Incident Response Lead — Data & Containment (UK)

CFC; City Of London; On-site; GBP 80,000 - 100,000; Full time

Job summary

A leading cybersecurity firm is looking for an Incident Response Consultant to join their collaborative team focused on tackling cyber threats. This role involves collecting and analyzing data, uncovering root causes and providing clients with actionable insights throughout complex incident lifecycles. Strong programming skills and a customer service mindset are essential. This is a permanent, full-time position based in London, offering a dynamic work environment where passion and integrity are highly valued.

Qualifications

• Demonstrable understanding of common cyber-attacks.
• Programming experience in Python, PowerShell, BASH or similar scripting languages.
• Working knowledge of the Microsoft 365 platform.
• Laser focus on customer service and product excellence.
• Demonstrable investigational skills.

Responsibilities

• Collect and analyze data to uncover root causes and identify exposure.
• Present findings clearly to clients, answering technical questions.
• Author detailed reports aligned to the MITRE ATT&CK framework.
• Compile Indicators of Compromise and help clients recover.

Skills

Understanding of common cyber-attacks

Programming experience in Python

Programming experience in PowerShell

Programming experience in BASH

Knowledge of Microsoft 365 platform

Investigational skills

Job description

A leading cybersecurity firm is looking for an Incident Response Consultant to join their collaborative team focused on tackling cyber threats. This role involves collecting and analyzing data, uncovering root causes and providing clients with actionable insights throughout complex incident lifecycles. Strong programming skills and a customer service mindset are essential. This is a permanent, full-time position based in London, offering a dynamic work environment where passion and integrity are highly valued.