Senior DFIR & Incident Response Analyst

Forensic Focus; Greater London; In loco; GBP 65.000 - 90.000; Tempo pieno

Descrizione del lavoro

Forensic Focus is seeking an experienced incident responder to triage and investigate alerts across SIEM, EDR/XDR, identity, email, cloud and network platforms. You will lead or support investigations into phishing, malware, compromise and data loss, coordinating containment with clients and running review meetings.

The role requires hands-on DFIR/SOC experience and strong Windows/Linux analysis skills, with familiarity in MITRE ATT&CK and NIST frameworks.

Competenze

• Hands-on DFIR, SOC or incident response experience required.
• Strong knowledge of Windows and Linux analysis.
• Familiarity with MITRE ATT&CK and NIST frameworks; credentialed analysts preferred.

Mansioni

• Triage and investigate alerts across SIEM, EDR/XDR, identity, email, cloud and network platforms.
• Lead or support investigations into phishing, malware, compromise and data loss.
• Coordinate containment with clients and run review meetings.

Conoscenze

DFIR experience

Windows analysis

Linux analysis

Authentication logs

Network traffic analysis

MITRE ATT&CK familiarity

NIST frameworks familiarity

Formazione

GCIH certification

GCFA certification

SC-200 certification

Strumenti

Sentinel

Defender XDR

Velociraptor

Volatility

EnCase

FTK

Wireshark

Descrizione del lavoro

Forensic Focus is seeking an experienced incident responder to triage and investigate alerts across SIEM, EDR/XDR, identity, email, cloud and network platforms. You will lead or support investigations into phishing, malware, compromise and data loss, coordinating containment with clients and running review meetings.

The role requires hands-on DFIR/SOC experience and strong Windows/Linux analysis skills, with familiarity in MITRE ATT&CK and NIST frameworks.