> Markdown version of [/jobs/ext/4532955-incident-response-analyst](https://www.wearedevelopers.com/jobs/ext/4532955-incident-response-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Incident Response Analyst

- **Company:** Anson McCade
- **Location:** London, UK
- **Contract:** Temporary contract
- **Skills:** Cloud Computing Security, Cyber Security, Linux, Digital Forensics, Monitoring of Systems, Identity and Access Management, Python (Programming Language), Network Security, Microsoft Security Essentials, Windows PowerShell, Anti-Phishing, Kusto Query Language, Security Information and Event Management, Scripting, Mitre Att&ck, Cybercrime
- **Published:** November 3, 2026
- **Apply:** https://www.totaljobs.com/job/incident-response-analyst/anson-mccade-job108273523

## About the Role

You'll ideally have:

 * Experience working within a Security Operations Centre (SOC), Cyber Defence or Incident Response function.
 * Strong hands-on experience with SIEM, EDR/XDR and enterprise security monitoring technologies.
 * Knowledge of Windows, Linux, networking, cloud security and identity management.
 * Experience investigating complex cyber incidents and communicating findings to both technical and non-technical stakeholders.
 * A solid understanding of incident response methodologies, digital forensics and frameworks such as MITRE ATT&CK and NIST.
 * Exposure to Microsoft security technologies, threat hunting, scripting (PowerShell, Python or KQL) or forensic tooling would be advantageous.

## Description

We're looking for an experienced Cyber Security Incident Response Analyst to join a high-performing cyber security team, helping defend a large enterprise against evolving cyber threats. This is an excellent opportunity to work on complex security incidents, investigate emerging threats and strengthen an organisation's overall cyber resilience.

Working within a collaborative security function, you'll play a key role in identifying, analysing and responding to security incidents, partnering with infrastructure, cloud, identity and business teams to minimise risk and improve security capabilities.

The Role

 * Investigate and respond to cyber security incidents across enterprise environments.
 * Monitor and triage alerts from SIEM, EDR/XDR, cloud, identity, endpoint and network security tools.
 * Analyse malicious activity including phishing, ransomware, account compromise, insider threats and unauthorised access.
 * Coordinate incident containment, remediation and recovery with technical teams and key stakeholders.
 * Carry out digital forensic investigations, preserving and analysing evidence from endpoints, servers, cloud platforms and network activity.
 * Perform proactive threat hunting and identify attacker techniques, tactics and indicators of compromise.
 * Enhance detection capabilities through alert tuning, threat intelligence and continuous improvement of monitoring rules and playbooks.
 * Produce clear incident reports, technical findings and post-incident recommendations to improve future response.