Hybrid Incident Response Analyst: Threat Hunting & Forensics

Harvey Nash Group; Greater London; Hybrid; GBP 83,000 - 120,000; Part time

Job summary

Harvey Nash Group is seeking an experienced Incident Response Analyst to support a specialist cyber security function across a complex enterprise. You will manage security incidents through their lifecycle and collaborate with technical and business stakeholders.

The role requires strong experience in incident response, threat hunting, security operations and digital forensics, with a focus on protecting critical systems and data.

Qualifications

• Experience in incident response lifecycle across detection, containment, eradication and recovery.
• Strong hands-on with SIEM and EDR/XDR technologies.
• Proven ability to investigate and respond to cyber security incidents.
• Good working knowledge of Windows and Linux security investigations and logs.
• Familiarity with MITRE ATT&CK, NIST frameworks and threat intel concepts.

Responsibilities

• Monitor and investigate security alerts from SIEM/EDR/XDR, identity, email and cloud tools.
• Lead and support cyber security incident investigations and containment activities.
• Coordinate eradication and recovery across endpoints, servers and networks.
• Collect, preserve and analyse forensic artefacts from various platforms.
• Identify IOCs and attacker techniques; document findings and learnings.
• Conduct proactive threat hunting using intelligence and telemetry.
• Develop and improve detection content, playbooks and rules.
• Produce incident reports and post-incident reviews for technical and management audiences.
• Support cyber exercises and continuous improvement initiatives.
• Contribute to incident metrics and security governance reporting.

Skills

Incident response

Cyber security operations

SOC

SIEM

EDR/XDR

Forensics

Threat hunting

MITRE ATT&CK

NIST

Windows security

Linux security

Communication

Stakeholder mgmt

Education

Degree in Cyber Security or CS

Certifications such as GCIH/GCFA/GCIA/SC-200/CySA+/CISSP

Tools

Microsoft Sentinel

Defender XDR

EnCase

FTK

Wireshark

Velociraptor

PowerShell

Python

KQL

Job description

Harvey Nash Group is seeking an experienced Incident Response Analyst to support a specialist cyber security function across a complex enterprise. You will manage security incidents through their lifecycle and collaborate with technical and business stakeholders.

The role requires strong experience in incident response, threat hunting, security operations and digital forensics, with a focus on protecting critical systems and data.