Senior Manager – Associate Director Technical Incident Responder, Cyber Incident Response

Cyber UK; Greater London, Manchester; On-site; GBP 60,000 - 80,000; Full time

Job summary

Cyber UK is seeking a Technical Incident Responder focused on Cyber Incident Response within Technology and Transformation. Your role will include delivering cyber-related services and solving client issues with creativity and leadership. You will lead teams, train colleagues, and work with high-profile clients to enhance Cyber service offerings.

The ideal candidate should have experience in incident response, network forensics, and possess relevant industry qualifications. Collaboration and effective communication are essential in this role.

Qualifications

• Proven experience in Incident Response managing technical and non-technical teams.
• Experience in network forensics detecting malicious activity.
• Ability to deliver proactive Incident Response Advisory work.

Responsibilities

• Lead teams to solve client issues and deliver cyber-related engagements.
• Train and mentor team members to grow their capabilities.
• Engage with high-profile clients to enhance the Cyber practice.

Skills

Incident Response

Network Forensics

Cloud Environments (AWS, GCP, Azure)

Malware Analysis

Communication Skills

Education

Relevant industry qualifications (CISSP, CISM, etc.)

Job description

As a Technical Incident Responder you will be focused on Cyber Incident Response within Technology and Transformation, you will typically have responsibility for:

• Your creative mindset will enable you to solve clients’ issues whilst thinking around corners;
• You will bring innate ability to lead teams, inspire colleagues and act as a trusted business adviser;
• You will deliver cyber-related engagements with our clients, working seamlessly and collaboratively with colleagues and clients;
• You will contribute to the development of our teams by training and coaching;
• You’ll be contributing to the creation of new Cyber related services and the development of existing services;
• You’ll be keen to increase the eminence of the Deloitte Cyber practice and engage with some high profile clients;
• You will have the willingness to learn and develop that Deloitte will encourage through training, mentoring and coaching options;
• You will work effectively in diverse teams with an inclusive team culture where people are recognised for their contribution.

Desirable skills, qualifications, and experience

• Proven experience in Incident Response supervising technical and non-technical team members and managing incidents, either in-house or as a consultant;
• Experience in network forensics with an emphasis on detecting malicious activity using network traffic;
• Experience working with security intelligence, data analytics, security incident response, and forensic investigation teams;
• Experience in forensic and memory analysis with an emphasis on detecting malicious activity using host-based artefacts on Windows and/or Unix/Linux operating systems;
• Investigative and incident response experience within cloud environments e.g., AWS, GCP and Azure;
• Tool agnostic ability to conduct preliminary malware analysis;
• Knowledge of current hacking techniques, vulnerability disclosures, data breach incidents, and security analysis techniques;
• Excellent verbal and written communication skills and the ability to tailor communications to people from a wide range of backgrounds and seniorities;
• Excellent interpersonal skills and experience of developing strong relationships, either as a consultant or within an organisation;
• Experience in delivering proactive Incident Response Advisory work to help improve client response maturity (e.g., response process and procedure creation), including scenario design and delivery of cyber‑war‑gaming exercises;
• Experience leading technical teams during cyber incidents and prioritising analysis and remediation activity across a multi‑discipline response team;
• Willingness to operate as part of an ‘on‑call roster’, travelling to assist our UK and EMEA clients when required;
• Relevant industry qualifications to demonstrate understanding, for example CISSP, CISM, GCFE, GCFA, GREM, GCIH, CCIM, GCIA, CCNIA, CCHIA, CCMRE or similar;
• Holds Government Security clearance, or willingness to undergo the security vetting process