Cybersecurity Incident Response Lead
Tasks
- Analyze security event logs and provide recommendations
- Apply continuous improvement to security control effectiveness
- Build detection logic for anomalous user network host and cloud activity
- Conduct host cloud network memory and log analysis for forensics
- Contain and limit impact of security incidents
- Coordinate with technical and business stakeholders during incidents
- Create dashboards and reporting for incident response metrics
- Define and execute incident response strategy and roadmap
- Design engineer and implement incident response runbooks and playbooks
- Develop end to end security monitoring and reporting
- Evaluate emerging threats against security controls
- Lead and mentor incident response teams
- Monitor cyber threat intelligence for threats
- Perform incident response and SOC detection and response activities
- Serve as point of contact for major security incidents
Perks/Benefits
- N/A
Skills/Tech-stack
Cloud Security | Cyber Threat | Cyber Threat Intelligence | Disk forensics | Forensics | Incident Response | Linux forensics | Log Analysis | Malware analysis | Memory Forensics | NIST | Network Security | Network Traffic | Network Traffic Analysis | Playbooks | Runbooks | Security controls | Security monitoring | Threat Intelligence | Threat hunting | Traffic analysis | Windows forensics
Education
Related jobs
-
Lead Security Engineer GBP 90K-109KAWS | Automated incident response | CI/CD | Central Logging | Container OrchestrationCoaching | Compassionate leave | Flexible hours | Internal mobility | MentorshipSenior-level Full TimeUK, London4d ago
-
Senior-level Full TimeBirmingham, United Kingdom10d ago
-
Managing Director GBP 110K-125KBusiness Development | Client Relationship Management | Client relationship | Cybersecurity | ForecastingExecutive-level Full TimeLondon, England11d ago
-
AppSec Vulnerability Management | Application Security | Cloud Native | Cloud Security | Cloud Services (AWSBirthday holiday | Extra annual leave options | Group income protection | Hybrid working | Life insuranceSenior-level Full TimeLondon, England, United Kingdom14d ago
-
Security Operations Centre Lead GBP 51K-55KCyber Risk | Detection engineering | Incident Response | Intelligence Led Security | Operations CenterSenior-level Full TimeSwindon, Wiltshire, United Kingdom R15d ago
-
Network Security Lead GBP 68K-80K8021X | AI tools | Access Control | Aruba ClearPass | Certificate managementSenior-level Full TimeLondon, 30 Fenchurch Street, United Kingdom18d ago
-
Lead Information Security Analyst, GRC GBP 61K-90KAI Governance | AI Risk | AI risk management | Access Management | Audit managementHybrid work | Onsite days weekly | Work from home flexibilitySenior-level Full TimeEdinburgh, Scotland21d ago
-
SOC Operations Technical Lead GBP 65K-75KAutomation | Cloud Security | Correlation rules | CrowdStrike | Detection engineeringSenior-level Full TimeBirmingham, GB, B37 7ES22d ago
-
Lead Security Engineer GBP 90K-109KAutomated security | Automated security controls | CI/CD | Cloud Environments | Cloud SecuritySenior-level Full TimeLONDON, LONDON, United Kingdom25d ago
-
Lead Product Cyber Security Engineer GBP 50K-65KAudit Readiness | Avionics | Critical Systems | Cyber Security | Development LifecycleSenior-level Full TimeBicester, United Kingdom29d ago
-
Security Lead GBP 65K-85KAWS IAM | Access Management | Architecture Review | CI/CD | Cloud SecurityAnnual health check | Annual paid holidays | Birthday day off | Enhanced parental leave | EquitySenior-level Full TimeLondon1mo ago
-
Principal Security Engineer GBP 48K-60KISO27001 | ISO27004 | ISO27005 | NIST | Penetration TestingAdditional flexi days | Bonus scheme | Coursera learning access | Dental coverage | Family coverSenior-level Full TimeGB - Bristol - Coldharbour Lane, …1mo ago
-
Zero Trust Security Lead - London GBP 70K-80KCloud Security | Endpoint Security | IAM | Identity Providers | Least Privilege25 days vacation | Extra leave for charitable work | Private medical insuranceSenior-level Full TimeLondon, 30 Fenchurch Street, United Kingdom1mo ago
-
Head of Cyber Security service delivery and Advisory GBP 100K-130KBusiness Continuity | Cloud Security | Cyber Security | Cyber advisory | Data ProtectionExecutive-level Full TimeLondon, Aldersgate Street, United Kingdom1mo ago
-
Technical Lead, Incident Response GBP 55K-75KCause analysis | Digital forensics | Incident Response | Log Analysis | Malware analysisEAP program | Fertility treatment leave | Flexible working | Gym discounts | Life insuranceSenior-level Full TimeLondon1mo ago
-
Engagement Lead, Incident Response GBP 56K-77KClient Management | Crisis management | DFIR | Digital forensics | Forensics AnalysisEAP | Flexible hours | Gym discounts | Headspace access | Hybrid workingSenior-level Full TimeLondon1mo ago
-
IAM Operations Lead GBP 50K-66KAccess Governance | Automation | BeyondTrust | CyberArk | Entra IDAnnual bonus | Family-friendly benefits | Flexible working | Pension scheme | Private medical insuranceSenior-level Full TimeStaines, United Kingdom1mo ago
-
Incident Response Lead GBP 30K-30KCommunication | Cybersecurity | Incident Response | Leadership | Stakeholder EngagementBenefits package | Flexible working | Inclusive environmentSenior-level Full TimeBirmingham, London, Manchester, Reading1mo ago
-
Audit management | Cloud Technology | Communication | ISO 27001 | Information security27 days annual leave | Family leave | Flexible working | Loan schemes | Pensions schemeSenior-level Full TimeUnited Kingdom1mo ago