Senior Incident Responder (DFIR)

Tesco; Welwyn Garden City; On-site; GBP 50,000 - 75,000; Full time

Job summary

Tesco is seeking a Senior Incident Responder (DFIR) to join their Digital Forensics and Incident Response team. The role involves investigating security incidents, enhancing workflows, and collaborating with various teams. Ideal candidates have extensive experience in incident response and a strong technical background in cybersecurity tools and protocols.

Benefits

Annual bonus scheme of up to 20% of base salary

Holiday starting at 25 days plus a personal day

Private medical insurance

Maternity and paternity leave at full pay

24/7 virtual GP service

Qualifications

• 4 years experience in security incident response.
• Experience with forensic analysis in corporate environments.
• Proficient in programming languages like Python.

Responsibilities

• Investigate and respond to security incidents.
• Conduct threat hunting to identify vulnerabilities.
• Enhance DFIR processes and methodologies.

Skills

Critical thinking

Technical investigation

Incident handling

Threat hunting

Education

4+ years relevant experience

Understanding of Windows, MacOS, Unix

Proficiency in programming (Python, PowerShell)

Tools

EDR

SIEM

SOAR

Job description

Join or sign in to find your next job

Join to apply for the Senior Incident Responder (DFIR) role at Tesco

1 week ago Be among the first 25 applicants

Join to apply for the Senior Incident Responder (DFIR) role at Tesco

Our Digital Forensics and Incident Response (DFIR) team
lead the technical investigation and response to security incidents at Tesco.
As part of this team, you’ll work alongside our security operations, threat
intelligence, and security engineering teams to protect, detect, and respond to
security threats across Tesco’s diverse and evolving estate.

You’ll apply your deep technical knowledge and critical
thinking ability to investigate and understand the full extent of security incidents
and threats. Your ability to distil and clearly convey technical information
will allow you to provide the key contextual information to decision makers
that enables them to make informed decisions.

As a senior position, when you’re not investigating
security incidents, you’ll have the freedom to leverage your knowledge and
real-world experience to help improve and automate the team’s technical
workflows, working alongside other teams to [RR1] [RR2] help drive innovation across our prevention,
automation, detection, and response capabilities. Your status as a senior
incident responder means you’ll serve as a role model for engineers and
analysts across Security Operations.

About the role

Our Digital Forensics and Incident Response (DFIR) team
lead the technical investigation and response to security incidents at Tesco.
As part of this team, you’ll work alongside our security operations, threat
intelligence, and security engineering teams to protect, detect, and respond to
security threats across Tesco’s diverse and evolving estate.

You’ll apply your deep technical knowledge and critical
thinking ability to investigate and understand the full extent of security incidents
and threats. Your ability to distil and clearly convey technical information
will allow you to provide the key contextual information to decision makers
that enables them to make informed decisions.

As a senior position, when you’re not investigating
security incidents, you’ll have the freedom to leverage your knowledge and
real-world experience to help improve and automate the team’s technical
workflows, working alongside other teams to [RR1] [RR2] help drive innovation across our prevention,
automation, detection, and response capabilities. Your status as a senior
incident responder means you’ll serve as a role model for engineers and
analysts across Security Operations.

You will be responsible for

• Investigation and Response:Perform host, network, and cloud-based forensic analysis to understand the full extent of security incidents and take appropriate response actions to contain, remediate, and recover.
• Incident Handling: Support cyber-security incident managers and decision makers with root cause analysis and formulating recommendations for detection and prevention controls.
• Technical Project Work: Use your technical capabilities to enhance our existing processes as well as identifying and working on new methods to deliver DFIR services to the ever-changing technology requirements of the business.
• Threat Hunting & Detection Engineering:Lead intelligence-based threat hunts to uncover anomalous behaviour in our estate that is representative of the security threats most relevant to Tesco, testing and raising potential detections to contribute to our internal detection engineering programme
  

You will need

· 4+ years of relevant experience.

· Experience with responding to security incidents
in large scale corporate on-premises and public cloud environments (preferably
Microsoft Azure).

· Experience with forensic analysis of
cyber-security incidents on Windows, MacOS, and Unix operating systems and
in-depth understanding of those operating systems.

· Experience with a broad range of security
technologies such as EDR, SOAR, and SIEM.

· Proficiency in at least one programming or
scripting language e.g. Python or PowerShell.

· Ability to think critically and lead technical
investigations.

· Ability to handle high pressure situations in a
calm, productive, and professional manner.

· Experience with static and dynamic file/malware
triage desirable.

Whats in it for you?
We’re all about the little helps. That’s why we make sure our Tesco colleague benefits package takes care of you – both in and out of work. Click Hereto find out more!

• Annual bonus scheme of up to 20% of base salary


• Holiday starting at 25 days plus a personal day (plus Bank holidays)


• Private medical insurance


• 26 weeks maternity and adoption leave (after 1 years’ service) at full pay, followed by 13 weeks of Statutory Maternity Pay or Statutory Adoption Pay, we also offer 4 weeks fully paid paternity leave


• Free 24/7 virtual GP service, Employee Assistance Programme (EAP) for you and your family, free access to a range of experts to support your mental wellbeing

About Us
Our vision at Tesco is to become every customer's favourite way to shop, whether they are at home or out on the move. Our core purpose is ‘Serving our customers, communities and planet a little better every day’. Serving means more than a transactional relationship with our customers. It means acting as a responsible and sustainable business for all stakeholders, for the communities we are part of and for the planet.

We are proud to have an inclusive culture at Tesco where everyone truly feels able to be themselves. At Tesco, we not only celebrate diversity, but recognise the value and opportunity it brings. We're committed to creating a workplace where differences are valued, and make sure that all colleagues are given the same opportunities. We’re proud to have been accredited Disability Confident Leader and we’re committed to providing a fully inclusive and accessible recruitment process. For further information on the accessibility support we can offer, please click here.

We’re a big business and we can offer a range of diverse full-time & part-time working patterns across our many business areas, which means that we can find something that works for you. We work in a more blended pattern - combining office and remote working. Our offices will continue to be where we connect, collaborate and innovate. If you are applying internally, please speak to the Hiring Manager about how this can work for you - Everyone is welcome at Tesco.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  Retail

Referrals increase your chances of interviewing at Tesco by 2x

Get notified about new Senior jobs in Welwyn Garden City, England, United Kingdom.

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 6 days ago

London, England, United Kingdom 6 days ago

London, England, United Kingdom 6 days ago

London, England, United Kingdom 1 week ago

London, England, United Kingdom 1 week ago

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 1 month ago

London, England, United Kingdom 2 weeks ago

BOTTEGA VENETA - Senior PR & Communication Manager - Northern Europe

London, England, United Kingdom 1 week ago

London, England, United Kingdom 2 months ago

Head of Senior Leadership Development & Culture

London, England, United Kingdom 1 month ago

London, England, United Kingdom 1 week ago

Senior Vice President, Talent and Brand Partnerships

Senior Digital Customer Experience Manager

London, England, United Kingdom 6 days ago

Head of Transformation – Group Operations

London, England, United Kingdom 5 days ago

Senior Digital Marketing Executive - Affiliates & Display

Senior Vice President Transformation Office

London, England, United Kingdom 3 weeks ago

Hackney, England, United Kingdom 4 days ago

London, England, United Kingdom 1 day ago

Greater London, England, United Kingdom 1 week ago

London, England, United Kingdom 1 day ago

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 1 day ago

London, England, United Kingdom 2 weeks ago

VP / Senior Director EMEA Client Development

London, England, United Kingdom 1 week ago

London, England, United Kingdom 1 week ago

Director / Senior Vice President, Investment, Data Centre, (Based in London, United Kingdom)

London, England, United Kingdom 1 week ago

London, England, United Kingdom 1 week ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.