Senior Threat Response Engineer — AI-Driven Incident Response

Anaplan; Greater London; On-site; GBP 110,000 - 150,000; Full time

Job summary

Anaplan is seeking a Threat Response Engineer to lead and improve how we investigate, respond to, and learn from security incidents. This senior, hands-on role combines deep forensics and incident response expertise with strong threat intelligence knowledge.

You will lead complex investigations, perform forensic analysis, conduct threat hunting, and leverage intelligence to understand adversaries and operations. AI-enabled workflows and on-call duties are part of the role.

Qualifications

• Extensive hands-on experience in digital forensics and incident response across hybrid, cloud, and SaaS environments.
• Intelligence mindset with ability to turn investigation findings into actionable intelligence for hunting, detection and reporting.
• Demonstrable experience using AI in security work, including AI-assisted investigation or triage workflows and automation.
• Solid scripting ability (e.g. Python) to support automation and data enrichment.
• Strong knowledge of MITRE ATT&CK framework and defender techniques.
• Experience designing or running tabletop exercises or crisis management.
• Ability to explain complex technical findings clearly to executive audiences, including CISO-level stakeholders.

Responsibilities

• Act as technical lead on security incidents from triage to containment, eradication, and post-incident review.
• Escalate and direct SOC analysts during live responses for complex incidents.
• Perform forensic analysis across endpoints, servers, cloud, SaaS and identity environments and reconstruct attacker timelines.
• Lead proactive threat hunts informed by investigation findings and intelligence; develop detections with SOC.
• Collaborate with IT, Engineering, Privacy, Legal, and Communications during major incidents; coordinate with external partners as needed.
• Develop and maintain IR playbooks, forensic procedures, and evidence handling standards.

Skills

Digital forensics

Incident response

Threat hunting

AI in security

Python scripting

MITRE ATT&CK

Executive communication

Tabletop exercises

Education

GCFA

GCIH

GCTI

Tools

SIEM

SOAR

EDR/XDR

Job description

Anaplan is seeking a Threat Response Engineer to lead and improve how we investigate, respond to, and learn from security incidents. This senior, hands-on role combines deep forensics and incident response expertise with strong threat intelligence knowledge.

You will lead complex investigations, perform forensic analysis, conduct threat hunting, and leverage intelligence to understand adversaries and operations. AI-enabled workflows and on-call duties are part of the role.