Senior Incident Response Analyst – Global IR & Forensics

Check Point Software; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

Check Point Software is seeking an experienced cybersecurity professional to lead advanced incident response and forensic analysis for a global customer base in London. You will manage complex incidents, develop response playbooks, and simulate attacks to strengthen defense capabilities.

Role requires 5+ years in cybersecurity with 2-5 years as T3 incident response, plus travel and on-call availability. You will work within a collaborative team protecting diverse environments against evolving

Qualifications

• 5+ years in cybersecurity with 2-5 years in T3 incident response and system compromise analysis.
• Experience with security reviews and vulnerability risk assessments.
• Experience with enterprise security solutions and incident crisis management.
• Willingness to participate in on-call rotation including weekends.
• Domestic and international travel may be required.

Responsibilities

• Responsible for daily incident management of customer incidents.
• Perform incident response and forensic analysis of compromised systems; provide remediation recommendations.
• Formulate and direct incident response efforts; create legible incident reports describing compromise vector and attacker methods.
• Ability to manage complicated global incidents.
• Ability to perform large-scale compromise assessments for customer environments.
• Build incident response plans and playbooks.
• Create attack scenarios for customer tabletop training exercises.
• Create detailed incident reports for customers and communicate findings clearly.
• Build and maintain sandbox/test lab environments to evaluate malicious code.
• Work within a team environment and coordinate work actions.

Skills

Cybersecurity

Incident response

T3 incident response

Security assessments

Attack simulations

Job description

Check Point Software is seeking an experienced cybersecurity professional to lead advanced incident response and forensic analysis for a global customer base in London. You will manage complex incidents, develop response playbooks, and simulate attacks to strengthen defense capabilities.

Role requires 5+ years in cybersecurity with 2-5 years as T3 incident response, plus travel and on-call availability. You will work within a collaborative team protecting diverse environments against evolving