London Incident Response Engineer (SOC & IR)

CBSbutler Holdings Limited trading as CBSbutler; City Of London; On-site; GBP 83,000 - 96,000; Full time

Job summary

CBSbutler Holdings Limited trading as CBSbutler is seeking an Incident Response Specialist to provide hands-on SOC and incident response across endpoints, cloud and applications in London. You will investigate threats, coordinate containment and remediation, and strengthen our detection capabilities.

The role focuses on macOS endpoints, Linux workloads in cloud environments, microservices and containers, with on-site work in London and shift patterns aligned to customer needs.

Qualifications

• Experience investigating cyber security threats and incidents across endpoints, cloud environments and applications.

Responsibilities

• Monitor security alerts, triage and investigate incidents.
• Assess incident severity, scope and required response actions.
• Contain and remediate incidents; maintain records.
• Investigate threats across macOS endpoints, Linux workloads, microservices.
• Analyze telemetry across endpoints, cloud and applications.
• Escalate significant incidents and collaborate with SOC and technical teams.
• Contribute to improving detection capabilities, investigation processes and incident response playbooks.

Skills

macOS investigations

Linux workloads

Cloud environments

EDR/XDR

MITRE ATT&CK

SIEM

Threat detection

Incident documentation

Communication

Tools

SIEM

EDR

XDR

Cloud monitoring

Job description

CBSbutler Holdings Limited trading as CBSbutler is seeking an Incident Response Specialist to provide hands-on SOC and incident response across endpoints, cloud and applications in London. You will investigate threats, coordinate containment and remediation, and strengthen our detection capabilities.

The role focuses on macOS endpoints, Linux workloads in cloud environments, microservices and containers, with on-site work in London and shift patterns aligned to customer needs.