Senior Security Incident Response Lead - Hybrid UK

KPMG International Cooperative; Birmingham; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

KPMG in the UK is seeking a Senior Incident Response professional to join the Tier 2 team within Security Operations. The role sits in Group Corporate Services on a hybrid basis from the UK, with responsibility for high-priority investigations across a diverse tech stack for UK and Switzerland.

You will be a senior escalation point, coordinating containment, eradication and recovery with calm leadership. Eligible for Security Check clearance or able to obtain it, you will provide technical

Qualifications

• Experience leading high-severity cyber security incidents and investigations.
• Ability to produce timelines, RCAs and post-incident reports for stakeholders.
• Clear written and verbal communication to technical and non-technical audiences.

Responsibilities

• Lead investigations into complex and high-severity cyber security incidents.
• Coordinate containment, eradication and recovery activities for timely resolutions.
• Provide senior technical guidance to analysts and act as escalation point during major incidents.
• Conduct forensic investigations across endpoints, identities, cloud, email and networks.
• Develop incident timelines, root cause analyses and post-incident reports.

Skills

Incident response leadership

Senior escalation point

Analytical thinking

Communication with stakeholders

Cross-functional collaboration

Education

Security certifications

Tools

Microsoft Sentinel

Defender XDR

Defender for Endpoint

Defender for Identity

Defender for Cloud

Microsoft Purview

Digital forensics tools

SOAR / automation platforms

Job description

KPMG in the UK is seeking a Senior Incident Response professional to join the Tier 2 team within Security Operations. The role sits in Group Corporate Services on a hybrid basis from the UK, with responsibility for high-priority investigations across a diverse tech stack for UK and Switzerland.

You will be a senior escalation point, coordinating containment, eradication and recovery with calm leadership. Eligible for Security Check clearance or able to obtain it, you will provide technical