Cyber Incident Response Lead - Contract (UK-wide, 1 day/mo London)

Trades Workforce Solutions; Greater London; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading cybersecurity recruitment firm is looking for a Cyber Incident Response Lead to enhance incident response capabilities across a major organization. This hands-on role requires a strong background in incident response and digital forensics, with responsibilities including leading investigations and performing both host and network forensics. Applicants must have SC eligibility and 5+ years of UK residency. The position is UK-wide, with one required trip to London each month.

Qualifications

• 5+ years of experience in relevant Cybersecurity roles.
• SC eligibility — must have lived in the UK for the last 5 years.
• Strong technical understanding of modern attacker TTPs and the MITRE ATT&CK framework.

Responsibilities

• Lead and conduct full incident response investigations.
• Perform host forensics across various systems.
• Carry out network forensics and analyze packet flows.
• Use EDR platforms for threat hunting and evidence collection.
• Produce clear incident reports and support cyber defense activities.

Skills

Incident Response

Digital Forensics

Threat Hunting

Networking

Communication

Education

Relevant certifications (GCFE, GCFA, GREM, CISSP, CISM)

Tools

Wireshark

CrowdStrike

Microsoft Defender

Velociraptor

X-Ways

Autopsy/FTK

Job description

A leading cybersecurity recruitment firm is looking for a Cyber Incident Response Lead to enhance incident response capabilities across a major organization. This hands-on role requires a strong background in incident response and digital forensics, with responsibilities including leading investigations and performing both host and network forensics. Applicants must have SC eligibility and 5+ years of UK residency. The position is UK-wide, with one required trip to London each month.