Lead Cybersecurity Incident Responder - GIAC, IR, Cyber

Adecco; Greater London; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading employment agency is seeking a highly experienced Lead Cybersecurity Incident Responder to guide clients through high-impact security incidents. The ideal candidate will possess extensive experience in incident response and SOC operations, along with strong analytical skills. Responsibilities include conducting investigations, providing on-call support, and mentoring junior team members. Join a dynamic organisation to contribute to meaningful cybersecurity efforts across Europe. Competitive salary and hybrid work model are offered.

Benefits

Competitive salary

Hybrid work model

Benefits package

Qualifications

• Extensive hands-on experience in Incident Response (IR), SOC, MSSP, CSIRT, or DFIR.
• Experience working in a 24/7 SOC environment.
• Strong analytical mindset with hypothesis-driven investigation methods.

Responsibilities

• Conduct network, host, and forensic investigations.
• Provide on-call emergency support and lead response actions.
• Produce detailed technical reports and executive-level summaries.

Skills

Incident Response (IR)

SOC operations

Microsoft security stack

DFIR tooling

SIEM

Scripting (Bash, Perl, Python, PowerShell)

Compliance understanding

MITRE ATT&CK framework

Education

CISSP

CISM

OSCP

GIAC

GCIH

GCFA

GCFE

GPEN

GNFA

Tools

Microsoft Defender/Sentinel

EDR platforms

Azure

AWS

GCP

Job description

Lead Cybersecurity Incident Responder - IR, Cyber

Salary: Competitive, based on experience + benefits

Location: London/Hybrid (some travel European travel)

About the Organisation

This forward-thinking cybersecurity intelligence organisation is recognised as a European leader, partnering with some of the most prominent brands to anticipate, prevent, and respond to emerging threats. You will be joining a highly skilled team made up of some of the sharpest minds in the industry, offering an environment where you can grow, innovate, and make a real impact.

Who We're Looking For

We are seeking a highly experienced cybersecurity professional with a strong background in incident response and advanced security operations.

Essential experience and skills

• Extensive hands‑on experience in Incident Response (IR), SOC, MSSP, CSIRT, or DFIR, with a proven ability to handle urgent and complex client incidents under pressure.
• European language is beneficial but not required.
• Experience working in a 24/7 SOC environment, with a deep understanding of how SOC operations integrate with IR.
• Expert knowledge of technologies such as Microsoft security stack, DFIR tooling, SIEM, Microsoft Defender/Sentinel, EDR platforms, timeline analysis, and cloud environments (Azure, AWS, or GCP).
• Exposure to penetration testing, including red team or purple team exercises, is advantageous.
• Ability to script or automate using Bash, Perl, Python, or PowerShell.
• Strong analytical mindset and familiarity with hypothesis-driven investigation methods.
• Confident understanding of compliance, legal requirements, and managing third-party vendor relationships.
• Solid working knowledge of the MITRE ATT&CK framework.
• Willingness to take part in on-call rotations.
• Excellent understanding of the cybersecurity landscape and its impact on modern organisations.

Highly desirable certifications

CISSP, CISM, OSCP, GIAC, GCIH, GCFA, GCFE, GPEN, GNFA (holding at least one is preferred).

What You'll Be Doing

As the Lead Cybersecurity Incident Responder, you will play a critical role in guiding clients through high-impact, time-sensitive security incidents.

Your responsibilities will include:

• Conducting network, host, and forensic investigations, presenting clear and actionable findings to clients.
• Providing on-call emergency support and leading swift, effective response actions.
• Handling complex and sensitive IR engagements across a wide range of industries and technical environments.
• Acting as a trusted advisor, consulting directly with clients and collaborating with senior leadership.
• Producing detailed technical reports and executive-level summaries.
• Mentoring and supporting junior members of the team.

This is an exciting opportunity to join a dynamic, highly respected organisation and contribute to meaningful cybersecurity work that protects organisations across Europe.

About Adecco

Adecco is acting as an Employment Agency. We are proud to be an equal opportunities employer. We are on the client's supplier list for this position.