Incident Response Analyst (Cyber Security)

Role - Incident Response Analyst (Cyber Security) Rate - upto £450/Day Outside IR35 12 Months contract London Based (Hybrid - 2 Days in office) Responsibilities: Should have atleast 8+ years of experience as an Incident Response Analyst. Must have strong experience as Cyber Security. - Incident Detection, Triage andamp; Response: Monitor and analyse security alerts across SIEM, EDR/XDR, identity, email, cloud, and network security platforms. Validate incidents, assess severity and business impact, investigate threats such as phishing, malware, account compromise, and unauthorised access, and coordinate containment, eradication, and recovery activities in line with established SLAs. - Digital Forensics andamp; Threat Investigation: Conduct forensic investigations across Windows/Linux endpoints, Servers, network traffic, authentication logs, email, and cloud environments. Collect and preserve digital evidence, maintain chain of custody, identify Indicators of Compromise (IoCs), establish root cause, and map attacker tactics and techniques to the MITRE ATTandamp;CK framework. - Threat Hunting andamp; Detection Engineering: Perform proactive, hypothesis-driven threat hunting using threat intelligence, security telemetry, and attacker behavioural patterns. Develop, tune, and validate detection rules, SIEM queries, correlation logic, and custom indicators to improve threat detection, reduce false positives, and address security monitoring gaps. - Incident Coordination andamp; ..... full job details .....