Incident Response Analyst in London

Enso Recruitment is working on behalf of a growing cybersecurity consultancy to find an experienced Incident Response Analyst. This role offers the opportunity to join a team dedicated to reducing the impact of cyber threats and helping clients strengthen their long-term resilience.

The successful candidate will join a fast-paced and collaborative incident response function, contributing to investigations, digital forensics, threat intelligence, and client reporting. This position is ideal for someone who thrives on problem-solving, has strong technical skills, and enjoys working closely with clients during live security incidents.

• Take part in active incident response cases, including digital forensics and stakeholder coordination.
• Conduct initial incident assessments and support the full response lifecycle, from containment to recovery.
• Carry out security assessments and use threat intelligence and open-source research to inform investigations.
• Collaborate across teams to deliver end-to-end incident response and security services.
• Document findings and actions thoroughly, producing clear reports and remediation guidance for clients.
• Engage directly with clients to gather information, access logs, and coordinate response activities.
• Support process improvements and contribute to the ongoing development of the incident response capability.

• Experience conducting investigations using SIEM, SOAR, EDR and similar technologies.
• Strong knowledge of digital forensic practices, including evidence handling and chain of custody.
• Familiarity with NIST 800-61 or similar incident response frameworks.
• Proficient in log analysis across Windows, Linux, MacOS, network devices, and cloud environments.
• Understanding of attack frameworks such as MITRE ATT&CK, Lockheed Martin Kill Chain, or the Diamond Model.
• Comfortable with basic dynamic malware analysis and use of open-source tools (e.g. Velociraptor, Volatility, DFIR IRIS).

• Certifications such as Security+, ECIH, CYSA+, SC-200 or equivalent are beneficial.
• Experience with scripting or automation (e.g. Python, Bash, Go).
• Familiarity with open-source IR and forensic tools (Chainsaw, Zimmerman Tools, SOF-ELK, etc.).

• Effective under pressure, with the ability to calmly manage live incidents and stakeholder communications.
• Strong communicator who can translate technical findings into business context.
• Takes ownership of tasks and supports team development.
• Aligns work with industry best practices and maintains a high standard of documentation.
• Has a proactive mindset, including experience or interest in threat hunting and threat intelligence.

This is a great opportunity for an Incident Response Analyst looking to grow their skills and make a meaningful impact across diverse client environments. If you’re ready to take the next step in your IR career, Enso Recruitment would love to hear from you.