Cyber Incident Response Analyst

Realtime Recruitment; Dublin; Hybrid; EUR 70,000 - 110,000; Full time

Job summary

Realtime Recruitment is seeking an experienced Cyber Incident Response Analyst to join a growing Cyber Defence function in Ireland. This hands-on role investigates and responds to cyber incidents, developing detection and response capabilities across security operations.

You will work with internal teams and external security providers, lead triage, forensics, and playbooks, and help automate security tooling. A strong background in incident lifecycle and offensive security is essential.

Qualifications

• Minimum 8+ years in Cyber Security/IT with at least 4 years in IR/SOC/Offensive Security.
• Hands-on experience with incident triage, forensics, investigation and remediation.
• Experience with SIEM, EDR/XDR, SOAR and Threat Intelligence platforms.
• Proficient in Python/PowerShell/Bash and automation of repetitive tasks.

Responsibilities

• Lead and support cyber incident triage, investigation and response activities.
• Act as escalation point for the SOC and coordinate with internal teams and external providers.
• Conduct digital forensics and incident investigations across systems and endpoints.
• Improve SOC detection use cases, response playbooks and processes.
• Work with SIEM, EDR, SOAR and Threat Intelligence to enhance monitoring and response.
• Identify security weaknesses with testing techniques and offensive tools.
• Document findings with risk, business impact and remediation recommendations.
• Develop incident response playbooks, procedures and standard operating processes.
• Automate and integrate security tools and response processes via scripting.
• Support tabletop exercises and cyber simulations to test controls.
• Collaborate with Cyber Defence and IT to apply lessons learned and improve security posture.
• Stay updated on threats and attacker techniques; participate in on-call rotations.

Skills

Cyber Incident Response

SOC Operations

Digital Forensics

Offensive Security

SIEM

EDR/XDR

SOAR

Threat Intelligence

Python

PowerShell

Bash

Scripting

Automation

Tabletop Exercises

Threat Hunting

MITRE ATT&CK

Cybersecurity Certifications

Tools

Splunk

CrowdStrike

ZeroFOX

Burp Suite

Nmap

Metasploit

Job description

We are looking for an experienced Cyber Incident Response Analyst to join a growing Cyber Defence function. This is a hands-on role for someone with strong experience across Cyber Incident Response, SOC Operations, Digital Forensics and Offensive Security. You will work closely with internal Cyber Security and IT teams, alongside outsourced SOC and specialist security providers, helping to investigate and respond to cyber incidents while continuously improving detection and response capabilities.

What You'll Be Doing

• Lead and support cyber incident triage, investigation and response activities.
• Act as an escalation point for the Security Operations Centre (SOC) and coordinate response activities with internal teams and external security providers.
• Conduct digital forensics and incident investigations across systems, endpoints and other technology environments.
• Improve SOC detection use cases, incident response playbooks and operational processes.
• Work with SIEM, EDR, SOAR and Threat Intelligence platforms to improve monitoring, detection and response capabilities.
• Identify and validate security weaknesses using manual testing techniques and offensive security tools.
• Document security findings, including risk, business impact, technical impact and remediation recommendations.
• Support the development of incident response playbooks, procedures and standard operating processes.
• Help automate and integrate security tools and response processes using scripting and automation.
• Support tabletop exercises, cyber simulations and security control testing.
• Work closely with Cyber Defence, Cyber Engineering and IT teams to implement lessons learned from incidents and improve the overall security posture.
• Stay up to date with emerging cyber threats, vulnerabilities and attacker techniques.
• Participate in an on-call rota for major cyber security incidents.

What We're Looking For

• 8+ years' experience in Cyber Security and/or IT, with at least 4 years in SOC, Incident Response or Offensive Security.
• Strong hands-on experience managing and investigating cyber security incidents.
• Experience with incident triage, digital forensics, investigation and remediation.
• Hands-on experience with SIEM, EDR/XDR, SOAR and Threat Intelligence platforms.
• Experience with technologies such as Splunk, CrowdStrike, ZeroFox or similar security tools.
• Practical experience with offensive security tools including Burp Suite, Nmap and Metasploit.
• Experience using Python, PowerShell, Bash or another scripting/programming language.
• Ability to improve SOC processes, detection use cases and incident response playbooks.
• Strong understanding of the cyber incident lifecycle and the ability to independently manage low-to-medium severity incidents.
• A proactive mindset with the ability to identify opportunities for automation, process improvement and stronger security controls.

Nice to Have

• Experience with the MITRE ATT&CK framework and modern attacker techniques.
• Experience working with outsourced SOC or managed security service providers.
• Experience developing security dashboards and reporting on KPIs, SLAs and security trends.
• Experience automating incident response playbooks and security workflows.
• Experience in threat hunting or detection engineering.
• Experience planning and delivering tabletop exercises and cyber attack simulations.
• Relevant Cyber Security certifications such as GIAC, CISSP, OSCP, CEH or similar.

If you're a hands-on Cyber Security professional who enjoys investigating incidents, improving detection capabilities and strengthening an organisation's overall cyber resilience, we'd like to hear from you.

Must hold Stamp 4, EU or Irish passport - this is a hybrid role 3 days per week