Senior Incident Response & Forensics Analyst

Check-Point-Software-Technologies-2; Greater London; On-site; GBP 70,000 - 100,000; Full time

Job summary

Check Point Software Technologies in the United Kingdom seeks a senior SOC professional to lead daily incident management, conduct incident response and forensic analysis, and deliver remediation guidance across global customer environments.

You will formulate incident response plans, build playbooks, and produce detailed reports for customers. The role requires 5+ years in cybersecurity with 2–5 years in T3 incident response, and willingness to travel domestically and internationally.

Qualifications

• 5+ years of cybersecurity experience, with 2–5 years in T3 incident response focused on system compromise analysis.
• Experience with security reviews and vulnerability risk assessments of networks using manual and automated methods.
• Experience with enterprise security solutions and incident crisis management.
• Experience conducting attack simulations for security team training.
• Ability to participate in on-call rotation, including weekends.

Responsibilities

• Daily incident management of customer incidents.
• Perform incident response and forensic analysis of compromised systems; provide remediation recommendations.
• Formulate and direct incident response efforts; create legible incident reports detailing compromise vectors and attacker methodologies.
• Manage complicated global incidents and scale compromise assessments across customer environments.
• Build incident response plans and playbooks; communicate findings to customers.

Skills

Incident response

Forensic analysis

Threat assessment

Crisis management

Team coordination

On-call rotation

Job description

Check Point Software Technologies in the United Kingdom seeks a senior SOC professional to lead daily incident management, conduct incident response and forensic analysis, and deliver remediation guidance across global customer environments.

You will formulate incident response plans, build playbooks, and produce detailed reports for customers. The role requires 5+ years in cybersecurity with 2–5 years in T3 incident response, and willingness to travel domestically and internationally.