Senior Incident Response Investigator

WithSecure; Greater London; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Freedom

Experienced colleagues

Global visibility

Job summary

WithSecure is seeking a Senior Incident Response Investigator to lead investigations for clients and produce high-quality reports. You will work on targeted attacks across large enterprise networks, with exposure to diverse OS environments and complex security architectures.

The role involves incident readiness support, report writing for technical and executive audiences, and mentoring junior staff while helping drive practice area growth.

Qualifications

• CISSP qualification or equivalent experience.
• Experience investigating targeted attacks across large enterprise networks.
• Experience with client-server infrastructures, security architectures, logging and alerting across multiple OS.
• Experience networking and network forensics down to packet level.
• Detailed knowledge of file systems FAT, NTFS, HFS+ and EXT2/3/4; indicators of compromise.
• Knowledge of Windows/Linux OS X internals and key system artifacts.
• Ability to articulate Incident Response phases per NIST.
• Familiarity with MITRE ATT&CK for Enterprise.
• Knowledge of memory analysis.
• Ability to report findings clearly to technical and senior management.

Responsibilities

• Performing investigations for WithSecure clients and producing high quality reports to present findings and guidance.
• Maintaining target utilization on client chargeable projects whilst working as a Senior Incident Response Investigator.
• Producing output to highlight the technical competence of the company to a standard that can be published.
• Supporting your practice area in successful delivery and growth.
• Mentoring juniors along with supporting key business objectives through advice and guidance based on current industry trends.

Skills

CISSP

Targeted attacks

Client-server infra

OS logging/alerting

Network forensics

File system analysis

Windows internals

NIST IR

MITRE ATT&CK

Memory analysis

Clear reporting

Job description

WithSecure is seeking a Senior Incident Response Investigator to lead investigations for clients and produce high-quality reports. You will work on targeted attacks across large enterprise networks, with exposure to diverse OS environments and complex security architectures.

The role involves incident readiness support, report writing for technical and executive audiences, and mentoring junior staff while helping drive practice area growth.