Incident Response Specialist

Marcus Donald are currently looking for an Incident Response Specialist to join a global Managed Service Provider – an amazing business! We are looking to speak with someone with strong Enterprise Incident Response and/or Security Operations Centre (SOC) experience, who has a keen & general interest in Cyber Security!

Amongst many other areas, you will be responsible for cyber security investigations and incident handling and will perform security threat analysis of malware, phishing, email, and web application attacks for their clients.

*Hybrid Working*
Location – London
Salary – £65,000 - £80,000

Incident Response Specialist – Responsibilities:

• Lead and coordinate the investigation effort for cyber security incidents
• Conduct live response analysis, network analysis, log analysis, and malware triage in support of incident response investigation
• Work with various security/internal teams to contain, remediate and escalate (where required) security incidents
• Support L1 triage activities and L3 threat hunting missions as needed
• Provide assistance and guidance to L1 Event Monitoring and Triage team by monitoring of SIEM, CSOC mailboxes, and the case management system for attacker activity.
• Provide assistance and support to L3 Advanced Threat Detection team through execution of developed threat hunting missions, threat research, and profiling of potential threats

Incident Response Specialist – Technical:

• Knowledge of Firewall, IDS/IPS, Antivirus, SIEM, Web Proxy & Web Application Firewall
• Functional knowledge of Cyber Security and Incident Response foundations, theory, terminology (Kill Chain, TTPs, APT, IOCs, etc.)
• Experience with Splunk, ELK/Elastic or other transferrable SIEM tools
• Malware, Network, Web, and Forensic analysis skills
• Understanding of the Cyber Kill Chain, APT TTP and Threat Intelligence
• Hypothesis-based Threat Hunting in an Enterprise environment
• Confidence to make recommendations to knowledge-based platforms, playbooks and assist with identifying operational areas of improvement

Incident Response Specialist – Desired:

• Completion of relevant Security or Technical certifications for example any GIAC certifications
• Bachelor's degree or College Diploma in Computer Science, Information Security or other related fields
• Programming/scripting experience is an asset

This is an amazing opportunity for a Cyber Security specialist who can identify and triage security incidents such as Malware, Phishing and Web Attacks to become part of a fantastic organisation with huge plans in place for the next 5 years!

Feel free to apply online or drop me an email - jryan@marcusdonald.com