Incident Response & Threat Hunter

Creative Artists Agency; Greater London; On-site; GBP 65,000 - 90,000; Full time

Job summary

Creative Artists Agency (CAA) is seeking a hands-on security professional to join the Information Security group in London. You will drive end-to-end incident response, threat detection, and forensics to protect enterprise systems and data in a fast-paced, cloud-enabled environment.

The role emphasizes building runbooks, coordinating with global stakeholders, and continuously improving security controls to stay ahead of threats and incidents.

Qualifications

• A bachelor’s or master’s degree in a relevant field.
• 3+ years in IT with 2 years in incident response, threat hunting, or forensics.
• Strong technical background with Windows disk/memory forensics, network traffic analysis, and log analysis.
• Solid understanding of servers, operating systems, networks, firewalls, cloud apps, and infrastructure.

Responsibilities

• Conduct day-to-day Incident Response activities and SOC detection/response for a global environment.
• Design, engineer, and implement runbooks and playbooks for incident response.
• Coordinate with technical and business stakeholders during the incident response process.
• Perform host-based, network-based, memory, or cloud forensics in support of IR investigations.
• Play an active role in the organization’s IR efforts, identifying and mitigating information security threats.
• Review security information, event logs, and reports, providing findings and recommendations.
• Use security metrics to ensure controls meet objectives and drive continual improvement.
• Other projects or duties as assigned, including periodic on-call.

Skills

Incident Response

Threat Hunting

Digital Forensics

Windows Forensics

Network Traffic Analysis

Log Analysis

Unix/Linux Forensics

Malware Analysis

Security Playbooks

Education

Bachelor's or Master's degree in a relevant field

Job description

Creative Artists Agency (CAA) is seeking a hands-on security professional to join the Information Security group in London. You will drive end-to-end incident response, threat detection, and forensics to protect enterprise systems and data in a fast-paced, cloud-enabled environment.

The role emphasizes building runbooks, coordinating with global stakeholders, and continuously improving security controls to stay ahead of threats and incidents.