Cyber Security Incident Response Analyst

The Role

The analyst conducts forensic investigations into cyber security incidents reported to the CSIRT, triaging and examining digital media across heterogeneous environments. Daily work involves identifying threats, determining containment and remediation actions, analysing network traffic, reviewing log data, and collaborating with business stakeholders to share lessons learned.

Skills & Experience

Candidates require strong technical skills in digital forensics, including examination of hard drives, mobile devices, and network traffic, alongside log analysis in raw form. Experience with malware analysis and advanced persistent threat investigations is expected. A background in incident response within complex, enterprise-scale environments is essential.

Who It Suits

This role suits a technically rigorous security professional who thrives on complex, confidential investigations and thinks critically under pressure. Someone comfortable working across diverse technologies and collaborating with teams globally will fit well, as will those eager to contribute to an evolving threat intelligence function within a large organisation.