Senior Incident Response Lead — Cyber Defence (UK Gov)

Government Recruitment Service; Greater London; Presencial; GBP 59.000 - 71.000; Jornada completa

Descripción de la vacante

The Government Recruitment Service is seeking an experienced Incident Response Lead in London to head investigations, forensic analysis, and the technical response to cyber incidents. The role requires Security Check clearance and NSV vetting, with leadership responsibilities over security analysts.

You will coordinate with other Cyber Defence functions, develop playbooks, and drive continual improvement of incident response capabilities across internal IT and citizen-facing services.

Formación

• SC clearance and NSV vetting process required.
• Proven experience leading incident response investigations.
• Ability to mentor and coach junior analysts.

Responsabilidades

• Lead the investigation of security alerts to determine incident scope and impact.
• Lead forensic analysis of systems, files, network traffic and cloud environments.
• Lead technical response with containment, eradication and recovery actions.
• Support wider coordination of cyber incidents.
• Review previous incidents to identify lessons and actions.
• Identify and deliver opportunities for continual improvement of the incident response capability.
• Work closely with other Cyber Defence functions to improve capabilities.
• Develop and update internal plans, playbooks and knowledge base articles.
• Act as escalation point and mentor security analysts.
• Be responsible for leadership and line management of security analysts.

Conocimientos

Incident response

Forensic analysis

Leadership

Mentoring

Descripción del empleo

The Government Recruitment Service is seeking an experienced Incident Response Lead in London to head investigations, forensic analysis, and the technical response to cyber incidents. The role requires Security Check clearance and NSV vetting, with leadership responsibilities over security analysts.

You will coordinate with other Cyber Defence functions, develop playbooks, and drive continual improvement of incident response capabilities across internal IT and citizen-facing services.