Senior Cyber Incident Responder (AVP) - JD

Senior Cyber Incident Responder

• London
• Hybrid, 3 days on-site
• Up to £80,000 base + bonus

About the Role

We are looking for an experienced Senior Cyber Incident Responder to join our Cyber Security function and play a key role within our Incident Response capability.

This is a hands‑on technical position focused on investigating and responding to complex cyber security incidents, while helping strengthen our wider approach to Security Monitoring, Digital Forensics and Threat Hunting.

You will work within a small, growing team with a broad remit, providing technical expertise throughout the incident lifecycle while helping improve how threats are detected, investigated and addressed.

Key Responsibilities

• Investigate and respond to complex cyber security incidents and potential security breaches.
• Perform analysis across network and host‑based artefacts, forensic evidence and suspicious activity.
• Support the identification, containment, remediation and post‑incident investigation of security threats.
• Develop and refine Security Monitoring controls, detection use cases and indicators of compromise.
• Contribute to Threat Hunting and Threat Intelligence capabilities and translate findings into improved detection.
• Support the continued development of Incident Response procedures, playbooks and forensic processes.
• Work closely with Cyber Security, technical and business teams to identify and mitigate security risks.
• Contribute to Vulnerability Management, remediation and security control improvements.

Experience Required

• Strong hands‑on experience within Cyber Security Incident Response and Security Monitoring.
• Experience conducting technical investigations using network and host‑based artefacts.
• Practical experience with Digital Forensics, packet analysis and Incident Response tooling.
• Strong experience with SIEM, Security Monitoring and Threat Hunting.
• Knowledge of frameworks and methodologies such as NIST, MITRE ATT&CK and Kill Chain.
• Broad understanding of network, operating system, infrastructure and application security.
• Experience with Vulnerability Management and security remediation.
• Strong communication skills and the ability to work effectively during complex security incidents.
• Relevant certifications such as GCIH, GCIA, GCFA or equivalent would be advantageous.

The Opportunity

This is an opportunity to join a growing Incident Response capability within a large global organisation, combining hands‑on investigation with the opportunity to influence how Security Monitoring, Threat Hunting and Digital Forensics capabilities continue to develop.

#J-18808-Ljbffr