Cyber Incident Response Analyst

Realtime Recruitment; Ireland; On-site; EUR 111,000 - 166,000; Part time

Job summary

Realtime Recruitment seeks an experienced Cyber Incident Response Analyst to join a high-performing Cyber Defence function on a 12-month day-rate contract. This is a hands-on technical role focused on cyber incident response, threat detection, security operations, and continuous improvement of cyber defence capabilities.

You will act as the primary escalation point for the SOC, coordinating with external security partners and internal technology teams during security incidents, and work with SOC

Qualifications

• 8+ years' experience in Cyber Security and/or IT, including at least 4 years within Security Operations, Incident Response, or Offensive Security.
• Proven experience responding to live cyber security incidents, including investigation, digital forensics, event triage, and remediation.
• Hands-on experience with offensive security tools such as Burp Suite, Nmap, Metasploit, and custom scripting.
• Strong experience working with SIEM, EDR, SOAR, Threat Intelligence, and security monitoring platforms such as Splunk, CrowdStrike, ZeroFox, or equivalent.
• Experience improving SOC processes, incident response playbooks, and operational procedures.
• Working knowledge of scripting languages such as Python, PowerShell, or Bash.
• Relevant cyber security certifications such as GIAC, CISSP, OSCP, CEH, or equivalent.

Responsibilities

• Act as the primary escalation point for the SOC, coordinating with external security partners and internal technology teams during security incidents.
• Work closely with SOC analysts to improve monitoring, detection rules, alert quality, and incident response playbooks.
• Support continuous improvements across Cyber Defence processes through automation and systems integration.
• Ensure incident records, evidence, audit trails, and lessons learned are accurately documented.
• Identify and validate security weaknesses using manual testing techniques and industry-standard offensive security tools.
• Produce clear technical reports outlining vulnerabilities, business impact, risk ratings, and remediation recommendations.
• Monitor emerging cyber threats and attacker techniques relevant to the organisation's technology landscape.

Skills

Incident Response

SOC Operations

Offensive Security

Scripting

Threat Intelligence

Security Monitoring

Education

GIAC

CISSP

OSCP

CEH

Tools

Burp Suite

Nmap

Metasploit

Custom Scripting

Splunk

CrowdStrike

ZeroFox

SIEM

SOAR

Job description

We are seeking an experienced Cyber Incident Response Analyst to join a high-performing Cyber Defence function on a 12-month day-rate contract. This is a hands-on technical role focused on cyber incident response, threat detection, security operations, and continuous improvement of cyber defence capabilities.

Key Responsibilities

• Act as the primary escalation point for the SOC, coordinating with external security partners and internal technology teams during security incidents.
• Work closely with SOC analysts to improve monitoring, detection rules, alert quality, and incident response playbooks.
• Support continuous improvements across Cyber Defence processes through automation and systems integration.
• Ensure incident records, evidence, audit trails, and lessons learned are accurately documented.
• Identify and validate security weaknesses using manual testing techniques and industry-standard offensive security tools.
• Produce clear technical reports outlining vulnerabilities, business impact, risk ratings, and remediation recommendations.
• Monitor emerging cyber threats and attacker techniques relevant to the organisation's technology landscape.

Required Experience

• 8+ years' experience in Cyber Security and/or IT, including at least 4 years within Security Operations, Incident Response, or Offensive Security.
• Proven experience responding to live cyber security incidents, including investigation, digital forensics, event triage, and remediation.
• Hands-on experience with offensive security tools such as Burp Suite, Nmap, Metasploit, and custom scripting.
• Strong experience working with SIEM, EDR, SOAR, Threat Intelligence, and security monitoring platforms such as Splunk, CrowdStrike, ZeroFox, or equivalent.
• Experience improving SOC processes, incident response playbooks, and operational procedures.
• Working knowledge of scripting languages such as Python, PowerShell, or Bash.
• Relevant cyber security certifications such as GIAC, CISSP, OSCP, CEH, or equivalent.

This opportunity is suited to an experienced cyber security professional who enjoys hands-on incident response, technical investigations, and driving continuous improvements across cyber defence operations.