Incident Response Specialist - SOC/Cyber Security

Incident Response Specialist - SOC/Cyber Security

Location: London
Duration: 6 months
Rate: Open - Inside IR35
Working Pattern: 10-hour shifts, 06:00-16:00
Shift Options: Sunday-Wednesday or Wednesday-Saturday

We are seeking an experienced Incident Response Specialist to provide hands-on Security Operations Centre (SOC) and incident response support within a fast-paced technology environment.

You will monitor, investigate and respond to cyber security threats across endpoint, cloud and application environments, with a particular focus on macOS endpoints, Linux cloud workloads, microservices and containerised environments.

Working closely with SOC and technical teams, you will investigate alerts, assess threats, support containment and remediation, and help improve detection and incident response capabilities.

Key Responsibilities

• Perform security monitoring, alert triage and incident investigation.

• Assess incident severity, scope and impact, identifying appropriate response actions.

• Support incident response, containment and remediation activities.

• Investigate threats affecting macOS endpoints and Linux cloud workloads.

• Analyse security incidents involving microservices and containerised environments.

• Correlate security telemetry across endpoint, cloud and application environments.

• Document investigation findings, evidence and response actions accurately.

• Escalate significant incidents and collaborate with SOC and technical teams.

• Contribute to improved detection processes, response playbooks and lessons-learned reviews.

Essential Skills & Experience

• Hands-on experience investigating and responding to cyber security incidents.

• Practical experience with macOS endpoint security and Linux workloads in cloud environments.

• Understanding of microservices and containerised environments.

• Experience using SIEM, EDR/XDR and security monitoring technologies.

• Strong knowledge of threat detection, attacker tactics and techniques, including MITRE ATT&CK.

• Experience supporting incident containment, remediation and investigation evidence gathering.

• Strong analytical, troubleshooting and documentation skills.

• Ability to communicate findings clearly to technical and non-technical stakeholders.