Cyber Incident Response Consultant

Control Risks; London; Hybrid; GBP 80,000 - 90,000; Full time

Job summary

A leading company in business consulting seeks a Consultant for their Cyber Incident Response team in London. This role involves delivering cyber response projects, conducting investigations, and collaborating with various teams. The ideal candidate will have a strong investigative background, technical skills, and an understanding of current cyber threats. Responsibilities include leading investigations, threat hunting, and ensuring effective client management. The position offers a full-time employment type with opportunities for hybrid working arrangements.

Benefits

Discretionary Global Bonus Scheme

Hybrid Working Arrangements

Qualifications

• Proven experience leading investigations of cyber incidents.
• Experience in conducting log analysis and digital forensics.

Responsibilities

• Lead and assist with host and network-based investigations.
• Provide situation reports and significant case-related material to clients.

Skills

Investigation

Analytical Skills

Presentation Skills

Threat Hunting

Education

Technical Degree

Tools

EDR Tooling

MITRE ATT&CK

SIGMA Rules

SNORT Rules

YARA Signatures

Job description

Get AI-powered advice on this job and more exclusive features.

Thanks to continued growth we are now seeking a Consultant to join our Cyber Incident Response team in London. As the Consultant you will have responsibility for delivering Control Risks' cyber response projects to our clients. This involves undertaking compromise assessments, business email compromise investigations and leading the technical response on complex cases. This role will report to the Associate Director of Cyber Response (Technical) and work closely with the Cyber Crisis Management team. The successful candidate will have an investigative background, a technical skill set and a deep understanding of current and emerging threat actors.

Role tasks and responsibilities

Technical response

• Leading and assisting with host and network-based investigations. Collaborating with the Digital Forensics Incident Response (DFIR) team to deliver the work you are engaged on.
• Threat hunting using EDR Tooling to evaluate an attacker's spread through a system and network, anticipating and thwarting further attacker activity.
• Perform live compromise assessments for organisations who suspect a compromise.
• Detect and hunt unknown live, dormant, and custom malware in memory across multiple systems in an enterprise environment.
• Assist with commercialising the technology and automation developed to ensure it is fit for purpose.
• Demonstrate an understanding of both existing and emerging threat actors, as well as experience identifying rapidly changing tools, tactics and procedures of attackers.
• Work with the Cyber Threat Intelligence team to identify where they could benefit from the technical information acquired during Cyber Response cases. Also identify and implement where threat intelligence can be leveraged through tooling and automation.
• Advise on the safe technical recovery of an organisations IT systems balancing the need to understand what has happened but speed up recovery.

Client Management

• Ensure tooling and automation developed is customer friendly to deploy and use. Be responsible for any customer queries that arise from the use of the technology and automation.

Reporting

• Provide situation reports and other significant case related material to the client and the Head of Cyber Response.
• Provide documentation to the relevant consultants in sufficient time to allow review and feedback, before submitting to a client.
• Supporting the growth of the Cyber Response practice
• Discuss and input into Control Risks' cyber response methodologies and approaches and tailoring the approach in changing market conditions.
• This role has a requirement to be on call.
• Identifying potential new areas of growth and opportunity.

Requirements

• Proven experience leading investigations of cyber incidents
• Technical degree or demonstrated knowledge of common networks, software and hardware used in business environments
• Experience in conducting log analysis and digital forensics following a cyber incident
• Proven experience in responding to cyber-attacks
• Demonstrable experience of operating within a Security Operations Centre
• Fluent in English (written and spoken)
• Excellent presentation skills
• Excellent analytical skills

Preferred Qualifications and specialist skills

• Strong understanding of MITRE ATT&CK techniques / sub-techniques. The ability to articulate TTPs to clients in non-technical terms.
• Experience in generating SIGMA rules for host detection, SNORT rules for network detection and YARA Signatures for file and memory artefact identification.
• Control Risks offers a competitively positioned compensation and benefits package that is transparent and summarised in the full job offer.
• We operate a discretionary global bonus scheme that incentivises, and rewards individuals based on company and individual performance.
• Control Risks supports hybrid working arrangements, wherever possible, that emphasise the value of in-person time together - in the office and with our clients - while continuing to support flexible and remote working.
• As an equal opportunities employer, we encourage suitably qualified applicants from a wide range of backgrounds to apply and join us and are fully committed to equal treatment, free from discrimination, of all candidates throughout our recruitment process.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Engineering and Information Technology

• Industries

  Business Consulting and Services

Referrals increase your chances of interviewing at Control Risks by 2x

Get notified about new Software Engineer jobs in London, England, United Kingdom.

London, England, United Kingdom 1 week ago

London, England, United Kingdom 1 month ago

London, England, United Kingdom 2 weeks ago

Member of Technical Staff, AI Post-Training

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 6 months ago

London, England, United Kingdom 22 hours ago

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 10 months ago

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 22 hours ago

Software Engineer, All Levels - London & Lisbon

Greater London, England, United Kingdom 1 week ago

London, England, United Kingdom 2 days ago

London, England, United Kingdom 1 week ago

London, England, United Kingdom 3 months ago

London, England, United Kingdom 1 week ago

Feltham, England, United Kingdom 2 weeks ago

London, England, United Kingdom £80,000.00-£90,000.00 1 month ago

London, England, United Kingdom 1 month ago

London, England, United Kingdom 1 day ago

London, England, United Kingdom 1 week ago

London, England, United Kingdom 5 months ago

Ensoft - Early in Career /Graduate Software Engineering –UK

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 4 months ago

London, England, United Kingdom 5 days ago

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 2 years ago

London, England, United Kingdom 3 days ago

London, England, United Kingdom 1 week ago

Member of Technical Staff, AI Multimodal

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 1 week ago

London, England, United Kingdom 2 weeks ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.