UK jobs. Bigger possibilities.

Incident Responder

On-site in the UK·Added yesterday (last checked 28 Oct)

Agency
Tria

38 open roles

Our summary

Salary
£60,000 - £80,000 a year

About £3,780 - £4,750 a month after tax.

Closing date
Apply by Thursday 26 November

Requirements

What we're looking for

  • Hands-on incident response experience across endpoint, identity, network or cloud environments.
  • Practical digital forensics knowledge, particularly Windows forensics, evidence collection and analysis.
  • Experience investigating incidents using EDR/XDR and SIEM platforms.
  • Understanding of incident containment, eradication and recovery.
  • Strong communication skills and confidence working with customers.
  • Eligibility for UK SC clearance.

Pay & benefits

What you'll get

Salary: £60,000-£80,000 DOE

Type: Permanent

The role

I'm working with a growing cyber security consultancy and MSSP looking for an Incident Responder / DFIR Consultant to join its specialist security team.

What you'll do

You'll investigate and respond to security incidents across customer environments, working alongside experienced SOC, Threat Intelligence and Detection Engineering teams.

  • Investigate and respond to incidents across endpoint, identity, network and cloud environments.
  • Conduct digital forensic investigations, including evidence collection and analysis.
  • Coordinate containment, eradication and recovery activities.
  • Develop incident response plans, playbooks and support tabletop exercises.
  • Communicate investigation findings and recommendations directly to customers.

How you'll work

Location: Gloucester or London - Hybrid / Flexible

What We're Looking For

Technologies: Velociraptor, KAPE, Timesketch, Volatility, PowerShell, SentinelOne, Microsoft Defender XDR and Microsoft Sentinel.

Experience with some of these tools is beneficial, but not all are required.

Exposure to incident response planning, tabletop exercises, MSSP environments or OT/ICS security would be advantageous, although training and development are available.

The role includes an incident response on-call rota and occasional customer travel.

You don't need to be an established Senior Incident Responder. Strong SOC or DFIR professionals ready for greater responsibility are encouraged to apply.

Interested? Get in touch for a confidential conversation.

WhatsApp
See all 38 jobs