Incident Response Engineer - Build & Lead IR Program

Fluidstack; Greater London; On-site; GBP 90,000 - 150,000; Full time

Job summary

Fluidstack is seeking a senior security incident response leader to own end-to-end incident handling across corporate, cloud, and data center environments. You will develop detection logic and playbooks, conduct digital forensics, and drive permanent improvements through post-incident reviews.

You will stand up and scale the IR program, define severity models, and coordinate on-call rotations with the broader security and IT teams.

Qualifications

• Led major security incidents from first alert to resolution with containment decisions under pressure.
• Built detection logic and response playbooks that caught intrusions in real-world scenarios.
• Performed digital forensics across cloud, endpoint and network evidence.
• Established or rebuilt an incident response program end-to-end.
• Hunted for threats proactively and found activity missed by existing tooling.
• Wrote incident reports and postmortems actionable for engineers and executives.
• Bonus: experience defending high-value targets and cloud-native forensics.
• Experience with SIEM or SOAR tooling and malware analysis is a plus.

Responsibilities

• Lead incident response end to end across corporate, cloud, and data center environments, from detection and containment through eradication and post-incident review.
• Build detection logic, response playbooks, and forensic tooling for weights-on-the-frontier infrastructure.
• Run investigations across cloud, endpoint, network, and physical systems to form a single attack picture.
• Stand up the incident response function from the ground up, including severity models and on-call rotations.
• Turn each incident into permanent improvements by closing gaps with security and IT teams.

Skills

Incident response leadership

Threat hunting

Digital forensics

Detection engineering

Postmortems

IR program development

Cloud security

Job description

Fluidstack is seeking a senior security incident response leader to own end-to-end incident handling across corporate, cloud, and data center environments. You will develop detection logic and playbooks, conduct digital forensics, and drive permanent improvements through post-incident reviews.

You will stand up and scale the IR program, define severity models, and coordinate on-call rotations with the broader security and IT teams.