Cyber Security Incident Response Lead

Trident; Brighton; On-site; GBP 85,000 - 120,000; Full time

Benefits offered by this job

33 days annual leave

On-demand IT courses

Bupa Employee Assistance Programme

Cycle to Work scheme

Microsoft Workplace Discount Programme

Central Brighton office with social 1s

Refer-a-Friend bonus

Job summary

Trident is seeking a Lead Security Consultant to orchestrate complex cyber security incident response, combining hands-on expertise with strategic client guidance to identify threats and strengthen security posture.

You will lead investigations, perform forensic analysis, monitor SIEMs, and mentor junior colleagues while working with clients to reduce risk and ensure regulatory compliance.

Qualifications

• Substantial experience in cyber security operations, incident response, threat hunting or security consultancy.
• Experience leading complex incidents and coordinating multiple stakeholders.
• Experience with SIEM platforms such as Microsoft Sentinel, Splunk, IBM QRadar or ArcSight.
• Broad technical understanding of Microsoft 365, Azure, Windows Server, identity, networking, firewalls, endpoint security, virtualization and resilience technologies.

Responsibilities

• Lead complex incident investigations, forensic analysis and root-cause determination.
• Monitor and analyse security events using SIEM platforms, threat intelligence and security tooling.
• Conduct proactive threat hunting and enrich alerts to identify sophisticated threats and indicators of compromise.
• Coordinate containment, eradication, recovery and post-incident review activity across clients, internal teams and third parties.
• Provide clear risk assessments, incident reports and practical security recommendations to technical and non-technical stakeholders.
• Support security governance and compliance requirements, including UK GDPR, ISO 27001 and PCI DSS where applicable.
• Improve SOC processes, playbooks, tooling and reporting, while mentoring junior security colleagues.

Skills

Cyber security operations

Incident response

Threat hunting

Security consultancy

Client communication

Tools

Microsoft Sentinel

Splunk

IBM QRadar

ArcSight

Job description

Trident is seeking a Lead Security Consultant to orchestrate complex cyber security incident response, combining hands-on expertise with strategic client guidance to identify threats and strengthen security posture.

You will lead investigations, perform forensic analysis, monitor SIEMs, and mentor junior colleagues while working with clients to reduce risk and ensure regulatory compliance.