Incident Response Specialist

CBS Butler; Greater London; Vor Ort; GBP 83.000 - 96.000; Vollzeit

Zusammenfassung

CBS Butler is seeking an experienced Incident Response Specialist to deliver hands-on SOC and incident response support across endpoints, cloud and applications from our London-based operations. The role focuses on macOS investigations, Linux cloud workloads, microservices and containerised environments, with on-site work in London.

You will investigate threats, assess incidents, support containment and remediation, and contribute to improving threat detection and response capabilities while

Qualifikationen

• Practical experience investigating cyber security threats and incidents across endpoints, cloud environments and applications.
• Hands-on experience with macOS security investigations and Linux workloads in cloud environments.
• Understanding of microservices and containerised environments.
• Experience using SIEM, EDR/XDR and cloud security monitoring technologies.
• Strong knowledge of threat detection, attacker tactics and techniques, including the MITRE ATT&CK framework.
• Ability to analyse security telemetry and determine incident severity, scope and impact.
• Experience documenting investigations, maintaining evidence and communicating findings clearly.
• Strong collaboration and communication skills, with the ability to engage technical and non-technical stakeholders.

Aufgaben

• Monitor security alerts, perform triage and investigate potential incidents.
• Assess incident severity, scope, impact and required response actions.
• Conduct incident investigations and support containment and remediation activities.
• Investigate threats across macOS endpoints, Linux cloud workloads, microservices and containerised environments.
• Analyse and correlate security telemetry across endpoint, cloud and application environments.
• Maintain accurate incident records, investigation evidence and response documentation.
• Escalate significant incidents and collaborate with SOC and technical teams.
• Contribute to improving detection capabilities, investigation processes and incident response playbooks.

Kenntnisse

SOC experience

Threat detection

MITRE ATT&CK

macOS investigations

Linux cloud workloads

Incident response

Stakeholder communication

Analytical skills

Jobbeschreibung

Incident Response Specialist

months +

+Inside IR35

+£60 - £70 ph

+On site in London

We are seeking an experienced Incident Response Specialist to provide hands‑on Security Operations Centre (SOC) and incident response support across endpoint, cloud and application environments.

The successful candidate will investigate and respond to cyber security threats, with a particular focus on macOS endpoints, Linux cloud workloads, microservices and containerised environments. You will work closely with security and technical teams to assess incidents, support containment and remediation, and improve threat detection and response capabilities.

Key Responsibilities

• Monitor security alerts, perform triage and investigate potential incidents.
• Assess incident severity, scope, impact and required response actions.
• Conduct incident investigations and support containment and remediation activities.
• Investigate threats across macOS endpoints, Linux cloud workloads, microservices and containerised environments.
• Analyse and correlate security telemetry across endpoint, cloud and application environments.
• Maintain accurate incident records, investigation evidence and response documentation.
• Escalate significant incidents and collaborate with SOC and technical teams.
• Contribute to improving detection capabilities, investigation processes and incident response playbooks.

Essential Skills and Experience

• Practical experience investigating cyber security threats and incidents across endpoints, cloud environments and applications.
• Hands‑on experience with macOS security investigations and Linux workloads in cloud environments.
• Understanding of microservices and containerised environments.
• Experience using SIEM, EDR/XDR and cloud security monitoring technologies.
• Strong knowledge of threat detection, attacker tactics and techniques, including the MITRE ATT&CK framework.
• Ability to analyse security telemetry and determine incident severity, scope and impact.
• Experience documenting investigations, maintaining evidence and communicating findings clearly.
• Strong collaboration and communication skills, with the ability to engage technical and non‑technical stakeholders.

Working Arrangements

• Location: On‑site in London
• Working hours: 10‑hour shifts between 06:00 and 16:00.
• Shift pattern: Sunday to Wednesday or Wednesday to Saturday, as directed by the customer.

Candidates must be comfortable working in a fast‑paced security operations environment and responding effectively to emerging cyber security threats.