Lead Cybersecurity Incident Responder - GIAC, IR, Cyber

Adecco; City Of London; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading staffing firm is seeking a highly experienced Lead Cybersecurity Incident Responder for a hybrid position in London. The ideal candidate will have extensive experience in incident response and strong analytical skills to guide clients through complex security incidents. You will conduct forensic investigations, provide emergency support, and mentor junior team members. This role comes with a competitive salary and benefits package, based on experience.

Benefits

Competitive salary

Benefits package

Qualifications

• Extensive hands-on experience in Incident Response or related fields.
• Experience working in a 24/7 SOC environment.
• Ability to script or automate using relevant programming languages.

Responsibilities

• Conducting forensic investigations and presenting findings to clients.
• Providing on-call emergency support.
• Mentoring junior team members.

Skills

Incident Response

Analytical mindset

Microsoft security stack

Bash

Python

Compliance understanding

MITRE ATT&CK framework

Education

CISSP or equivalent certification

Tools

SIEM

EDR platforms

Microsoft Defender/Sentinel

Cloud environments (Azure, AWS, GCP)

Job description

Lead Cybersecurity Incident Responder - IR, Cyber, Salary: Competitive, based on experience + benefits, Location: London / Hybrid (some travel European travel)

About the Organisation

This forward-thinking cybersecurity intelligence organisation is recognised as a European leader, partnering with some of the most prominent brands to anticipate, prevent, and respond to emerging threats. You will be joining a highly skilled team made up of some of the sharpest minds in the industry, offering an environment where you can grow, innovate, and make a real impact.

Who We're Looking For

We are seeking a highly experienced cybersecurity professional with a strong background in incident response and advanced security operations.

Essential experience and skills

• Extensive hands‑on experience in Incident Response (IR), SOC, MSSP, CSIRT, or DFIR, with a proven ability to handle urgent and complex client incidents under pressure.
• Experience working in a 24/7 SOC environment, with a deep understanding of how SOC operations integrate with IR.
• Expert knowledge of technologies such as Microsoft security stack, DFIR tooling, SIEM, Microsoft Defender/Sentinel, EDR platforms, timeline analysis, and cloud environments (Azure, AWS, or GCP).
• Exposure to penetration testing, including red team or purple team exercises, is advantageous.
• Ability to script or automate using Bash, Perl, Python, or PowerShell.
• Strong analytical mindset and familiarity with hypothesis‑driven investigation methods.
• Confident understanding of compliance, legal requirements, and managing third‑party vendor relationships.
• Solid working knowledge of the MITRE ATT&CK framework.
• Willingness to take part in on‑call rotations.
• Excellent understanding of the cybersecurity landscape and its impact on modern organisations.

Highly desirable certifications

• CISSP, CISM, OSCP, GIAC, GCIH, GCFA, GCFE, GPEN, GNFA (holding at least one is preferred).

What You’ll Be Doing

As the Lead Cybersecurity Incident Responder, you will play a critical role in guiding clients through high‑impact, time‑sensitive security incidents.

Your responsibilities will include:

• Conducting network, host, and forensic investigations, presenting clear and actionable findings to clients.
• Providing on‑call emergency support and leading swift, effective response actions.
• Handling complex and sensitive IR engagements across a wide range of industries and technical environments.
• Acting as a trusted advisor, consulting directly with clients and collaborating with senior leadership.
• Producing detailed technical reports and executive‑level summaries.
• Mentoring and supporting junior members of the team.

About Adecco

We are proud to be an equal opportunities employer. Adecco is acting as an Employment Agency. We are on the client's supplier list for this position.

Incident Response, Cyber Incident Responder, DFIR, Digital Forensics, SOC Analyst, Lead Incident Responder, Cybersecurity Analyst, SIEM, Microsoft Sentinel, Microsoft Defender, EDR, Azure Security, AWS Security, GCP Security, Threat Hunting, Cyber Threat Intelligence, MITRE ATT&CK, Red Team, Purple Team, Malware Analysis, Cyber Forensics, Security Operations, Security Engineer, On‑Call IR, Penetration Testing, Python, PowerShell, Bash, Cyber Defence, CSIRT, MSSP, Network Forensics, Endpoint Forensics, Cloud Security, IR Lead, Security Consultant.