Cyber Security Incident Response Consultant

JR United Kingdom; Oxford; Remote; GBP 60,000 - 80,000; Full time

Job summary

A leading Managed Security Service Provider is hiring a Senior Incident Responder in Oxford. This role involves taking ownership of incident response efforts, managing clients during cyber breaches, producing incident reports, and enhancing internal processes. Candidates are expected to have proven experience in incident response and familiarity with relevant security tools and frameworks.

Qualifications

• Proven experience leading full-cycle incident response operations.
• Expertise with security industry tools.
• Understanding of security frameworks like MITRE ATT&CK or NIST.

Responsibilities

• Lead end-to-end incident response investigations.
• Produce detailed incident reports with root cause analysis.
• Collaborate to enhance response playbooks.

Skills

Incident response operations

Client communication under pressure

Technical writing skills

Forensic and log analysis

Tools

Microsoft Sentinel

CrowdStrike

Defender

Job description

Social network you want to login/join with:

Cyber Security Incident Response Consultant, oxford district

col-narrow-left

Client:

Location:

oxford district, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

4

Posted:

31.05.2025

Expiry Date:

15.07.2025

col-wide

Job Description:

Job Title: Senior Cyber Security Incident Responder

Role:

A leading Managed Security Service Provider is expanding its team and is hiring a Senior Incident Responder. This is a dedicated incident response position focused on managing high-impact cases and directly supporting clients experiencing cyber breaches.

This is an opportunity to take full ownership of incident response engagements, work directly with customers under pressure, and shape a growing IR function within a well-established MSSP. If you’ve led major incidents and want to step into a visible, high-trust role, this is it.

Responsibilities:

Lead end-to-end incident response investigations and containment efforts

Communicate directly with clients during live cyber incidents, offering reassurance and expert guidance

Produce detailed incident reports with root cause analysis and actionable recommendations

Perform forensic and log analysis using SIEM, EDR, SOAR, and other security tools

Collaborate across teams to enhance response playbooks and internal processes

Stay informed on emerging threats and tactics to strengthen response strategies

Skills/Must have:

Proven experience leading full-cycle incident response operations

Comfortable handling breached customer communications under high-pressure situations

Expertise with industry tools such as Microsoft Sentinel, CrowdStrike, Defender, or equivalent

Strong technical writing skills for producing post-incident reports

Understanding of security frameworks like MITRE ATT&CK, NIST, or similar

Eligibility for UK Security Clearance

Remote role

Monday to Friday schedule

High-impact position with autonomy and visibility