security Operations Centre gives organisations complete visibility and control over cyber risk.

The company is inviting applications from experienced professionals for the role of Incident Response Consultant within its specialist consultancy. The ideal candidate will lead and support the full lifecycle of cyber incident investigations across host, network, and cloud environments, from initial triage through containment, eradication, and recovery, while advising client stakeholders throughout.

Ready to take your expertise to the next level? Get in touch today!

Responsibilities:

• Own and lead the end-to-end lifecycle of cyber incidents, including triage, containment, eradication, recovery, and root cause analysis
• Conduct forensic investigations across endpoints, networks, and cloud platforms
• Perform live compromise assessments for organisations with suspected breaches
• Act as a key point of contact during incidents, managing communication and escalation with client stakeholders
• Develop, maintain, and improve incident response playbooks and standard operating procedures
• Support and guide junior analysts on complex investigations
• Deliver post-incident reviews, including lessons learned and remediation strategies
• Support incident readiness through tabletop exercises and simulation activities
• Recommend improvements to detection and response capabilities across SIEM, EDR, and SOAR platforms
• Produce clear, detailed incident and forensic reports for both technical and non-technical audiences

Skills/Must have:

• 4+ years’ experience in incident response, SOC, or security consulting with a strong focus on investigations and containment
• Proven experience handling complex, high-severity security incidents in client-facing or consultancy environments
• Strong technical knowledge across networking, endpoint security, and digital forensics
• Hands-on experience with EDR and SIEM platforms (e.g., Microsoft Defender, Sentinel, CrowdStrike, SentinelOne or similar)
• Solid understanding of attacker tactics, techniques, and procedures (TTPs) and incident response methodologies
• Ability to remain composed and methodical in high-pressure situations
• Strong communication skills with the ability to translate technical findings into business impact
• Relevant certifications such as GCIH, ECIH, or equivalent are advantageous

Benefits:

• Fully remote working with occasional in-person collaboration
• Exposure to high-impact, real-world cyber incidents across multiple industries
• Ongoing training and professional development support
• Opportunity to work with modern detection and response tooling
• Structured career progression within incident response

Salary:

• £45-55k