Senior Incident Response Investigator

• Lead incident response investigations for client organisations and deliver high-quality reports with clear findings and guidance
• Maintain target utilisation on chargeable client projects
• Produce technical content (research, blogs, thought leadership) to a publishable standard
• Support Incident Readiness work, including tabletop exercises, client training and playbook creation, when not on live investigations
• Mentor junior team members and advise on current industry trends
• Support delivery and growth of the wider practice

Essential

• Chartered Cyber Security Professional (ChCSP) status
• Experience investigating targeted attacks across large enterprise networks
• Strong knowledge of client-server infrastructure, security architecture, logging and alerting across multiple operating systems
• Network forensics, including packet-level analysis
• File-system analysis and extraction of common disk-based indicators of compromise
• Windows, Linux and/or macOS internals, with knowledge of key system artefacts for each
• Memory analysis
• Ability to explain the NIST incident response phases and work with the MITRE ATT&CK Enterprise framework
• Understanding of threat actor motivations and methods, and how systems are exploited
• Excellent communication, from technical practitioners to executive boards

Desirable

• Malware analysis
• Scripting in Python, Ruby, PowerShell or Bash
• Experience with common cloud technologies

Our client is a leading cyber security services provider. They are hiring a Senior Incident Response Investigator to lead investigations into targeted attacks for UK defence industry clients and to help shape the growth of their incident response practice.