We’re currently looking for an experienced Incident Response Analyst to join our client’s growing Cyber Security function, supporting the detection, investigation and resolution of cyber security incidents across a complex enterprise environment. This is an excellent opportunity for a security professional with strong incident response, threat hunting and investigation experience who enjoys working across the full incident lifecycle while engaging with both technical and business stakeholders. Location: London (2 days per week onsite, remainder remote) Duration: 5 Months Initially Rate: Competitive IR35: Outside IR35 Start Date: ASAP Duties and Responsibilities: Incident Detection, Triage and Response: Monitor and analyse alerts from SIEM, EDR/XDR, identity, email, cloud, network and other security controls to identify suspicious or malicious activity. Triage alerts, validate incidents, determine severity and business impact, and escalate in line with the incident response process and defined service levels. Lead or support investigations into internal and external threats, including phishing, malware, account compromise, data loss, unauthorised access and suspicious network activity. Coordinate containment, eradication and recovery activities with infrastructure, application, identity, cloud and business teams, maintaining clear ownership and decision records. Maintain accurate incident case records, investigation timelines, evidence, actions, decisions and closure rationale from initial detection through to resolution. Provide timely incident updates and concise technical and management reports, including material facts, impact, risk, actions, dependencies and next steps. Digital Forensics and Investigation: Collect, preserve and analyse endpoint, server, identity, network, email and cloud artefacts in accordance with approved forensic and evidence-handling procedures. Perform host and network analysis using logs, packet captures, forensic images and security telemetry to establish scope, root cause, attacker activity and affected assets. Identify indicators of compromise, tactics, techniques and procedures, and map findings to MITRE ATT
Incident Response Analyst (Contract) employer: Curo Services
Join a forward-thinking cyber security business that values innovation and collaboration, offering you the chance to make a significant impact in a newly created Senior Security Operations Engineer role. With a strong focus on employee growth and a supportive remote work culture, you'll have access to competitive benefits and the opportunity to shape the future of security operations while working alongside experienced professionals. This is an excellent employer for those looking to drive meaningful change in a dynamic environment.
