Cyber Security Analyst

Forensic Focus; Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

Forensic Focus is seeking a senior incident response professional to investigate and respond to security incidents across endpoints, identities, networks and cloud environments. You will lead forensic evidence collection and analysis, coordinate containment, eradication and recovery, and help craft incident response plans and playbooks.

The role suits SOC or DFIR professionals ready to progress, with hands-on IR experience, Windows forensics, and familiarity with EDR/XDR and SIEM tools like

Qualifications

• Hands-on incident response experience required.
• Windows forensics experience required.
• Familiarity with EDR/XDR and SIEM tooling such as Velociraptor, KAPE, Timesketch, Volatility, SentinelOne, Microsoft Defender XDR and Sentinel.

Responsibilities

• Investigate and respond to security incidents across endpoints, identities, networks and cloud environments.
• Conduct forensic evidence collection and analysis.
• Coordinate containment, eradication and recovery efforts.

Skills

Incident response

Windows forensics

EDR/XDR

SIEM

Tools

Velociraptor

KAPE

Timesketch

Volatility

SentinelOne

Microsoft Defender XDR

Sentinel

Job description

The Role

You investigate and respond to security incidents across customer endpoint, identity, network and cloud environments, conducting forensic evidence collection and analysis, coordinating containment, eradication and recovery, and producing incident response plans, playbooks and tabletop exercises.

Skills & Experience

Hands-on incident response and Windows forensics experience is required, along with familiarity with EDR/XDR and SIEM tools such as Velociraptor, KAPE, Timesketch, Volatility, SentinelOne, Microsoft Defender XDR and Sentinel.

UK SC clearance eligibility is needed.

Who It Suits

Suited to SOC or DFIR professionals ready to step up into a senior incident response role, who enjoy direct client communication and want to develop further specialist forensic and response capability within an MSSP environment.