Incident Response Analyst

Check Point Software Technologies; Greater London; On-site; GBP 60,000 - 90,000; Full time

Job summary

Check Point Software Technologies in London seeks an experienced Incident Response Analyst to manage customer incidents, perform forensic analysis, and drive remediation efforts. The role emphasizes coordinating global incident responses, building playbooks, and producing detailed customer-facing reports.

The ideal candidate has 5+ years in cybersecurity with 2–5 years in T3 incident response, familiarity with security reviews, and the ability to operate in a fast-paced environment.

Qualifications

• This is not an entry level SOC role.
• 5+ years of cybersecurity experience with 2–5 years in T3 incident response and system compromise analysis.
• Experience performing security reviews and vulnerability risk assessments of networks.
• Experience with enterprise security solutions and incident crisis management.
• Experience with attack simulations for security teams training.
• Experience creating documented procedures for security teams.
• Willing to participate in on-call rotations, including weekends.
• Travel domestically and internationally may be required.

Responsibilities

• Lead daily incident management for customer incidents.
• Perform incident response and forensics on compromised systems with remediation recommendations.
• Direct and prioritize incident response efforts; produce readable incident reports describing compromises and artifacts.
• Manage complex global incidents and large-scale compromise assessments.
• Build incident response plans and playbooks.
• Create detailed incident reports and clearly communicate findings to customers.
• Develop sandbox/test lab environments to evaluate malware.
• Coordinate work actions within a team setting.

Skills

incident response

forensic analysis

report writing

team coordination

on-call readiness

customer communication

Tools

security monitoring tools

automated analysis tools

attack simulation tools

Job description

Incident Response Analyst • London, England, United Kingdom

• Responsible for daily incident management of customer incidents
• Perform incident response and forensic analysis of compromised systems, identify and provide recommendations for remediation
• Formulate and direct incident response efforts, prioritize those response efforts, and create legible incident reports that describe the compromise vector, attacker methodologies and artifacts
• Ability to manage complicated global incidents
• Ability to perform large-scale compromise assessments for customer environments
• Build incident response plans and playbooks
• Creation of detailed incident reports for customers and effective communication of findings to customers
• Build and maintain sandbox/test lab environments to evaluate malicious code
• Work within a team environment and will be responsible for coordinating work actions

Qualifications

• This is not an entry level SOC role.
• 5+ years of cybersecurity experience out of which 2-5 years are experience performing T3 incident response with an emphasis on system compromise analysis.
• Experience of performing security reviews/vulnerability risk assessments of network environments using both manual procedures and automated analysis tools.
• Experience with enterprise security solutions, incident crisis management.
• Experience with performing attack simulation for training security teams.
• Experience with creating procedures and documented plans for security teams.
• Ability to participate in on-call rotation, including at least one weekend a month.
• Domestic and International travel may be required.
• This position is posted in multiple territories and your ability to work without sponsorship from an employer now or in the future in the country for which you apply is required.