Cyber Incident Response Lead

Dshield; United Kingdom; Remote; GBP 80,000 - 100,000; Full time

Job summary

An established industry player in cybersecurity is seeking a dedicated Incident Response Specialist to join a dynamic team focused on mitigating security threats. In this role, you will leverage your expertise to respond to and analyze security incidents, ensuring the protection of vital information assets. You'll work closely with various stakeholders to coordinate effective remediation strategies and utilize advanced analytics to enhance threat containment. This position offers a regular Monday to Friday schedule with opportunities for on-call duties, allowing you to make a significant impact in a fast-paced environment dedicated to safeguarding digital security.

Qualifications

• Experience in incident response and threat analysis.
• Strong understanding of phishing, malware, and network attacks.

Responsibilities

• Respond to and investigate security incidents involving various threats.
• Coordinate remediation efforts with end-users and technical teams.

Skills

Incident Response

Threat Analysis

Phishing Detection

Malware Analysis

Network Security

Tools

Analytics Tools

Environmental Logging Systems

Job description

As a member of Experian's Global Security Office (EGSO) / Cyber Fusion Center (CFC), you will respond, contain, escalate, investigate, and coordinate mitigation of security events relative to anomalies detected and escalated by the Cyber Fusion Centre (CFC) according to Experian's Incident Response Plan. This team member will join a new, growing team of specialized, advanced responders to support escalations of complex or prioritized matters from Experian's existing 24x7 security monitoring and response functions responsible for responding to and analyzing security incidents involving threats targeting Experian information assets.

These threats may include:

1. phishing
2. malware
3. network attacks
4. suspicious activity

Also, you will involve working with end-users, partners, technical support teams, and management to ensure remediation and recovery from these threats. Use analytics & data collected from endpoints, environmental logging, and a variety of other sources to maximize containment and eradication of threats, while expediting recovery of the business.

Please note you will have a regular Monday – Friday schedule and expectation to participate in on-call schedule or work outside of normal work hours to manage cybersecurity incidents.

You will report to the CFC Senior Director of Incident Management and Security Operations.