Incident Response Analyst

Check-Point-Software-Technologies-2; Greater London; On-site; GBP 70,000 - 100,000; Full time

Job summary

Check Point Software Technologies in the United Kingdom seeks a senior SOC professional to lead daily incident management, conduct incident response and forensic analysis, and deliver remediation guidance across global customer environments.

You will formulate incident response plans, build playbooks, and produce detailed reports for customers. The role requires 5+ years in cybersecurity with 2–5 years in T3 incident response, and willingness to travel domestically and internationally.

Qualifications

• 5+ years of cybersecurity experience, with 2–5 years in T3 incident response focused on system compromise analysis.
• Experience with security reviews and vulnerability risk assessments of networks using manual and automated methods.
• Experience with enterprise security solutions and incident crisis management.
• Experience conducting attack simulations for security team training.
• Ability to participate in on-call rotation, including weekends.

Responsibilities

• Daily incident management of customer incidents.
• Perform incident response and forensic analysis of compromised systems; provide remediation recommendations.
• Formulate and direct incident response efforts; create legible incident reports detailing compromise vectors and attacker methodologies.
• Manage complicated global incidents and scale compromise assessments across customer environments.
• Build incident response plans and playbooks; communicate findings to customers.

Skills

Incident response

Forensic analysis

Threat assessment

Crisis management

Team coordination

On-call rotation

Job description

• Career site Category: Security & Risk Management

Company Description

At Check Point, what you do matters. Every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation.

Our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and AI systems, stopping attacks before they happen.

This is where innovation meetsreal-world impact.You’llhelp customers across industriesoperatewith confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.

We’reproud to be recognized by TIME, Newsweek, and Forbes for excellence and workplace culture.

What really sets Check Point apart is the opportunity to grow, contribute, and help companies navigate their AI transformation securely.

Ifyou’reexcited to work at the forefront of AI-driven security on a global scale, this is the place to do it.

Job Description

• Responsible for daily incident management of customer incidents
• Perform incident response and forensic analysis of compromised systems, identify and provide recommendations for remediation
• Formulate and direct incident response efforts, prioritize those response efforts, and create legible incident reports that describe the compromise vector, attacker methodologies and artifacts
• Ability to manage complicated global incidents
• Ability to perform large-scale compromise assessments for customer environments
• Build incident response plans and playbooks
• Creation of detailed incident reports for customers and effective communication of findings to customers
• Build and maintain sandbox/test lab environments to evaluate malicious code
• Work within a team environment and will be responsible for coordinating work actions

Qualifications

• This is not an entry level SOC role.
• 5+ years of cybersecurity experience out of which 2-5 years are experience performing T3 incident response with an emphasis on system compromise analysis.
• Experience of performing security reviews/vulnerability risk assessments of network environments using both manual procedures and automated analysis tools.
• Experience with enterprise security solutions, incident crisis management.
• Experience with performing attack simulation for training security teams.
• Experience with creating procedures and documented plans for security teams.
• Ability to participate in on-call rotation, including at least one weekend a month.
• Domestic and International travel may be required.

This position is posted in multiple territories and your ability to work without sponsorship from an employer now or in the future in the country for which you apply is required.