Incident Response Specialist

Experis (Austria); City Of London; On-site; GBP 101,000 - 138,000; Part time

Job summary

Experis (Austria) is seeking an experienced Incident Response Specialist to provide hands-on SOC and incident response support in a fast-paced cyber security environment in London. You will monitor, investigate and respond to threats across macOS, Linux, cloud, and containerised platforms.

You will work with engineering teams to contain threats, coordinate remediation, and strengthen detection and response capabilities, while documenting actions and contributing to playbooks and detection rules.

Qualifications

• Proven experience in a Security Operations Centre (SOC) or Incident Response function.
• Hands–on experience investigating threats across macOS, Linux, cloud platforms, containers and microservices.
• Experience with SIEM platforms, EDR/XDR technologies, cloud security monitoring tools.
• Strong understanding of cyber threat detection and incident response methodologies.
• Knowledge of attacker TTPs and MITRE ATT&CK framework.

Responsibilities

• Monitor and triage security alerts within a SOC environment.
• Investigate and respond to cyber security incidents across endpoint, cloud, and application environments.
• Analyse security events to determine severity, scope, impact, and remediation requirements.
• Conduct investigations involving macOS endpoints, Linux cloud workloads, microservices, and containerised environments.
• Support incident containment, recovery, and remediation activities.
• Document investigation findings, evidence, and response actions.
• Escalate complex incidents and collaborate with technical and security teams.
• Contribute to the development of detection rules, response playbooks, and process improvements.

Skills

SOC operations

Incident response

Threat analysis

MITRE ATT&CK

TTP knowledge

Communication

Tools

SIEM tools

EDR/XDR

Cloud security tools

Job description

Incident Response Specialist (SOC)

Location: London (Onsite)
Duration: 12 Months
Inside IR35

The Opportunity

We're seeking an experienced Incident Response Specialist to provide hands–on Security Operations Centre (SOC) and Incident Response support within a fast–paced cyber security environment.

This role focuses on monitoring, investigating, and responding to cyber security threats across macOS endpoints, Linux cloud environments, microservices, and containerised platforms. You'll work closely with security and engineering teams to contain threats, coordinate remediation activities, and continuously strengthen detection and response capabilities.

Key Responsibilities

• Monitor and triage security alerts within a SOC environment.
• Investigate and respond to cyber security incidents across endpoint, cloud, and application environments.
• Analyse security events to determine severity, scope, impact, and remediation requirements.
• Conduct investigations involving:
• macOS endpoints
• Linux cloud workloads
• Microservices architectures
• Containerised environments
• Support incident containment, recovery, and remediation activities.
• Document investigation findings, evidence, and response actions.
• Escalate complex incidents and collaborate with technical and security teams.
• Contribute to the development of detection rules, response playbooks, and process improvements.

Essential Skills & Experience

• Proven experience within a Security Operations Centre (SOC) or Incident Response function.
• Hands–on experience investigating threats across:
• macOS
• Linux
• Cloud platforms
• Containers and microservices
• Experience with:
• SIEM platforms
• EDR/XDR technologies
• Cloud security monitoring tools
• Strong understanding of cyber threat detection and incident response methodologies.
• Knowledge of attacker tactics, techniques, and procedures (TTPs).
• Familiarity with the MITRE ATT&CK Framework.
• Experience correlating security telemetry from multiple sources to assess threats and incidents.
• Strong documentation and reporting skills.
• Ability to communicate technical findings clearly to technical and non–technical stakeholders.

What We're Looking For

You’ll be a proactive cyber security professional who thrives in operational environments and enjoys investigating complex security incidents. Comfortable working under pressure, you’ll have a strong analytical mindset and a passion for improving cyber resilience through effective threat detection, investigation, and response.

If you have strong SOC and Incident Response experience across cloud, Linux, macOS, and containerised environments, we’d love to hear from you.