Senior Incident Response Analyst (UK SC Eligible)

Forensic Focus; Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

Forensic Focus is seeking a senior incident response professional to investigate and respond to security incidents across endpoints, identities, networks and cloud environments. You will lead forensic evidence collection and analysis, coordinate containment, eradication and recovery, and help craft incident response plans and playbooks.

The role suits SOC or DFIR professionals ready to progress, with hands-on IR experience, Windows forensics, and familiarity with EDR/XDR and SIEM tools like

Qualifications

• Hands-on incident response experience required.
• Windows forensics experience required.
• Familiarity with EDR/XDR and SIEM tooling such as Velociraptor, KAPE, Timesketch, Volatility, SentinelOne, Microsoft Defender XDR and Sentinel.

Responsibilities

• Investigate and respond to security incidents across endpoints, identities, networks and cloud environments.
• Conduct forensic evidence collection and analysis.
• Coordinate containment, eradication and recovery efforts.

Skills

Incident response

Windows forensics

EDR/XDR

SIEM

Tools

Velociraptor

KAPE

Timesketch

Volatility

SentinelOne

Microsoft Defender XDR

Sentinel

Job description

Forensic Focus is seeking a senior incident response professional to investigate and respond to security incidents across endpoints, identities, networks and cloud environments. You will lead forensic evidence collection and analysis, coordinate containment, eradication and recovery, and help craft incident response plans and playbooks.

The role suits SOC or DFIR professionals ready to progress, with hands-on IR experience, Windows forensics, and familiarity with EDR/XDR and SIEM tools like