Cyber Security Incident Responder

JR United Kingdom; Southampton; On-site; GBP 50,000 - 80,000; Full time

Job summary

A leading company in the testing and certification industry seeks a Cyber Security Incident Responder to enhance their cybersecurity capabilities. This role involves hands-on incident management and digital forensics, aimed at safeguarding the digital infrastructure. Candidates should bring extensive experience in cybersecurity, forensics, and effective communication skills to collaborate across teams and external partners.

Qualifications

• Minimum 5 years’ experience in cybersecurity.
• 3-5 years in Digital Forensics.
• Relevant certifications like CISSP, CISM, GIAC are a plus.

Responsibilities

• Build Element’s IR capability implementing best practices.
• Govern and coordinate cyber incidents as the lead incident manager.
• Conduct digital forensics on computer/network artifacts.

Skills

Cybersecurity

Digital Forensics

Incident Response

Problem Solving

Analytical Skills

Communication

Education

Bachelor’s degree in computer science or IT

Tools

SIEM tools

Job description

Social network you want to login/join with:

Cyber Security Incident Responder, Southampton

Client:

Location:

Southampton, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

Job Views:

3

Posted:

06.06.2025

Expiry Date:

21.07.2025

Job Description:

We are looking for an enthusiastic and experienced Cyber Security Incident Responder (IR) to join our dynamic and growing team. The role involves maintaining the security and resilience of Element’s digital infrastructure by managing cyber incidents. This is a key role in Cyber Defence, working closely with stakeholders to develop a 24/7 operational cyber defence capability. Experience in Digital Forensics and Incident Response (DFIR) is preferred.

This position requires on-call work and overtime during serious cyber attacks. Location in the UK is flexible.

Responsibilities:

• Build Element’s IR capability, implementing best practices in line with industry frameworks like NIST and SANS.
• Govern and coordinate cyber incidents, acting as the lead incident manager and technical authority. Conduct investigations to reduce risk, determine root cause, impact, and remediation actions.
• Collaborate with IT, Privacy, Legal teams, and senior stakeholders. Prepare and present incident reports.
• Conduct post-incident reviews and analysis for continuous improvement.
• Perform digital forensics on computer/network artifacts and malware analysis.
• Work with the Senior Manager Incident Response to develop cyber defence metrics and KPIs.
• Stay updated on cyber threats and security technologies.
• Develop relationships with external stakeholders like law enforcement and cybersecurity vendors.

Key Skills:

• Minimum 5 years’ experience in cybersecurity.
• 3-5 years in Digital Forensics, managing complex Cyber Incident responses.
• Experience in large, complex organizations in both public and private sectors.
• Bachelor’s degree in computer science, IT, or related field; relevant certifications like CISSP, CISM, GIAC are a plus.
• Attention to detail, analytical skills, problem-solving, critical thinking, decision-making under pressure.
• Cultural sensitivity and social flexibility in a global environment.
• Effective communication with senior staff and non-technical audiences.
• Self-motivated with a positive attitude, security as an enabler for business growth.
• Knowledge of SIEM tools and writing advanced hunting queries.

Experience Needed:

• Managing serious Cyber Incidents as a Digital Forensic Incident Responder.
• Operating successfully within large, federated enterprise environments.
• Understanding security monitoring, intrusion detection, prevention, and control systems.
• Technical expertise in networks, malware analysis, digital forensics, etc.
• Effective communication with senior stakeholders.

Company Overview:

Element is a global testing, inspection, and certification company with over 9,000 employees across 30 countries. Our purpose is to ‘Make tomorrow safer than today’, supporting customers in product safety, compliance, and market access. We foster a culture of growth, integrity, and excellence, playing a vital role in creating a safer world.