Senior Incident Responder (DFIR)
Tesco
Welwyn Garden City, England
The Role
The role sits within an internal DFIR function, leading technical investigation and response to security incidents across on-premises and Microsoft Azure cloud environments. Day-to-day responsibilities include host, network and cloud forensic analysis, root cause analysis, threat hunting, and contributing to detection engineering and process automation.
Skills & Experience
Candidates need 4+ years of DFIR experience, solid knowledge of Windows, macOS and Unix forensics, and familiarity with EDR, SIEM and SOAR platforms. Proficiency in at least one scripting or programming language is required, along with the ability to perform static and dynamic malware analysis.
Who It Suits
This position suits an experienced incident responder who thrives in high-pressure environments and enjoys both hands-on investigation and broader improvement projects. It is well suited to someone looking to act as a technical role model within a large enterprise security team and influence detection and response capabilities at scale.
Typical advertised salary for Incident Response roles in United Kingdom: £53,000–£90,000 (median £70,000 — from 30 recent listings analysed by Forensic Focus).
Learn More/Apply
