Incident Response Analyst

Project overview

I am recruiting for a number of Incident Response Analysts to work on a hybrid basis - 3 days in London, 2 days remote.

The role falls inside IR35 so you will need to work through an umbrella company for the duration of the contract.

As the Incident Response Analyst you will be a key member of the Cyber Security Incident Response function, responsible for detecting, triaging, investigating, containing and coordinating the resolution of cyber security incidents. The role combines security monitoring, incident handling, threat hunting and digital forensics to reduce business impact, preserve evidence and improve organisational resilience.

You must have practical experience in cyber incident response, security monitoring or a Security Operations Centre environment.

You must have hands-on experience investigating security alerts and incidents using SIEM and EDR/XDR technologies.

You will have experience analysing Windows and Linux host artefacts, authentication activity, security logs, network traffic and packet captures.

A working knowledge of incident response lifecycle activities including preparation, detection, analysis, containment, eradication, recovery and lessons learned is essential.

You must also have experience producing incident records, investigation reports, management updates and post-incident findings.

An understanding of attacker behaviours and frameworks including MITRE ATT&CK, Cyber Kill Chain and NIST incident response guidance is required for this role.

Knowledge of enterprise networking, identity and access management, cloud services, email security, endpoint security, vulnerability management and data loss prevention is also a must.

If your experience matches the above and you have previously worked as an Incident Response Analyst please apply ASAP.

Project details

• Start: ASAP
• Duration: 3-6 months
• Location: City of London, UK, GB
• Rate: 38-50 EUR/h