Cyber Security Incident Response Consultant

JR United Kingdom; Warrington; Remote; GBP 50,000 - 80,000; Full time

Job summary

A leading Managed Security Service Provider is seeking a Senior Cyber Security Incident Responder in Warrington. This high-impact role involves managing incident response engagements, direct client communication, and shaping an expanding IR function. Candidates should have expertise in security tools and frameworks, and the capacity to thrive under pressure. The position offers autonomy and visibility within a well-established MSSP, perfect for those looking to advance their career in cyber security.

Qualifications

• Proven experience leading full-cycle incident response operations required.
• Proficient with security tools like Microsoft Sentinel and CrowdStrike.
• Cutting-edge knowledge of security frameworks such as MITRE ATT&CK.

Responsibilities

• Lead end-to-end incident response investigations.
• Communicate directly with clients during live incidents.
• Produce detailed incident reports with actionable recommendations.

Skills

Leading full-cycle incident response operations

Client communication

Technical writing skills

Understanding of security frameworks

Tools

Microsoft Sentinel

CrowdStrike

Defender

Job description

Job Title: Senior Cyber Security Incident Responder

Role:

A leading Managed Security Service Provider is expanding its team and is hiring a Senior Incident Responder. This position focuses on managing high-impact cases and directly supporting clients experiencing cyber breaches.

This is an opportunity to take full ownership of incident response engagements, work directly with customers under pressure, and shape a growing IR function within a well-established MSSP. If you’ve led major incidents and want to step into a visible, high-trust role, this is it.

Responsibilities:

1. Lead end-to-end incident response investigations and containment efforts
2. Communicate directly with clients during live cyber incidents, offering reassurance and expert guidance
3. Produce detailed incident reports with root cause analysis and actionable recommendations
4. Perform forensic and log analysis using SIEM, EDR, SOAR, and other security tools
5. Collaborate across teams to enhance response playbooks and internal processes
6. Stay informed on emerging threats and tactics to strengthen response strategies

Skills/Must have:

1. Proven experience leading full-cycle incident response operations
2. Comfortable handling breached customer communications under high-pressure situations
3. Expertise with industry tools such as Microsoft Sentinel, CrowdStrike, Defender, or equivalent
4. Strong technical writing skills for producing post-incident reports
5. Understanding of security frameworks like MITRE ATT&CK, NIST, or similar
6. Eligibility for UK Security Clearance

Additional details:

• Remote role
• Monday to Friday schedule
• High-impact position with autonomy and visibility

Note: The posting date appears to be in the future (31.05.2025), which may be an error. The expiry date is 15.07.2025.