Cyber Incident Response Lead - Hybrid (London)

Control-Risks; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Hybrid working

Discretionary bonus

Job summary

Control Risks in London is seeking a Cyber Incident Response Consultant to join the team and deliver cyber incident response projects for clients. You will work on high-profile incidents, including compromise assessments and ransomware investigations, applying expertise across infrastructure, web servers and cloud environments.

This role emphasizes developing tooling and automation, contributing to the Cyber Response practice, and coordinating with Threat Intelligence and Cyber Crisis

Qualifications

• Proven incident response experience within a security operations or incident response team.
• Technical degree or demonstrated knowledge of networks, software and hardware.
• Strong understanding of enterprise infrastructure, web servers and cloud environments.

Responsibilities

• Lead and assist on real-world cyber incidents including ransomware investigations.
• Conduct host, network, and cloud investigations using forensics and log analysis.
• Develop and refine investigative tooling and automation for delivery improvements.
• Provide clear client-facing reports and documentation.
• Support on call duty rota and client communication.

Skills

Incident response

Ransomware investigations

EDR tooling

Digital forensics

Cloud environments

Scripting

Automation

Threat intelligence collaboration

Client communication

On-call experience

Education

Technical degree

Tools

SIGMA rules

SNORT rules

YARA signatures

Job description

Control Risks in London is seeking a Cyber Incident Response Consultant to join the team and deliver cyber incident response projects for clients. You will work on high-profile incidents, including compromise assessments and ransomware investigations, applying expertise across infrastructure, web servers and cloud environments.

This role emphasizes developing tooling and automation, contributing to the Cyber Response practice, and coordinating with Threat Intelligence and Cyber Crisis