Cyber Security Analyst - Incident Response London - Hybrid | Up to £75,000 + benefitsA global specialist insurer is expanding its internal cyber defence capability and is seeking an experienced analyst to strengthen its Security Operations Centre.This role is focused on incident response first and foremost. It suits someone who has spent 3-5 years in a SOC environment and is now taking ownership of investigations, leading response activity, and managing incidents end-to-end. Threat intelligence exposure is welcome but not essential.The roleLead and coordinate responses to live security incidents including malware, phishing, credential compromise, and endpoint breachesPerform root cause analysis, containment, and recovery actions across infrastructure and endpointsWork closely with Wintel, network, and cloud teams during incident handlingImprove detection and response processes and contribute to playbook developmentDocument incident timelines and support post-incident review activitySupport broader SOC improvements, including tuning and use case refinementNo out-of-hours work - 24/7 alerting is handled by a managed serviceExperience required3-5 years in a SOC environment, ideally progressing into incident responseHands-on involvement in managing and responding to incidents in the last 12 monthsProven ability to take ownership of investigations and lead response actionsExperience with SIEM and EDR tooling (vendor agnostic)Solid understanding of Windows, Linux, and network ..... full job details .....
Perform a fresh search...
-
Create your ideal job search criteria by
completing our quick and simple form and
receive daily job alerts tailored to you!