Senior Cyber Incident Responder (AVP) - JD

Reference: 51376

Senior Cyber Incident Responder

• London
• Hybrid, 3 days on-site
• Up to 80,000 base + bonus

About the Role
We are looking for an experienced Senior Cyber Incident Responder to join our Cyber Security function and play a key role within our Incident Response capability.
This is a hands-on technical position focused on investigating and responding to complex cyber security incidents , while helping strengthen our wider approach to Security Monitoring, Digital Forensics and Threat Hunting.
You will work within a small, growing team with a broad remit, providing technical expertise throughout the incident lifecycle while helping improve how threats are detected, investigated and addressed.
Key Responsibilities

• Investigate and respond to complex cyber security incidents and potential security breaches.
• Perform analysis across network and host-based artefacts , forensic evidence and suspicious activity.
• Support the identification, containment, remediation and post-incident investigation of security threats.
• Develop and refine Security Monitoring controls, detection use cases and indicators of compromise .
• Contribute to Threat Hunting and Threat Intelligence capabilities and translate findings into improved detection.
• Support the continued development of Incident Response procedures, playbooks and forensic processes .
• Work closely with Cyber Security, technical and business teams to identify and mitigate security risks.
• Contribute to Vulnerability Management, remediation and security control improvements .

Experience Required

• Strong hands-on experience within Cyber Security Incident Response and Security Monitoring .
• Experience conducting technical investigations using network and host-based artefacts .
• Practical experience with Digital Forensics, packet analysis and Incident Response tooling .
• Strong experience with SIEM, Security Monitoring and Threat Hunting .
• Knowledge of frameworks and methodologies such as NIST, MITRE ATT&CK and Kill Chain .
• Broad understanding of network, operating system, infrastructure and application security .
• Experience with Vulnerability Management and security remediation .
• Strong communication skills and the ability to work effectively during complex security incidents.
• Relevant certifications such as GCIH, GCIA, GCFA or equivalent would be advantageous.

The Opportunity
This is an opportunity to join a growing Incident Response capability within a large global organisation , combining hands-on investigation with the opportunity to influence how Security Monitoring, Threat Hunting and Digital Forensics capabilities continue to develop.