Threat-Focused Incident Response Analyst

Advanced Resource Managers Ltd; Greater London; On-site; GBP 55,000 - 85,000; Full time

Job summary

Advanced Resource Managers Ltd. seeks an experienced Incident Response Analyst to detect, triage and coordinate resolution of cyber security incidents across a complex enterprise environment.

You will investigate alerts, contain threats, and support post-incident reviews to drive improvements. The role requires hands-on experience with SIEM/EDR, Windows/Linux artefact analysis and knowledge of MITRE ATT&CK, NIST guidance and cloud/security fundamentals.

Qualifications

• Hands-on experience investigating security alerts and incidents using SIEM and EDR/XDR technologies.
• Experience analysing Windows and Linux host artefacts, authentication activity, security logs, network traffic and packet captures.
• Understanding of attacker behaviours and frameworks including MITRE ATT&CK, Cyber Kill Chain and NIST incident response guidance.
• Knowledge of enterprise networking, identity and access management, cloud services, email security, endpoint security, vulnerability management and data loss prevention.
• Experience producing incident records, investigation reports, management updates and post-incident findings.

Responsibilities

• Monitor, triage and investigate cyber security alerts and incidents across enterprise environments.
• Lead and support incident response activities, including containment, eradication and recovery.
• Conduct digital forensic investigations to determine scope, root cause and impact of security incidents.
• Analyse endpoint, network, cloud and identity-based security events to identify threats and compromised assets.
• Perform proactive threat hunting and develop detection rules to improve security monitoring capabilities.
• Maintain accurate incident records, produce investigation reports and provide updates to technical and senior stakeholders.
• Support post-incident reviews, root cause analysis and implementation of lessons learned.
• Develop and maintain incident response playbooks, procedures and governance documentation.
• Contribute to cyber exercises, simulations and continual improvement of the organisation's security posture.
• Collaborate with technology, business, risk, compliance and third-party teams throughout the incident lifecycle.

Skills

Incident response

Security monitoring

SIEM

EDR/XDR

Windows forensics

Linux forensics

Incident response lifecycle

Reports & updates

MITRE ATT&CK

NIST guidance

Networking basics

Cloud services

PowerShell

Python

KQL

Sentinel

Defender XDR

Defender for Identity

Defender for Cloud

EnCase

FTK

Wireshark

Education

Bachelor’s degree in Cyber Security or Computer Science

Equivalent practical experience

Tools

SIEM

EDR/XDR

Sentinel

Defender XDR

Defender for Identity

Defender for Cloud

EnCase

FTK

Wireshark

Job description

Advanced Resource Managers Ltd. seeks an experienced Incident Response Analyst to detect, triage and coordinate resolution of cyber security incidents across a complex enterprise environment.

You will investigate alerts, contain threats, and support post-incident reviews to drive improvements. The role requires hands-on experience with SIEM/EDR, Windows/Linux artefact analysis and knowledge of MITRE ATT&CK, NIST guidance and cloud/security fundamentals.