Senior Incident Response Analyst - Join a Leading Company

Senior Incident Response Analyst - Cybersecurity - Up to £80k - Hybrid - up to 20% bonus - Excellent Benefits.

My client one of the world’s most renowned aviation groups in the world is searching for a Senior Incident Response Analyst to join their team!

Skills:

• Able to serve as the primary escalation point, conduct security analysis on critical alerts, and utilize expertise to map the attack chain across complex environments, encompassing cloud, identity, email, network, and endpoint.
• In-depth understanding of the cyber threat landscape, particularly in the aviation sector.
• Demonstrated ability to translate threat knowledge into proactive threat detection. Proficient in analyzing and researching new or trending attacks, threat actors, malware samples, and tactics, techniques, and procedures (TTPs)
• Excellent English language skills in reading, writing, and speaking, with the capability to articulate security insights effectively, both in creating and interpreting security metrics, and in presenting them clearly to all levels of hierarchy, including senior leadership.

Experience:

• Minimum of 5 years of experience in endpoint security, malware analysis, threat hunting, penetration testing, incident response, reverse engineering, or digital forensics.
• Familiarity with AWS cloud infrastructure, with hands-on experience monitoring associated logs, including GuardDuty, CloudTrail, and VPC Flow.
• Proven experience with Akamai security tools such as Kona, WAF, BMP, custom rules, and bot definitions, as well as analyzing traffic via WSA.
• Experience conducting investigations using EDR/XDR tools like CrowdStrike and MS Defender to investigate Windows/Linux systems.
• Proficiency in Memory Forensics, dump extraction, and analysis. Qualifications: Essential: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field. Desired: Master's degree in a related field or professional certifications such as CERT-CSIH, CISSP, GCFA, GCFE, GCIH, GCIA, GMON.

Be prepared to participate in a rotating on-call schedule and collaborate across physical locations. Flexibility to work beyond standard hours for critical incidents or emergencies is crucial for success.