(Senior) Incident Responder

The Role

The position involves analysing and triaging security incidents including root-cause analysis and impact assessment, coordinating remediation for clients, and conducting forensic investigations across Windows, Linux and cloud infrastructures. The role also includes threat hunting, attacker activity tracking across log sources, and participating in 24/7 on-call coverage for critical incidents.

Skills & Experience

Candidates should have strong knowledge of modern IT environments (Windows, Linux, Azure, Active Directory) and forensic artefacts, experience with scenarios such as ransomware, BEC and domain compromise, and proficiency in SIEM, EDR, XSOAR and NIDS tooling. Specialism in at least two areas — such as cloud forensics, mobile forensics, malware analysis or threat intelligence — is expected.

Who It Suits

This role suits an experienced incident responder or DFIR professional who is comfortable operating under pressure, communicating findings at both technical and management levels, and advising enterprise clients. Candidates seeking a senior-level position within a large managed security services environment will find this role well matched to their ambitions.