Incident Responder - 24/7 SecOps (Hybrid)

Starling; Southampton; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

25 days holiday

Birthday day off

Volunteer time

Pension (salary sacrifice)

Private Medical Insurance

Life insurance

Perkbox membership

Cycle to Work

EV leasing

Job summary

Starling Bank is seeking a passionate Incident Responder to join its 24/7 Security Operations team. You will investigate and contain cyber security incidents, analyse logs, and contribute to tabletop exercises while collaborating across teams.

You will work in a hybrid environment with a Sunday-Thursday 09:00-17:30 shift, and you will mentor colleagues as you improve incident response processes and readiness across Starling's cloud, endpoint, and network security domains.

Qualifications

• 3+ years in cyber incident response and forensics
• Experience handling incidents
• Experience in cloud forensics (GCP, AWS)
• Experience in endpoint/server forensics (Windows, MacOS, Linux)
• Experience in network forensics
• Experience with forensics data acquisition, disk forensics and memory forensics
• Experience in planning tabletop exercises
• Strong understanding of security controls
• Excellent communication skills (verbal & written)
• Teamwork and collaboration in a multi-functional team
• Willingness to mentor colleagues
• Willingness to learn and apply knowledge

Responsibilities

• Conduct incident response to investigate and contain cyber security incidents
• Develop and maintain incident response and readiness processes
• Analyse logs from cloud, endpoint, and network to identify root cause and containment steps
• Plan and participate in tabletop exercises
• Document notes, analysis, containment steps, and incident causes
• Collaborate with cross-functional teams to contain and recover from incidents
• Present investigation findings to technical and non-technical audiences
• Support detection engineering and threat hunting within SecOps

Skills

Cyber incident response

Digital forensics

Cloud forensics (GCP, AWS)

Endpoint forensics (Windows/Mac/Linux)

Network forensics

Tabletop exercises

Technical reporting to non-technical

Team collaboration

Mentoring colleagues

Learning and applying knowledge

Tools

GCP

AWS

Job description

Starling Bank is seeking a passionate Incident Responder to join its 24/7 Security Operations team. You will investigate and contain cyber security incidents, analyse logs, and contribute to tabletop exercises while collaborating across teams.

You will work in a hybrid environment with a Sunday-Thursday 09:00-17:30 shift, and you will mentor colleagues as you improve incident response processes and readiness across Starling's cloud, endpoint, and network security domains.