About this role
Salary: £35,000 - 50,000 per year
Requirements: Solid understanding of networking concepts, operating systems and common attack techniquesPractical experience using security tooling such as SIEM, EDR, IDS/IPS and firewall technologiesHands-on knowledge of forensic methods across Windows, Linux and cloud platformsGood understanding of common attack types, including ransomware and phishing, and how they are detected and responded toA methodical, analytical approach to problem solvingAbility to remain calm and effective when working under pressureStrong written and verbal communication skills3-5 years experience working in cyber security, with exposure to incident response or SOC environmentsMust be eligible for UK security clearance due to the nature of client engagementsOne or more recognised incident response or forensic certifications (GCIH, GCFA, GCIA, GNFA, GCFR)Defensive and detection-focused certifications such as CySA+ or BTL2Cloud security certifications (AWS or Azure security-focused) are advantageousDemonstrated commitment to continuous professional development within incident response Responsibilities: Support organisations through cyber incidents by coordinating response activities in line with established incident response frameworks and undertaking technical investigations.Analyse logs, endpoint telemetry and network data to identify malicious activity and understand attacker behaviour throughout the incident lifecycle.Assist with containment, eradication and recovery activities, advising clients on technical actions while working alongside internal teams and third-party providers.Conduct forensic investigations and post-incident reviews to determine root cause, scope of compromise and business impact.Engage with client stakeholders, managed service providers and communications teams to ensure a coordinated and effective response.Produce clear and accurate incident documentation, including timelines, technical findings and executive-level reports.Contribute to the continuous improvement of incident response playbooks, tooling and investigative techniques.Incorporate threat intelligence to enhance investigations and strengthen future detection and response strategies.Support proactive consultancy activities such as incident response exercises, client briefings and industry events. Technologies: AWSAzureCloudFirewallSupportLinuxNetworkSecurityWindowsActive DirectorySplunk More:
We are a highly respected global cyber security organisation delivering incident response and cyber advisory services at the highest level of technical and professional excellence. We support clients across multiple sectors during complex and business-critical cyber incidents, guiding them from initial detection through containment, recovery and post-incident assurance. Our team is expert-led and collaborative, with structured training, mentoring and certification pathways to help people learn, grow and develop. This is an office-based permanent role in Belfast with a salary of £35,000 to £50,000 depending on experience, and candidates must be prepared to relocate to Belfast and be eligible for UK security clearance.
last updated 29 week of 2026