Incident Response Specialist

ZipRecruiter; London; Hybrid; GBP 50,000 - 90,000; Full time

Job summary

An established industry player is seeking an Incident Response Specialist to join their dedicated CSIRT. This permanent hybrid role involves managing the entire Incident Response lifecycle, from investigation to eradication, in a dynamic environment that prioritizes advanced security technologies. You will lead investigations into high-impact security incidents, conduct in-depth forensic analysis, and enhance incident response capabilities through proactive measures such as tabletop exercises. With a focus on continuous improvement, this role offers a unique opportunity to contribute to the organization's cyber resilience while enjoying a competitive benefits package that supports your professional growth and personal wellbeing.

Qualifications

• Extensive experience in managing high-impact security incidents.
• Strong background in Security Operations and Incident Response.

Responsibilities

• Lead investigations into complex cyber incidents with forensic analysis.
• Coordinate responses to high-severity incidents and monitor threats.

Skills

Incident Response Management

Digital Forensics

Network Forensics

Threat Detection

Scripting or Automation

Tools

Forensic Tooling

Job description

Job Description

Incident Response Specialist – Permanent | Hybrid

We’re partnering with one of the UK’s leading organisations in the search for an Incident Response Specialist to join their dedicated CSIRT (Computer Security Incident Response Team).

In this critical role, you’ll fully own the Incident Response lifecycle—from investigation and deep forensics through containment and eradication. You'll work in an environment that invests heavily in advanced security technologies and fosters a proactive approach to cyber resilience through war-gaming, tabletop exercises, and continuous improvement initiatives.

Key Responsibilities:

• Lead investigations into complex cyber incidents, conducting in-depth forensic analysis to determine root cause and eliminate threats.
• Maintain and improve incident response and forensic tooling, ensuring high operational readiness.
• Coordinate and manage responses to high-severity incidents, working cross-functionally to reduce impact and restore normal operations.
• Organise and lead tabletop exercises and war-gaming sessions to assess and enhance incident response capabilities.
• Provide real-time updates to senior leadership during and after incidents, promoting transparency and a culture of learning.
• Identify and address potential security gaps, staying ahead of emerging threats.
• Monitor threat intelligence feeds and act decisively on critical alerts.

What We’re Looking For:

• Extensive experience managing high-impact security incidents, including ransomware and data breaches.
• Strong background in Security Operations, Incident Response, and threat detection.
• Hands-on expertise in digital forensics, network forensics, and e-Discovery.
• Familiarity with scripting or automation to enhance security workflows.
• A collaborative leader with a growth mindset, capable of strengthening team capability and driving process improvement.

This is a hybrid, permanent position with flexible working options and a competitive benefits package tailored to support both your professional development and personal wellbeing.

Interviews are moving quickly—apply today to explore this opportunity.