Senior Incident Response Lead — SOC & DFIR

Booz Allen Hamilton; Toseland; On-site; GBP 75,000 - 110,000; Full time

Job summary

Booz Allen Hamilton is seeking a Senior Tier 3 SOC Analyst to lead complex investigations and provide senior technical direction during critical incidents in the United Kingdom. The role requires coordinating across SOC, infrastructure, identity, legal, risk, and business teams while remaining hands‑on in DFIR and forensic analysis.

You will coach junior analysts, contribute to post‑incident reviews, and drive improvements to playbooks, detections, and operational documentation.

Qualifications

• Experience leading or supporting complex cyber investigations.
• Strong DFIR fundamentals with end‑to‑end incident handling.
• Knowledge of incident response frameworks and playbooks.

Responsibilities

• Lead Tier 3 investigations from triage to resolution or handover.
• Provide senior technical direction during high‑severity events.
• Coordinate with SOC, IT, legal, risk and business stakeholders.
• Mentor junior analysts and improve incident response practices.

Skills

Cyber ops

EDR/XDR

SIEM

Incident leadership

Stakeholder comms

Mentoring

MITRE ATT&CK

NIST

Education

Bachelor’s degree or equivalent

Tools

Active Directory

Windows Server

Virtualization

Cloud environments

Firewalls

Job description

Booz Allen Hamilton is seeking a Senior Tier 3 SOC Analyst to lead complex investigations and provide senior technical direction during critical incidents in the United Kingdom. The role requires coordinating across SOC, infrastructure, identity, legal, risk, and business teams while remaining hands‑on in DFIR and forensic analysis.

You will coach junior analysts, contribute to post‑incident reviews, and drive improvements to playbooks, detections, and operational documentation.