Threat Detection & Incident Response Specialist

Involved Solutions; Greater London; On-site; GBP 68,000 - 108,000; Full time

Job summary

Involved Solutions in London is seeking a Cyber Security Analyst to join our Security Operations team. The role focuses on threat detection, incident response and continuous improvement of security monitoring capabilities on-site in London.

The successful candidate will work in a fast-paced environment, handle live incidents, and collaborate with technical and business stakeholders to strengthen security posture. 40 hours per week with occasional on-call support.

Qualifications

• Strong experience in security use case development and tooling operations.
• Practical experience with SIEM and vulnerability management.
• Solid understanding of Security Operations processes and incident response frameworks.
• Familiarity with networking, IAM, perimeter controls and OSs.
• Knowledge of cloud security controls and container security.
• Experience with EDR tooling and ATT&CK framework.
• Scripting or basic coding for automation.
• Experience conducting investigations including eDiscovery.
• Industry certifications such as CISSP, GIAC or CEH.
• Strong analytical, problem-solving and stakeholder communication skills.

Responsibilities

• Monitor, investigate and respond to security alerts across SIEM platforms and ticketing systems.
• Participate in on-call rota to support live security incidents.
• Manage incident queues and approvals in ITSM tools.
• Act as SME for nominated security technologies and optimize configurations.
• Support assurance activities relating to Managed Security Service Providers.
• Maintain and enhance SecOps processes and documentation for knowledge sharing.
• Investigate security events, perform vulnerability analysis and support remediation.
• Analyze threat intelligence and translate into detection improvements.
• Process IOC and ATT&CK indicators to enhance detection rules.
• Conduct proactive threat hunting based on emerging threats.
• Perform confidential eDiscovery investigations and present findings.
• Collaborate with IT teams to strengthen security posture.

Skills

Security use-cases

Security tooling

SIEM experience

Vulnerability management

Incident response frameworks

Networking fundamentals

Cloud security

Container security

Scripting for automation

eDiscovery investigations

Managed Security Services

MITRE ATT&CK familiarity

Education

CISSP, GIAC or CEH certifications

Tools

EDR tooling

MITRE ATT&CK

Job description

Involved Solutions in London is seeking a Cyber Security Analyst to join our Security Operations team. The role focuses on threat detection, incident response and continuous improvement of security monitoring capabilities on-site in London.

The successful candidate will work in a fast-paced environment, handle live incidents, and collaborate with technical and business stakeholders to strengthen security posture. 40 hours per week with occasional on-call support.