New Job Opening: Senior Incident Response Investigator in London, UK

Job Description

Our client is a leading cyber security services provider. They are hiring a Senior Incident Response Investigator to lead investigations into targeted attacks for UK defence industry clients and to help shape the growth of their incident response practice.

Senior Incident Response Investigator

Location - Remote UK plus travel to client sites

Salary - £80,000 - £100,000 + bonus

Clearance – MOD DV required

You’ll sit between deep technical investigation and boardroom communication: finding out how attackers got in, then explaining what it means for the business in language senior leaders can act on.

What you’ll do

• Lead incident response investigations for client organisations and deliver high-quality reports with clear findings and guidance


• Maintain target utilisation on chargeable client projects


• Produce technical content (research, blogs, thought leadership) to a publishable standard


• Support Incident Readiness work, including tabletop exercises, client training and playbook creation, when not on live investigations


• Mentor junior team members and advise on current industry trends


• Support delivery and growth of the wider practice

About you

Essential

• Chartered Cyber Security Professional (ChCSP) status


• Experience investigating targeted attacks across large enterprise networks


• Strong knowledge of client-server infrastructure, security architecture, logging and alerting across multiple operating systems


• Network forensics, including packet-level analysis


• File-system analysis and extraction of common disk-based indicators of compromise


• Windows, Linux and/or macOS internals, with knowledge of key system artefacts for each


• Memory analysis


• Ability to explain the NIST incident response phases and work with the MITRE ATT&CK Enterprise framework


• Understanding of threat actor motivations and methods, and how systems are exploited


• Excellent communication, from technical practitioners to executive boards

Desirable

• Malware analysis


• Scripting in Python, Ruby, PowerShell or Bash


• Experience with common cloud technologies

If you’re DV cleared and ready to lead investigations that matter, apply today or message Rob Wall at FR Secure for a confidential conversation.