Incident Response Analyst - Technology Vendor

Hamilton Barnes; United Kingdom; Remote; GBP 45,000 - 55,000; Full time

Benefits offered by this job

Fully remote work

Ongoing training

Career progression

Exposure to high-impact incidents

Job summary

Hamilton Barnes is seeking an experienced Incident Response Consultant for a fully remote role based in the United Kingdom. You will lead end-to-end cyber incident investigations across host, network, and cloud environments, advising client stakeholders throughout.

The ideal candidate has 4+ years of incident response, SOC, or security consulting experience, with strong networking, endpoint security, and forensic skills.

Qualifications

• 4+ years of incident response, SOC, or security consulting with focus on investigations and containment
• Experience handling complex, high-severity security incidents in client-facing or consultancy environments
• Strong technical knowledge across networking, endpoint security, and digital forensics
• Hands-on experience with EDR and SIEM platforms like Microsoft Defender, Sentinel, CrowdStrike, SentinelOne

Responsibilities

• Own and lead the end-to-end lifecycle of cyber incidents, including triage, containment, eradication, recovery, and root cause analysis
• Conduct forensic investigations across endpoints, networks, and cloud platforms
• Perform live compromise assessments for organisations with suspected breaches
• Act as a key point of contact during incidents, managing communication and escalation with client stakeholders
• Develop, maintain, and improve incident response playbooks and SOPs
• Support and guide junior analysts on complex investigations
• Deliver post-incident reviews, including lessons learned and remediation strategies
• Support incident readiness through tabletop exercises and simulation activities
• Recommend improvements to detection and response capabilities across SIEM, EDR, and SOAR platforms
• Produce detailed incident and forensic reports for both technical and non-technical audiences

Skills

Incident response

SOC

Forensics

EDR

SIEM

Communication

Certifications

Tools

Microsoft Defender

Sentinel

CrowdStrike

SentinelOne

Job description

Ready to take the next step in your career?

Join a multi-award-winning cyber security specialist, established in 2015 and certified to ISO 27001, CREST, and PCI-DSS standards. Its true "eyes-on-screen" 24/ 7/365 UK-based Security Operations Centre gives organisations complete visibility and control over cyber risk.

The company is inviting applications from experienced professionals for the role of Incident Response Consultant within its specialist consultancy. The ideal candidate will lead and support the full lifecycle of cyber incident investigations across host, network, and cloud environments, from initial triage through containment, eradication, and recovery, while advising client stakeholders throughout.

Responsibilities:

• Own and lead the end-to-end lifecycle of cyber incidents, including triage, containment, eradication, recovery, and root cause analysis
• Conduct forensic investigations across endpoints, networks, and cloud platforms
• Perform live compromise assessments for organisations with suspected breaches
• Act as a key point of contact during incidents, managing communication and escalation with client stakeholders
• Develop, maintain, and improve incident response playbooks and standard operating procedures
• Support and guide junior analysts on complex investigations
• Deliver post-incident reviews, including lessons learned and remediation strategies
• Support incident readiness through tabletop exercises and simulation activities
• Recommend improvements to detection and response capabilities across SIEM, EDR, and SOAR platforms
• Produce clear, detailed incident and forensic reports for both technical and non-technical audiences

Skills/Must have:

• 4+ years’ experience in incident response, SOC, or security consulting with a strong focus on investigations and containment
• Proven experience handling complex, high-severity security incidents in client-facing or consultancy environments
• Strong technical knowledge across networking, endpoint security, and digital forensics
• Hands-on experience with EDR and SIEM platforms (e.g., Microsoft Defender, Sentinel, CrowdStrike, SentinelOne or similar)
• Solid understanding of attacker tactics, techniques, and procedures (TTPs) and incident response methodologies
• Ability to remain composed and methodical in high-pressure situations
• Strong communication skills with the ability to translate technical findings into business impact
• Relevant certifications such as GCIH, ECIH, or equivalent are advantageous

Benefits:

• Fully remote working with occasional in-person collaboration
• Exposure to high-impact, real-world cyber incidents across multiple industries
• Ongoing training and professional development support
• Opportunity to work with modern detection and response tooling
• Structured career progression within incident response

Salary:

• £45-55k