Remote Incident Response Specialist (Microsoft Security)

Hollybank Trustees Ltd; United Kingdom; Remote; GBP 70,000 - 100,000; Full time

Benefits offered by this job

World class benefits

Job summary

Quorum Cyber urgently seeks an Incident Response Consultant to lead investigations of cyber-security incidents across diverse environments, owning investigative workstreams and coordinating with SOC, MDR, and executive leadership.

The role focuses on forensics, threat analysis, and the application of Microsoft security telemetry to incidents in Microsoft-centric environments, with AI-enabled workflows and continuous improvements.

Qualifications

• Practical forensic analysis across Windows, Linux, macOS, and cloud platforms.
• Memory forensics.
• Experience with Microsoft-aligned security stacks.

Responsibilities

• Support investigations into cyber security incidents across diverse technologies and environments, taking ownership of defined investigative workstreams and seeking guidance when required.
• Perform host, network, and memory forensics, including Windows, Linux, macOS, and multi-cloud artefact analysis.
• Interact with customer stakeholders, legal teams, technical staff, and executive leadership during incidents.

Skills

Forensic analysis

Memory forensics

Log/network analysis

EDR/SIEM

Microsoft security

Evidence handling

AI in IR

Threat hunting

Incident response

Threat intelligence

Tools

Microsoft Defender

Sentinel

Entra

Azure

Microsoft 365

Job description

Quorum Cyber urgently seeks an Incident Response Consultant to lead investigations of cyber-security incidents across diverse environments, owning investigative workstreams and coordinating with SOC, MDR, and executive leadership.

The role focuses on forensics, threat analysis, and the application of Microsoft security telemetry to incidents in Microsoft-centric environments, with AI-enabled workflows and continuous improvements.