SOC Incident Response Specialist: Mac/Linux/Cloud

Experis (Austria); City Of London; On-site; GBP 101,000 - 138,000; Part time

Job summary

Experis (Austria) is seeking an experienced Incident Response Specialist to provide hands-on SOC and incident response support in a fast-paced cyber security environment in London. You will monitor, investigate and respond to threats across macOS, Linux, cloud, and containerised platforms.

You will work with engineering teams to contain threats, coordinate remediation, and strengthen detection and response capabilities, while documenting actions and contributing to playbooks and detection rules.

Qualifications

• Proven experience in a Security Operations Centre (SOC) or Incident Response function.
• Hands–on experience investigating threats across macOS, Linux, cloud platforms, containers and microservices.
• Experience with SIEM platforms, EDR/XDR technologies, cloud security monitoring tools.
• Strong understanding of cyber threat detection and incident response methodologies.
• Knowledge of attacker TTPs and MITRE ATT&CK framework.

Responsibilities

• Monitor and triage security alerts within a SOC environment.
• Investigate and respond to cyber security incidents across endpoint, cloud, and application environments.
• Analyse security events to determine severity, scope, impact, and remediation requirements.
• Conduct investigations involving macOS endpoints, Linux cloud workloads, microservices, and containerised environments.
• Support incident containment, recovery, and remediation activities.
• Document investigation findings, evidence, and response actions.
• Escalate complex incidents and collaborate with technical and security teams.
• Contribute to the development of detection rules, response playbooks, and process improvements.

Skills

SOC operations

Incident response

Threat analysis

MITRE ATT&CK

TTP knowledge

Communication

Tools

SIEM tools

EDR/XDR

Cloud security tools

Job description

Experis (Austria) is seeking an experienced Incident Response Specialist to provide hands-on SOC and incident response support in a fast-paced cyber security environment in London. You will monitor, investigate and respond to threats across macOS, Linux, cloud, and containerised platforms.

You will work with engineering teams to contain threats, coordinate remediation, and strengthen detection and response capabilities, while documenting actions and contributing to playbooks and detection rules.