Senior Incident Responder (DFIR)

Location: Welwyn Garden City, Tesco UK; hybrid working; 36-hour working week.

Company

hirify.global supports Tesco’s digital and retail operations, including security across its diverse technology estate.

What you will do

• Perform host, network, and cloud-based forensic analysis to determine the full extent of security incidents and support containment, remediation, and recovery.
• Support cyber-security incident managers and decision makers with root cause analysis and recommendations for detection and prevention controls.
• Improve existing DFIR processes and develop new technical methods for changing business and technology requirements.
• Lead intelligence-based threat hunts to identify anomalous behaviour relevant to Tesco’s security threats.
• Test and raise potential detections as part of the internal detection engineering programme.
• Collaborate with security operations, threat intelligence, security engineering, and other teams while serving as a technical role model for engineers and analysts.

Requirements

• 4+ years of relevant experience.
• Experience responding to security incidents in large-scale corporate on-premises and public cloud environments, preferably Microsoft Azure.
• Experience performing forensic analysis of cyber-security incidents on Windows, MacOS, and Unix, with in-depth understanding of these operating systems.
• Ability to perform static and dynamic analysis of suspicious scripts and executables.
• Experience with a broad range of security technologies, including EDR, SOAR, and SIEM.
• Ability to think critically and lead technical investigations.
• Ability to handle high-pressure situations in a calm, productive, and professional manner.
• Proficiency in at least one programming or scripting language.

Culture & Benefits

• Hybrid working combining office and remote work, with offices used for connection, collaboration, and innovation.
• Permanent full-time employment with working hours of 36 per week.
• Annual bonus scheme of up to 20% of base salary.
• At least 25 days of holiday plus a personal day and bank holidays.
• Private medical insurance, a 24/7 virtual GP service, and an Employee Assistance Programme.
• Paid maternity, adoption, and paternity leave, plus mental wellbeing support and an inclusive workplace.

Hiring process

• Applications are accepted until 26 November 2026.
• Accessible recruitment support is available for candidates who require it.