On-Site Incident Response: Cloud & Mac/Linux Security

CBS Butler; City Of London; On-site; GBP 83,000 - 96,000; Full time

Job summary

CBS Butler in London is seeking an experienced Incident Response Specialist to provide hands-on SOC and incident response support across endpoints, cloud and application environments. You will investigate and respond to cyber security threats, with a focus on macOS endpoints, Linux workloads and containerised environments.

The role requires collaboration with security and technical teams to assess incidents, support containment and remediation, and improve threat detection and response

Qualifications

• Practical experience investigating cyber security threats and incidents across endpoints, cloud environments and applications.
• Hands-on macOS security investigations and Linux workloads in cloud environments.
• Experience with microservices and containerised environments.
• Proficiency with SIEM, EDR/XDR and cloud security monitoring technologies.
• Knowledge of threat detection, attacker tactics and MITRE ATT&CK framework.
• Ability to analyse security telemetry to determine incident severity, scope and impact.
• Experience documenting investigations and communicating findings clearly.

Responsibilities

• Monitor security alerts, triage and investigate potential incidents.
• Assess incident severity, scope, impact and required response actions.
• Conduct incident investigations and support containment and remediation activities.
• Investigate threats across macOS endpoints, Linux cloud workloads, microservices and containerised environments.
• Analyse and correlate security telemetry across endpoint, cloud and application environments.
• Maintain accurate incident records, investigation evidence and response documentation.
• Escalate significant incidents and collaborate with SOC and technical teams.
• Contribute to improving detection capabilities, investigation processes and incident response playbooks.

Skills

Incident response

macOS security

Linux cloud workloads

Containerised environments

SIEM/EDR/XDR

MITRE ATT&CK

Telemetry analysis

Investigation documentation

Stakeholder communication

Threat detection

Job description

CBS Butler in London is seeking an experienced Incident Response Specialist to provide hands-on SOC and incident response support across endpoints, cloud and application environments. You will investigate and respond to cyber security threats, with a focus on macOS endpoints, Linux workloads and containerised environments.

The role requires collaboration with security and technical teams to assess incidents, support containment and remediation, and improve threat detection and response