Cyber Incident Response Lead - Hybrid UK

Ellis IT; EE. UU.; Híbrido; USD 59.000 - 79.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote/onsite mix

Competitive salary £45k-£60k

Descripción de la vacante

Ellis IT in Manchester, United Kingdom, seeks an experienced security professional to lead cyber incident response for active breaches across law firms, corporates and government clients. The role blends remote and onsite engagement, demanding rapid containment, forensics and clear guidance under pressure.

You will coordinate teams, analyze logs (Office 365 telemetry included), perform forensic acquisitions and malware analysis to guide remediation. Immediate start.

Formación

• 4+ years hands-on cybersecurity operations.
• Knowledge of Cyber Kill Chain and MITRE ATT&CK.
• Understanding of defence-in-depth security controls.
• Experience with incident handling, threat hunting, and threat intel workflows.
• Proficiency with HIDS/IDS/IPS, SIEMs, AD controllers, and firewalls.
• Cloud knowledge across Azure, Office 365, AWS and Google Cloud.

Responsabilidades

• Lead emergency incident response with containment, mitigation and remediation.
• Coordinate remote and onsite initial responses, organising teams and resources.
• Collect, correlate and analyse logs from servers, firewalls, IDS/IPS, traffic, and hosts, focusing on Office 365 telemetry.
• Carry out forensic acquisitions preserving evidentiary integrity.
• Perform malware analysis to determine scope, behaviour and remediation paths.

Conocimientos

Cybersecurity ops

Cyber Kill Chain

MITRE ATT&CK

Security architecture

Incident handling

Threat hunting

Threat intelligence

HIDS/IDS/IPS

SIEMs

Active Directory

Herramientas

HIDS

IDS/IPS

SIEM

Active Directory

Firewalls

Azure

Office 365

AWS

Google Cloud

Descripción del empleo

Ellis IT in Manchester, United Kingdom, seeks an experienced security professional to lead cyber incident response for active breaches across law firms, corporates and government clients. The role blends remote and onsite engagement, demanding rapid containment, forensics and clear guidance under pressure.

You will coordinate teams, analyze logs (Office 365 telemetry included), perform forensic acquisitions and malware analysis to guide remediation. Immediate start.