At a Glance
- Tasks: Join our team to tackle cybersecurity threats and conduct incident assessments.
- Company: Pentest People is a leading UK security consultancy specialising in innovative penetration testing services.
- Benefits: Enjoy remote work flexibility, competitive pay, and opportunities for professional growth.
- Why this job: Make a real impact in cybersecurity while working in a dynamic and supportive environment.
- Qualifications: Experience in incident response, digital forensics, and relevant technical skills are essential.
- Other info: Candidates must be based in the UK; occasional client site visits required.
The predicted salary is between 42000 - 84000 Β£ per year.
This range is provided by Pentest People. Your actual pay will be based on your skills and experience β talk with your recruiter to learn more.
Base pay range
Direct message the job poster from Pentest People
Pentest People is a UK-based security consultancy specialising in providing Penetration Testing as a Service to all its clients. Our innovative approach to security testing merges the benefits of consultant-led penetration testing with ongoing vulnerability assurance through our advanced SecurePortal. This provides clients with a continuous, living threat management system throughout the duration of the contract, rather than a single point-in-time assessment.
Weβre expanding our Incident Response team and looking for a Incident Response Analyst to join us in tackling some of the most challenging cybersecurity threats. The role requires analytic thinking, problem solving skills and the ability to work in a fast-paced environment.
As part of our dynamic team, you will play a critical role in reducing the impact of cyberattacks and enchanting our clients security posture to prevent future attacks.
Key responsibilities include:
- Conducting initial incident assessments and contribute to Incident Response management.
- Participate in live Incident Response operations including digital forensics.
- Perform security assessments, threat intelligence gathering and OSINT analysis.
- Collaborating with other departments to facilitate a holistic cybersecurity service.
- Engaging with clients on day-to-day basis and getting access to relevant logs and access to clients infrastructure for performing digital forensics.
- Document incidents thoroughly, including timelines, affected systems, actions taken, and recommendations for future improvements.
- Prepare comprehensive reports for clients.
Technical skills:
- Demonstrated experience in responding to and investigating incidents whilst utilizing various monitoring, detection and investigation tooling β SIEM, SOAR, EDR etc.
- Proficiency in log analysis of Networking, Windows, Mac and Linux and Cloud.
- Understanding of evidence collection process based on priority.
- Strong understanding of incident response following NIST 800-61 guidelines incorporating containment, eradication and recovery phases.
- Experience with digital forensics and investigations, including evidence collection and chain-of-custody protocols.
- Should have an understanding of tabletop exercises, and IR planning.
- Should have an understanding of Technical Frameworks such as MITRE Attack, Lockheed Martin kill chain or Diamond model.
- Should be able to perform dynamic malware analysis.
Qualifications:
- Certifications such as ECIH, Security +, BTL1, Cysa+, SC-200 are good to have
- Knowledge of open-source IR tools, such as Velociraptor, Eric Zimmerman Tools, Chainsaw, Volatility, SOF-elk, DFIR IRIS.
- Experience in python or bash or Go.
About you:
- Experience in managing stakeholders during live incidents to minimise impacts.
- Strong communication skills, with the ability to manage and coordinate various incidents whilst remaining calm under pressure.
- Ability to align client deliverables with industry best practices.
- Experience in threat intelligence and analysis to support proactive IR.
- Capable of taking ownership of tasks, ensuring quality delivery and supporting the IR\’s team growth.
While this role is advertised as remote, it will require occasional visits to client sites and the office as needed. Candidates must be based in the UK and have the right to work, as we are unable to provide sponsorship at this time. If you do not have SC eligibility, you must meet the requirements for SC, as this may be a necessary criterion.
Please send your resume and a cover letter to careers@pentestpeople.com
We understand that job descriptions offer only a glimpse of the role. For more details, please feel free to reach out or apply, and we will be happy to provide additional information. Pentest People is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.
Seniority level
-
Seniority level
Not Applicable
Employment type
-
Employment type
Full-time
Job function
-
Job function
Information Technology
-
Industries
IT Services and IT Consulting
Referrals increase your chances of interviewing at Pentest People by 2x
Get notified about new Incident Analyst jobs in United Kingdom.
Information Security Analyst – Β£70,000 – REMOTE
Edinburgh, Scotland, United Kingdom 1 week ago
Glasgow, Scotland, United Kingdom 1 week ago
Dundee, Scotland, United Kingdom 1 week ago
Milton Keynes, England, United Kingdom 1 month ago
London, England, United Kingdom 1 month ago
Birmingham, England, United Kingdom 4 days ago
Newcastle Upon Tyne, England, United Kingdom 1 week ago
Leeds, England, United Kingdom 1 week ago
Manchester, England, United Kingdom 4 days ago
London, England, United Kingdom 1 day ago
Babraham, England, United Kingdom 1 week ago
London, England, United Kingdom 2 days ago
Reading, England, United Kingdom 2 weeks ago
London, England, United Kingdom 1 day ago
Weβre unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
#J-18808-Ljbffr
Incident Response Analyst employer: Pentest People
Contact Detail:
Pentest People Recruiting Team
StudySmarter Expert Advice π€«
We think this is how you could land Incident Response Analyst
β¨Tip Number 1
Familiarise yourself with the NIST 800-61 guidelines, as they are crucial for incident response. Understanding these guidelines will not only help you in interviews but also demonstrate your commitment to best practices in cybersecurity.
β¨Tip Number 2
Engage with online communities and forums related to incident response and digital forensics. Networking with professionals in the field can provide valuable insights and potentially lead to referrals or recommendations for the role.
β¨Tip Number 3
Stay updated on the latest cybersecurity threats and trends. Being knowledgeable about current incidents and how they were handled can give you an edge during discussions with interviewers and show your proactive approach to learning.
β¨Tip Number 4
Prepare to discuss specific tools and technologies mentioned in the job description, such as SIEM, SOAR, and EDR. Having hands-on experience or examples of how you've used these tools in past roles will make you a more attractive candidate.
We think you need these skills to ace Incident Response Analyst
Some tips for your application π«‘
Tailor Your CV: Make sure your CV highlights relevant experience in incident response, digital forensics, and any specific tools mentioned in the job description. Use keywords from the job listing to ensure your application stands out.
Craft a Compelling Cover Letter: In your cover letter, express your passion for cybersecurity and detail how your skills align with the responsibilities of the Incident Response Analyst role. Mention specific experiences that demonstrate your problem-solving abilities and analytical thinking.
Showcase Technical Skills: Clearly outline your technical skills related to incident response, such as familiarity with SIEM, EDR, and log analysis. If you have certifications like ECIH or Security+, be sure to mention them prominently.
Demonstrate Communication Skills: Since strong communication is key for this role, provide examples in your application of how you've effectively managed stakeholders during incidents or collaborated with teams. This will show your ability to remain calm under pressure and coordinate effectively.
How to prepare for a job interview at Pentest People
β¨Showcase Your Technical Skills
Be prepared to discuss your experience with incident response tools like SIEM, SOAR, and EDR. Highlight specific instances where you've successfully used these tools in past roles to manage incidents.
β¨Demonstrate Problem-Solving Abilities
Prepare examples of how you've tackled complex cybersecurity threats in the past. Use the STAR method (Situation, Task, Action, Result) to structure your responses and clearly illustrate your analytical thinking.
β¨Understand the Companyβs Approach
Familiarise yourself with Pentest People's unique approach to security testing. Be ready to discuss how their continuous threat management system aligns with your own views on effective incident response.
β¨Communicate Effectively
Strong communication skills are crucial for this role. Practice articulating your thoughts clearly and concisely, especially when discussing technical concepts. Be prepared to explain how you would engage with clients during live incidents.