Senior Incident Response Analyst - Hybrid London

Careerwise; Greater London; Hybrid; GBP 72,000 - 94,000; Full time

Job summary

Careerwise seeks an experienced Incident Response Analyst in London for a 12-month hybrid role. You will monitor security alerts across SIEM/EDR/XDR, perform forensics, and coordinate containment and recovery activities in line with SLAs.

You will also drive threat hunting, detection engineering, and governance, leveraging tools like Microsoft Sentinel and Defender XDR to reduce false positives and improve incident metrics in a regulated environment.

Qualifications

• 8+ years of experience in Cyber Security Incident Response.
• Experience with SIEM/EDR/XDR platforms and forensic investigations.
• Ability to map attacker techniques to MITRE ATT&CK and support incident containment.

Responsibilities

• Monitor and analyse security alerts across SIEM, EDR/XDR, identity, email, cloud, and network security.
• Investigate threats and coordinate containment, eradication, and recovery within SLAs.
• Conduct forensics across Windows/Linux endpoints, servers, and cloud environments.
• Develop detection rules, SIEM queries, and improve threat detection through tuning.

Skills

Incident Response

SOC operations

SIEM

EDR/XDR

Forensics

Threat hunting

MITRE ATT&CK

KQL

Python

Education

Degree in Cyber Security or related field

Tools

Microsoft Sentinel

Defender XDR

Wireshark

Velociraptor

Volatility

EnCase

Job description

Careerwise seeks an experienced Incident Response Analyst in London for a 12-month hybrid role. You will monitor security alerts across SIEM/EDR/XDR, perform forensics, and coordinate containment and recovery activities in line with SLAs.

You will also drive threat hunting, detection engineering, and governance, leveraging tools like Microsoft Sentinel and Defender XDR to reduce false positives and improve incident metrics in a regulated environment.