Threat Response Engineer IV

Forensic Focus; Greater London; Hybrid; GBP 85,000 - 120,000; Full time

Job summary

Anaplan in London is seeking a senior Threat Response Engineer IV to lead security incident investigations from triage through recovery. You will perform forensic analysis across endpoints, servers, cloud and identity platforms, conduct threat hunts, and produce intelligence-driven reporting to guide response decisions and detection improvements.

The role requires extensive hands-on digital forensics and incident response expertise, strong threat intelligence knowledge, and experience

Qualifications

• Hands-on digital forensics and incident response expertise.
• Experience investigating state-sponsored and criminal actors.
• Evidence preservation and timeline reconstruction.
• Familiarity with AI-assisted investigative workflows and automation tooling.

Responsibilities

• Lead security incident investigations from triage through recovery.
• Perform forensic analysis across endpoints, servers, cloud and identity platforms.
• Conduct threat hunts and produce intelligence-driven reporting.
• Guide response decisions and detection improvements.

Skills

DFIR expertise

Incident response

Threat intelligence

State-sponsored investigations

Evidence preservation

Timeline reconstruction

AI-assisted workflows

Automation tooling

Job description

# Threat Response Engineer IV*Anaplan***London, England**Hybrid · Senior · Full-time### The RoleThis senior position involves leading security incident investigations from triage through recovery, performing forensic analysis across endpoints, servers, cloud and identity platforms, conducting threat hunts, and producing intelligence-driven reporting to guide response decisions and detection improvements.### Skills & ExperienceRequires extensive hands-on digital forensics and incident response expertise, strong threat intelligence knowledge, experience investigating state-sponsored and criminal actors, evidence preservation, timeline reconstruction, and familiarity with AI-assisted investigative workflows and automation tooling.### Who It SuitsIdeal for an experienced DFIR practitioner comfortable acting as technical lead on complex investigations, mentoring SOC analysts, engaging cross-functional stakeholders, and thriving in a fast-paced, adversary-focused security environment.