Назад
Company hidden
8 дней назад

Incident Response Analyst (Cybersecurity)

Формат работы
hybrid
Тип работы
fulltime
Английский
b2
Страна
UK
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Incident Response Analyst (Cybersecurity): Managing the full lifecycle of security incidents and supporting SOC service delivery with an accent on host forensics, reverse-engineering, SIEM/EDR tooling, and threat detection. Focus on investigating alerts, coordinating Level 1 and Level 2 incident response processes, and building automated detection and response workflows.

Location: Newport, United Kingdom, with hybrid working available subject to the Hybrid Working Policy

Company

hirify.global Defence and Space develops aerospace and defence solutions, with sustainability and security as part of its business focus.

What you will do

  • Investigate SOC alerts and manage the full lifecycle of security incidents, including follow-up analysis.
  • Support crisis-mode incident response as part of the on-call crisis team, including technical host forensics and reverse-engineering.
  • Industrialise SIEM and EDR tooling, perform network and host analysis, and develop detection use cases.
  • Design and coordinate incident response processes for SOC Level 1 and Level 2 with international alignment.
  • Improve threat detection, response capabilities, security monitoring, and automated incident response workflows.

Requirements

  • Must have or be able to obtain SC Security Clearance.
  • Experience managing security incidents, monitoring SOC alerts, and using advanced security tooling in a highly technical SOC or CSIRT environment.
  • Experience performing technical host forensic analysis and reverse-engineering for complex incident response activities.
  • Experience designing, industrialising, or improving security processes, threat detection use cases, and automated response capabilities.
  • Practical application of cybersecurity principles, supported by a relevant degree or equivalent experience.
  • Industry certifications such as GIAC are relevant.

Culture & Benefits

  • Permanent, full-time employment with a 37-hour working week and flexible working around core hours.
  • Hybrid working, up to two additional TOIL days per month, and the option to buy or sell holiday; no core hours on Friday afternoons.
  • Competitive salary, annual profit share, contributory pension, share options, car leasing scheme, free onsite parking, and season ticket loan.
  • Personalised development plans, hirify.global Leadership University, access to more than 10,000 e-learning courses, and internal mobility including international opportunities.
  • Wellbeing, healthcare, family and caregiving benefits, plus an inclusive working environment and employee representative groups.

Hiring process

  • Applicants can request adjustments for the selection process through the Talent Acquisition Partner if invited to interview.
  • Applicants with a disability or long-term condition who meet the minimum criteria can opt in to the Disability Confident interview offer during application submission.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →