> Markdown version of [/jobs/ext/3184916-incident-response-analyst](https://www.wearedevelopers.com/jobs/ext/3184916-incident-response-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Incident Response Analyst - **Company:** HMRC - **Location:** Wellington, UK - **Salary:** £37,682.0 - **Contract:** Permanent contract - **Skills:** Data Analysis, User Authentication, Big Data, Cyber Security, Database Queries, Fraud Prevention and Detection, Information Technology Operations, IP Addressing, Python (Programming Language), Open Source Intelligence, Kusto Query Language, Security Information and Event Management, SQL Databases, Web Services, Scripting, Cybercrime - **Published:** September 1, 2026 - **Apply:** https://find.jobs/jobs-near-me/apply/ats-redirect/?id=2948098563-2 ## About the Role * To have, or be willing to achieve CISMP * Knowledge of fraud detection techniques, including behavioural analysis and anomaly detection and investigation and OSINT (Open Source Intelligence) methods. * Data analysis skills and experience with large data sets, with proficiency scripting complex queries in analysis environments. * Solid technical understanding of web and API services (e.g. cookies, IP addresses, authentication processes) and threats to those services from cybercrime actors and tools. * Experience using Security Information and Event Management (SIEM) platforms, preferably in a security operations setting. * A sound understanding of Identity, Verification and Authentication principles Desirable Criteria * A degree in Data Analysis, Data Science, Information Security, Cyber Security, or other Cyber qualifications eg SANS, or at least previous experience in a relevant cyber role. * Active use of at least one of the following: Python, SQL, KQL, SPL, * A 1000-word personal statement, describing how your skills and experience would make you suitable for the role, and how you meet the Essential Criteria and Person Specification. * A 250-word example for the Technical Skills: Incident Response & Monitoring click apply for full job details ## Description As an Incident Response Analyst, you will act as a key point of contact within the FPC Incident Response Team. You will assess, triage and analyse identity led fraud incidents, supporting effective response activities and helping to minimise the impact on business operations. Working collaboratively with colleagues and stakeholders, you will review existing weak processes, identify opportunities for improvement, and contribute to the development of effective incident response procedures and mitigations. Your work will support the timely restoration of services and the continuous improvement of fraud incident management across the FPC. Person specification * Act as an FPC subject matter contributor for fraud incident management, working with colleagues and stakeholders to ensure effective incident response arrangements are in place and standards are adhered to. * Analyse and resolve detected fraud incidents, contributing to lessons learned activities and identifying opportunities for continuous improvement. * Support the day-to-day activities of the incident response team, reviewing incidents and contributing to response efforts, helping to prioritise and coordinate activities across the end-to-end fraud incident response cycle. * Contribute to the development of incident management capability across the FPC, working with SO Incident Response Analysts to promote best practice and consistent application of standards. * Support FPC SOs and G7s in producing reports and presentations for a variety of stakeholders, communicating technical information in an accessible and meaningful way. * Experience in developing, delivering and improving IT operations within a complex environment, particularly in incident management. * Support the capture, dissemination and maintenance of incident information within the incident register, ensuring records, processes and documentation remain accurate and up to date. * Provide regular updates on incidents and response activities to the G7 Incident Response Lead. * Contribute to the development and improvement of incident response plans, processes and capabilities, supporting effective information sharing across teams. * Work collaboratively with HMRC stakeholders, including incident response teams, to escalate findings and support the mitigation of fraud risks. * Review incidents, provide guidance to colleagues where appropriate, and support the development of FPC processes, standards and templates. * Maintain awareness of the current threat landscape, emerging fraud risks and developing industry practices. * Knowledge of fraud detection techniques, including behavioural analysis and anomaly detection and investigation and OSINT (Open Source Intelligence) methods. * Support the effectiveness and efficiency of FPC Incident Response Services through the identification of opportunities to improve processes, controls and ways of working. * Share knowledge and experience with colleagues across the FPC, helping to build confidence, capability and understanding of fraud incident management., We'll assess you against these technical skills during the selection process: * Incident Response * Monitoring ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Alibaba Big Data and Machine Learning Technology](https://www.wearedevelopers.com/videos/37-alibaba-big-data-and-machine-learning-technology) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) ## Related Articles - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette) - [Software Engineer Salary in The UK](https://www.wearedevelopers.com/magazine/231-software-engineer-salary-in-the-uk)