Senior Incident Response Investigator
Job Location:
Yearly Salary:
Posted:
Application Deadline:
Vacancies:
Job Summary
Our client is a leading cyber security services provider. They are hiring a Senior Incident Response Investigator to lead investigations into targeted attacks for UK defence industry clients and to help shape the growth of their incident response practice.
Senior Incident Response Investigator
Location - Remote UK plus travel to client sites
Salarybonus
Clearance MOD DV required
Youll sit between deep technical investigation and boardroom communication: finding out how attackers got in then explaining what it means for the business in language senior leaders can act on.
What youll do
- Lead incident response investigations for client organisations and deliver high-quality reports with clear findings and guidance
- Maintain target utilisation on chargeable client projects
- Produce technical content (research blogs thought leadership) to a publishable standard
- Support Incident Readiness work including tabletop exercises client training and playbook creation when not on live investigations
- Mentor junior team members and advise on current industry trends
- Support delivery and growth of the wider practice
About you
Essential
- Chartered Cyber Security Professional (ChCSP) status
- Experience investigating targeted attacks across large enterprise networks
- Strong knowledge of client-server infrastructure security architecture logging and alerting across multiple operating systems
- Network forensics including packet-level analysis
- File-system analysis and extraction of common disk-based indicators of compromise
- Windows Linux and/or macOS internals with knowledge of key system artefacts for each
- Memory analysis
- Ability to explain the NIST incident response phases and work with the MITRE ATT&CK Enterprise framework
- Understanding of threat actor motivations and methods and how systems are exploited
- Excellent communication from technical practitioners to executive boards
Desirable
- Malware analysis
- Scripting in Python Ruby PowerShell or Bash
- Experience with common cloud technologies
If youre DV cleared and ready to lead investigations that matter apply today or message Rob Wall at FR Secure for a confidential conversation.
Required Experience:
Senior IC
