Incident Response Analyst - 24/7 Security Operations

Starling; Greater London; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

25 days holiday

Birthday leave

Pension scheme

Private Medical Insurance

Perkbox membership

Cycle to Work

Job summary

Starling seeks a passionate Incident Responder to join its Security Operations team, defending customers, assets and systems. You will support 24/7 operations under the Information Security Lead - SecOps Response, conducting investigations, containment, and recovery across cloud, endpoints and network.

You will develop incident response processes, analyse diverse logs, and participate in tabletop exercises while collaborating with multiple teams.

Qualifications

• 3+ years experience in a cyber incident response and digital forensics function.
• Experience in handling incidents.
• Experience in cloud forensics (GCP, AWS).
• Experience in endpoint and server forensics (Windows, MacOS, Linux).
• Experience in network forensics.
• Experience with forensics data acquisition, disk forensics and memory forensics.
• Experience in supporting and planning Tabletop Exercises.
• Understanding of network, cloud and operating system security controls.
• Excellent communication skills (verbal & written).
• Demonstrated teamwork and collaboration in a multi-functional team.
• Strong time management, problem-solving and interpersonal skills.
• Eagerness to learn and apply knowledge; willingness to mentor colleagues.

Responsibilities

• Conduct incident response activities to investigate and contain cyber security incidents.
• Develop and maintain incident response and readiness processes.
• Analyse logs from various sources to identify root cause and containment steps.
• Plan and participate in Tabletop Exercises.
• Document notes, findings, containment steps and causes for each incident.
• Collaborate with other teams to contain, eradicate and recover from incidents.
• Present investigation findings to technical and non-technical audiences.
• Support SecOps with detection engineering and threat hunting.

Skills

Incident response

Digital forensics

Cloud forensics

Endpoint forensics

Network forensics

Tabletop exercises

Security controls

Communication

Teamwork

Problem solving

Mentoring

Learning mindset

Job description

Starling seeks a passionate Incident Responder to join its Security Operations team, defending customers, assets and systems. You will support 24/7 operations under the Information Security Lead - SecOps Response, conducting investigations, containment, and recovery across cloud, endpoints and network.

You will develop incident response processes, analyse diverse logs, and participate in tabletop exercises while collaborating with multiple teams.