Security Consultant – Incident Responder (SOC/DFIR)

Forensic Focus; Greater London; Híbrido; GBP 65.000 - 90.000; Tempo integral

Resumo da vaga

NTT DATA in London is seeking a Security Consultant – Incident Responder to join our SOC/DFIR practice. You will monitor security alerts, triage incidents, conduct digital forensics on endpoints, networks and cloud environments, and coordinate containment and recovery efforts.

You will contribute to threat hunting, detection engineering, and post-incident reviews, collaborating with cross-functional teams across the UK and EMEA to strengthen detection capabilities and governance.

Qualificações

• > You will protect clients by monitoring security alerts and triaging incidents.
• < You will conduct digital forensics on endpoints, networks and cloud systems.
• < You will contribute to detection engineering, playbook development and post-incident reviews.

Responsabilidades

• > Monitor security alerts and triage incidents.
• < Conduct digital forensics on endpoints, networks and cloud environments.
• < Coordinate containment, eradication and recovery actions.
• < Support threat hunting and detection engineering initiatives.

Conhecimentos

SIEM & EDR/XDR

Network & cloud security

Forensic evidence handling

Log & packet analysis

MITRE ATT&CK mapping

Threat intelligence

Incident response governance

Ferramentas

SIEM platforms

EDR/XDR tooling

Cloud security tools

Descrição da vaga

# Security Consultant – Incident Responder (SOC/DFIR)*NTT DATA***London, England**Hybrid · Mid · Full-time### The RoleThis position involves monitoring security alerts, triaging and investigating incidents, coordinating containment and recovery, and conducting digital forensics on endpoints, networks and cloud systems. The analyst also contributes to threat hunting, detection engineering, playbook development and post-incident reviews.### Skills & ExperienceCandidates need experience with SIEM, EDR/XDR, network and cloud security tools, forensic evidence handling, log and packet analysis, and mapping findings to MITRE ATT&CK. Familiarity with threat intelligence, detection tuning and incident response governance is expected.### Who It SuitsSuited to experienced SOC or incident response professionals who enjoy hands-on investigation, cross-team coordination, and improving detection capability within a consultancy environment across UK and EMEA organisations.