Cybercrime Analyst – Hybrid Incident Response in Bath

EducationPals; Bath; Hybrid; GBP 55,000 - 85,000; Full time

Job summary

EducationPals in Bath is seeking a security operations professional to join our team. The role covers cybercrime incident response, classification of digital assets, and delivering clear feedback to customers on incidents and classifications.

You will work on detection engineering, build automation guardrails, and measure response speed while collaborating with senior staff to improve processes and workflows in a hybrid Bath office.

Qualifications

• Experience with security operations lifecycle: intake, triage, investigation, containment, recovery, learning.
• Ability to build disciplined triage systems by severity and context.
• Experience in writing scalable detection rules and automation guardrails.

Responsibilities

• Lead cybercrime incident response and communicate threat analysis to stakeholders.
• Classify websites, profiles, apps, emails, and phone numbers.
• Develop detection logic that scales and reduces false positives.
• Create response playbooks and guardrails for automation.
• Measure dwell time and response speed to improve operations.
• Coordinate adversarial testing and red/purple team exercises.
• Explore AI-assisted operations and guardrails to prevent hallucination and data leakage.

Skills

Incident response

Threat detection

Triage & investigation

Automation & playbooks

AI in security

Job description

EducationPals in Bath is seeking a security operations professional to join our team. The role covers cybercrime incident response, classification of digital assets, and delivering clear feedback to customers on incidents and classifications.

You will work on detection engineering, build automation guardrails, and measure response speed while collaborating with senior staff to improve processes and workflows in a hybrid Bath office.