Senior Incident Response Investigator

Our client is a leading cyber security services provider. They are hiring a Senior Incident Response Investigator to lead investigations into targeted attacks for UK defence industry clients and to help shape the growth of their incident response practice.

Apply below after reading through all the details and supporting information regarding this job opportunity.
Senior Incident Response Investigator
Location - Remote UK plus travel to client sites
Salary - £80,000 - £100,000 + bonus
Clearance - MOD DV required
You'll sit between deep technical investigation and boardroom communication: finding out how attackers got in, then explaining what it means for the business in language senior leaders can act on.
What you'll do
Lead incident response investigations for client organisations and deliver high-quality reports with clear findings and guidance
Maintain target utilisation on chargeable client projects
Produce technical content (research, blogs, thought leadership) to a publishable standard
Support Incident Readiness work, including tabletop exercises, client training and playbook creation, when not on live investigations
Mentor junior team members and advise on current industry trends
Support delivery and growth of the wider practice
About you
Essential
Chartered Cyber Security Professional (ChCSP) status
Experience investigating targeted attacks across large enterprise networks
Strong knowledge of client-server infrastructure, security architecture, logging and alerting across multiple operating systems
Network forensics, including packet-level analysis
File-system analysis and extraction of common disk-based indicators of compromise
Windows, Linux and/or macOS internals, with knowledge of key system artefacts for each
Memory analysis
Ability to explain the NIST incident response phases and work with the MITRE ATT&CK Enterprise framework
Understanding of threat actor motivations and methods, and how systems are exploited
Excellent communication, from technical practitioners to executive boards
Desirable
Malware analysis
Scripting in Python, Ruby, PowerShell or Bash
Experience with common cloud technologies
If you're DV cleared and ready to lead investigations that matter, apply today or message Rob Wall at FR Secure for a confidential conversation.
As an industry leading, nationwide Marketing, Digital, Analytics, IT and Design recruitment agency, we are continually receiving new assignments to work on, so keep a close eye on our website, Facebook, LinkedIn and Twitter pages for a full list of current permanent and interim opportunities as well as marketplace news and fun stuff. xrexnqw
Forward Role is operating as an employment agency.