Senior Incident Response Consultant (Cybersecurity)

Location: Remote within the United Kingdom; candidates must reside in and be authorized to work in the United Kingdom.

Company

hirify.global provides cybersecurity technologies and incident response services to organizations worldwide.

What you will do

• Lead customer kickoff and daily update calls, provide incident-response guidance, and communicate forensic findings through concise written updates.
• Direct forensic investigations, establish priorities, delegate tasks, and coordinate multiple Rapid Response incidents concurrently.
• Guide threat containment, neutralization, remediation, root cause analysis, and assessment of potential data exfiltration.
• Identify analyst-determined TTPs and add them to the threat intelligence platform.
• Write timely executive-summary reports with key-event timelines mapped to the MITRE ATT&CK framework.
• Support Rapid Response service development, mentor junior analysts, and provide handover notes across time zones or incident leads.

Requirements

• 5+ years of experience leading incident response investigations involving ransomware, including a successful record of ransomware neutralization and remediation.
• Experience leading business email compromise investigations and an excellent understanding of incident response processes and cyber risks.
• Strong oral and written communication skills, including the ability to explain complex technical information to executive-level stakeholders.
• Ability to manage time, prioritize and delegate across multiple incidents, and perform effectively under stressful circumstances.
• Strong understanding of the MITRE ATT&CK framework and experience with SIEM technology such as Splunk or ELK.
• Experience writing SQL queries and PowerShell, Python, or Bash scripts.
• Post-secondary education in cybersecurity or comparable education.
• Willingness to begin early or stay late when required for customer engagements, and to work occasional overtime, weekends, and holidays.
• Ability to continuously learn about the changing threat landscape and willingness to share knowledge and support junior analysts.

Nice to have

• Cybersecurity certifications such as CISSP, GCFA, or similar.

Culture & Benefits

• Remote work is available within the specified location, with collaboration across locations and time zones.
• Flexible ways of working are supported across hirify.global roles.
• Inclusive workplace committed to equal employment opportunities and support for reasonable accommodations.