Cyber Security Incident Responder

JR United Kingdom; Liverpool; On-site; GBP 50,000 - 80,000; Full time

Job summary

A leading cybersecurity organization is seeking a Cyber Security Incident Responder to join its team in Liverpool. This role involves managing cyber incidents and contributing to a robust cyber defense capability, along with ongoing interactions with various internal and external stakeholders. Candidates should have substantial cybersecurity experience, particularly in digital forensics and incident response, to address evolving cyber threats effectively.

Qualifications

• At least five years in cybersecurity.
• 3-5 years in Digital Forensics and incident response.
• Experience in large, federated organizations.

Responsibilities

• Build and implement IR capability following best practices.
• Govern and coordinate cyber incidents as the lead incident manager.
• Conduct investigations and perform post-incident reviews.

Skills

Analytical skills

Problem-solving

Communication skills

Cultural sensitivity

Social flexibility

Education

Bachelor's degree in relevant fields

CISSP certification

CISM certification

GIAC certification

Tools

SIEM tools

Job description

Social network you want to login/join with:

Cyber Security Incident Responder, Liverpool

Location: Liverpool, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views:

3

Posted:

06.06.2025

Expiry Date:

21.07.2025

Job Description:

We are looking for an enthusiastic and experienced Cyber Security Incident Responder (IR) to join our dynamic team. The role involves maintaining the security of Element’s digital infrastructure by managing cyber incidents. This is an opportunity to be a key member of Cyber Defence, working with stakeholders to develop a 24/7 operational cyber defence capability. Experience in Digital Forensics and Incident Response (DFIR) is preferred.

This position requires on-call work and overtime during serious cyber attacks. Location in the UK is flexible.

Responsibilities:

• Build and implement Element’s IR capability following industry best practices.
• Govern and coordinate cyber incidents, acting as the lead incident manager and technical authority.
• Conduct investigations, determine root causes, and recommend remediations.
• Collaborate with IT, Privacy, Legal, and stakeholders; report incident statuses.
• Perform post-incident reviews and digital forensics, including malware analysis.
• Contribute to developing cyber defence metrics and KPIs.
• Stay updated on cyber threats and technologies.
• Develop relationships with law enforcement, vendors, and industry peers.

Key Skills:

• At least five years in cybersecurity.
• 3-5 years in Digital Forensics and managing complex incident responses.
• Experience in large, federated organizations, understanding public and private sector cyber defence.
• Bachelor's degree in relevant fields or certifications like CISSP, CISM, GIAC.
• Strong analytical, problem-solving, and communication skills.
• Cultural sensitivity and social flexibility.
• Experience with SIEM tools and writing advanced queries.

Experience Needed:

• Managing serious cyber incidents as a digital forensic responder.
• Working in large, complex enterprise environments.
• Knowledge of security monitoring, intrusion detection, firewalls, antivirus, web proxies.
• Technical expertise in networks, malware, and forensics.
• Effective communication with senior stakeholders.

Company Overview:

Element is a global testing, inspection, and certification company with over 9,000 employees across 30 countries. We aim to make tomorrow safer than today, supporting product safety, compliance, and quality through our global network.