Hybrid Security Incident Responder & Forensics Specialist

Forensic Focus; Greater London; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

NTT DATA in London is seeking a Security Consultant – Incident Responder to join our SOC/DFIR practice. You will monitor security alerts, triage incidents, conduct digital forensics on endpoints, networks and cloud environments, and coordinate containment and recovery efforts.

You will contribute to threat hunting, detection engineering, and post-incident reviews, collaborating with cross-functional teams across the UK and EMEA to strengthen detection capabilities and governance.

Qualifications

• > You will protect clients by monitoring security alerts and triaging incidents.
• < You will conduct digital forensics on endpoints, networks and cloud systems.
• < You will contribute to detection engineering, playbook development and post-incident reviews.

Responsibilities

• > Monitor security alerts and triage incidents.
• < Conduct digital forensics on endpoints, networks and cloud environments.
• < Coordinate containment, eradication and recovery actions.
• < Support threat hunting and detection engineering initiatives.

Skills

SIEM & EDR/XDR

Network & cloud security

Forensic evidence handling

Log & packet analysis

MITRE ATT&CK mapping

Threat intelligence

Incident response governance

Tools

SIEM platforms

EDR/XDR tooling

Cloud security tools

Job description

NTT DATA in London is seeking a Security Consultant – Incident Responder to join our SOC/DFIR practice. You will monitor security alerts, triage incidents, conduct digital forensics on endpoints, networks and cloud environments, and coordinate containment and recovery efforts.

You will contribute to threat hunting, detection engineering, and post-incident reviews, collaborating with cross-functional teams across the UK and EMEA to strengthen detection capabilities and governance.