Technical Incident Response Lead, Cyber Resilience

Deloitte (UK); Alabama; Hybrid; USD 94,000 - 147,000; Full time

Benefits offered by this job

Hybrid working policy

World-class training and mentoring

Career development opportunities

Job summary

Deloitte's Cyber Identity team in the United Kingdom is seeking a Technical Incident Responder to support CIR among clients across the UK and beyond. You will lead incident response engagements, coordinate with cross-functional teams, and apply forensic and memory analysis to uncover root causes.

You’ll join a diverse group, receive world-class training, and operate within a hybrid working model across UK offices and client sites.

Qualifications

• Proven experience in Incident Response supervising technical and non-technical team members.
• Experience in network forensics and detecting malicious activity using network traffic.
• Experience with security intelligence, data analytics, security incident response, and forensic investigations.
• Experience in forensic and memory analysis with Windows and Unix/Linux operating systems.
• Eligible for UK Security Clearance (SC level) or willingness to undergo vetting.

Responsibilities

• Lead CIR engagements for clients, coordinating with cross-functional teams.
• Travel to UK/EMEA client sites as part of on-call roster.
• Develop proactive Incident Response Advisory work, including war-gaming scenarios.
• Provide training and coaching to team members.
• Lead technical teams during cyber incidents and prioritize remediation activity.
• Engage with colleagues and clients to deliver security services.

Skills

Incident Response

Team Leadership

Consulting

Communication

Problem Solving

Education

CISSP / CISM / GCFE or equivalent

Security Clearance

Cybersecurity Certification

Tools

AWS

GCP

Azure

Forensic Tools

Memory Analysis

Job description

Deloitte's Cyber Identity team in the United Kingdom is seeking a Technical Incident Responder to support CIR among clients across the UK and beyond. You will lead incident response engagements, coordinate with cross-functional teams, and apply forensic and memory analysis to uncover root causes.

You’ll join a diverse group, receive world-class training, and operate within a hybrid working model across UK offices and client sites.