London On-Site SOC Incident Response Specialist

CBS Butler; Greater London; On-site; GBP 83,000 - 96,000; Full time

Job summary

CBS Butler is seeking an experienced Incident Response Specialist to deliver hands-on SOC and incident response support across endpoints, cloud and applications from our London-based operations. The role focuses on macOS investigations, Linux cloud workloads, microservices and containerised environments, with on-site work in London.

You will investigate threats, assess incidents, support containment and remediation, and contribute to improving threat detection and response capabilities while

Qualifications

• Practical experience investigating cyber security threats and incidents across endpoints, cloud environments and applications.
• Hands-on experience with macOS security investigations and Linux workloads in cloud environments.
• Understanding of microservices and containerised environments.
• Experience using SIEM, EDR/XDR and cloud security monitoring technologies.
• Strong knowledge of threat detection, attacker tactics and techniques, including the MITRE ATT&CK framework.
• Ability to analyse security telemetry and determine incident severity, scope and impact.
• Experience documenting investigations, maintaining evidence and communicating findings clearly.
• Strong collaboration and communication skills, with the ability to engage technical and non-technical stakeholders.

Responsibilities

• Monitor security alerts, perform triage and investigate potential incidents.
• Assess incident severity, scope, impact and required response actions.
• Conduct incident investigations and support containment and remediation activities.
• Investigate threats across macOS endpoints, Linux cloud workloads, microservices and containerised environments.
• Analyse and correlate security telemetry across endpoint, cloud and application environments.
• Maintain accurate incident records, investigation evidence and response documentation.
• Escalate significant incidents and collaborate with SOC and technical teams.
• Contribute to improving detection capabilities, investigation processes and incident response playbooks.

Skills

SOC experience

Threat detection

MITRE ATT&CK

macOS investigations

Linux cloud workloads

Incident response

Stakeholder communication

Analytical skills

Job description

CBS Butler is seeking an experienced Incident Response Specialist to deliver hands-on SOC and incident response support across endpoints, cloud and applications from our London-based operations. The role focuses on macOS investigations, Linux cloud workloads, microservices and containerised environments, with on-site work in London.

You will investigate threats, assess incidents, support containment and remediation, and contribute to improving threat detection and response capabilities while