Incident Response & Forensics Lead - Hybrid London

Experis (Austria); Greater London; Hybrid; GBP 65,000 - 95,000; Full time

Job summary

Experis is seeking an experienced Incident Response Analyst to join a London hybrid, outside IR35, long-term contract with a major cyber security transformation programme for a global financial services organisation.

You will investigate and respond to sophisticated cyber incidents, conduct forensic investigations, and coordinate containment and remediation across enterprise infrastructure, cloud, identity and endpoints. Strong SIEM/EDR/XDR skills are essential.

Qualifications

• Hands-on incident response experience in complex enterprise environments.
• Direct involvement in real security incidents, not just monitoring or triage.
• Strong digital forensics capabilities across endpoint, identity, cloud and network evidence.

Responsibilities

• Lead hands-on investigations into complex security incidents.
• Perform digital forensic investigations and timeline reconstruction.
• Investigate alerts using SIEM, EDR and XDR technologies.
• Coordinate containment, eradication and recovery with engineering teams.
• Map attacker techniques against MITRE ATT&CK and document findings.

Skills

Incident response

Digital forensics

SIEM

EDR/XDR

MITRE ATT&CK

KQL

Threat hunting

Network forensics

Cloud security

Forensics tools

Tools

Velociraptor

FTK

EnCase

Magnet AXIOM

Volatility

Job description

Experis is seeking an experienced Incident Response Analyst to join a London hybrid, outside IR35, long-term contract with a major cyber security transformation programme for a global financial services organisation.

You will investigate and respond to sophisticated cyber incidents, conduct forensic investigations, and coordinate containment and remediation across enterprise infrastructure, cloud, identity and endpoints. Strong SIEM/EDR/XDR skills are essential.