Lead Incident Response Analyst

IntaPeople: STEM Recruitment; Cardiff; Hybrid; GBP 55,000; Full time

Benefits offered by this job

Bespoke learning plans

Bonus plan

Job summary

A leading security operations firm in Cardiff is seeking a Lead Incident Response Analyst to oversee advanced incident response and mentoring of SOC analysts. The role includes leading high-severity incident recovery, performing threat hunting, and collaborating with multiple teams to enhance security capabilities. Candidates should have a strong background in Microsoft Sentinel and Defender suite, with excellent leadership and communication skills. This hybrid position offers competitive pay and opportunities for professional development.

Qualifications

• 3+ years SOC experience with strong incident response skills.
• Expert in Microsoft Sentinel & Defender suite.
• Strong KQL and threat-hunting expertise.

Responsibilities

• Lead containment, eradication, and recovery for high-severity incidents.
• Conduct proactive threat hunting and root cause analysis.
• Collaborate across SOC teams to improve detection and automation.
• Mentor analysts and contribute to early careers programs.

Skills

Incident response

Threat hunting

Strong communication skills

Leadership skills

KQL

Tools

Microsoft Sentinel

Microsoft Defender suite

Job description

Lead Incident Response Analyst – Security Operations (Hybrid)

Location: South Wales & Bristol (2 days per week in Cardiff office)

Pay: Circa £55,000 DOE, plus bespoke learning & bonus plan

Join a leading security operations team as a Lead Incident Response Analyst where you’ll take charge of advanced incident response, proactive threat hunting, and mentoring SOC analysts. Acting as a senior escalation point, you’ll work with cutting‑edge Microsoft security tools (Sentinel, Defender suite) and frameworks like MITRE ATT&CK to safeguard clients against sophisticated threats.

What you’ll do:

• Lead containment, eradication, and recovery for high‑severity incidents
• Conduct proactive threat hunting and root cause analysis
• Collaborate across SOC teams to improve detection and automation
• Mentor analysts and contribute to early careers programs

What we’re looking for:

• 3+ years SOC experience with strong incident response skills
• Expert in Microsoft Sentinel & Defender suite
• Strong KQL and threat‑hunting expertise
• Excellent communication and leadership skills

Hybrid role with on‑call rota and opportunities to shape SOC capabilities.