🚀 Incident Response Analyst | £45,000 – £55,000 | Fully Remote

This is a client-facing Incident Response position within a specialist cyber security consultancy, focused on leading and supporting the full lifecycle of cyber incident investigations across enterprise environments. You will work on high-impact, real-world breaches across host, network, and cloud environments, taking ownership from initial triage through to containment, eradication, and recovery while advising stakeholders throughout.

✨ Why this role stands out:

• Exposure to complex, real-world incidents rather than repetitive alert handling
• The opportunity to directly influence client security posture and response maturity
• A clear path to senior incident responder through hands-on experience, tooling exposure, and continuous improvement initiatives

🎯 Responsibilities:

• Own and lead the end-to-end lifecycle of cyber incidents, including triage, containment, eradication, recovery, and root cause analysis
• Conduct forensic investigations across endpoints, networks, and cloud platforms
• Perform live compromise assessments for organisations with suspected breaches
• Act as a key point of contact during incidents, managing communication and escalation with client stakeholders
• Develop, maintain, and improve incident response playbooks and standard operating procedures
• Support and guide junior analysts on complex investigations
• Deliver post-incident reviews, including lessons learned and remediation strategies
• Support incident readiness through tabletop exercises and simulation activities
• Recommend improvements to detection and response capabilities across SIEM, EDR, and SOAR platforms
• Produce clear, detailed incident and forensic reports for both technical and non-technical audiences