About this role
Our client is a leading cyber security services provider. They are hiring a Senior Incident Response Investigator to lead investigations into targeted attacks for UK defence industry clients and to help shape the growth of their incident response practice.
Senior Incident Response Investigator
Location - Remote UK plus travel to client sites
Salary - £80,000 - £100,000 + bonus
Clearance - MOD DV required
You'll sit between deep technical investigation and boardroom communication: finding out how attackers got in, then explaining what it means for the business in language senior leaders can act on.
What you'll do
Lead incident response investigations for client organisations and deliver high-quality reports with clear findings and guidanceMaintain target utilisation on chargeable client projectsProduce technical content (research, blogs, thought leadership) to a publishable standardSupport Incident Readiness work, including tabletop exercises, client training and playbook creation, when not on live investigationsMentor junior team members and advise on current industry trendsSupport delivery and growth of the wider practice
About you
Essential
Chartered Cyber Security Professional (ChCSP) statusExperience investigating targeted attacks across large enterprise networksStrong knowledge of client-server infrastructure, security architecture, logging and alerting across multiple operating systemsNetwork forensics, including packet-level analysisFile-system analysis and extraction of common disk-based indicators of compromiseWindows, Linux and/or macOS internals, with knowledge of key system artefacts for eachMemory analysis Ability to explain the NIST incident response phases and work with the MITRE ATT&CK Enterprise frameworkUnderstanding of threat actor motivations and methods, and how systems are exploitedExcellent communication, from technical practitioners to executive boards
Desirable
Malware analysis Scripting in Python, Ruby, PowerShell or BashExperience with common cloud technologies
If you're DV cleared and ready to lead investigations that matter, apply today or message Rob Wall at FR Secure for a confidential conversation.
As an industry leading, nationwide Marketing, Digital, Analytics, IT and Design recruitment agency, we are continually receiving new assignments to work on, so keep a close eye on our website, Facebook, LinkedIn and Twitter pages for a full list of current permanent and interim opportunities as well as marketplace news and fun stuff. Forward Role is operating as an employment agency.