Security Consultant - Incident Responder (SOC/DFIR)
We are seeking a Security Consultant – Incident Responder (SOC/DFIR) to help organisations prepare for, respond to and recover from complex cyber security incidents. This is a hands-on role for an experienced professional who can combine technical investigation, sound judgement and clear communication while working in high-pressure situations.
You will lead or support incident response engagements from initial triage through to containment, eradication and recovery. Responsibilities will include analysing alerts and suspicious activity, conducting host and network-based investigations, collecting and preserving digital evidence, and identifying the root cause, scope and impact of security incidents. You will use SIEM, EDR, network monitoring, forensic and threat intelligence tools to investigate compromises across on-premises, cloud and hybrid environments.
The role will also involve developing investigation plans, creating detailed technical and executive-level reports, presenting findings to stakeholders, and providing practical recommendations to reduce the risk of recurrence. You may contribute to threat hunting, detection engineering, incident response playbooks, tabletop exercises and post-incident reviews. Supporting the development of less experienced analysts and contributing to internal knowledge sharing will also be important.
Applicants should have proven experience in a SOC, DFIR, incident response or cyber security consultancy environment, with a strong understanding of incident handling methodologies and digital forensics. You will be confident investigating Windows and Linux systems, network traffic, identity environments and cloud platforms. Experience with malware analysis, scripting or automation using tools such as Python or PowerShell would be advantageous.
Strong knowledge of common attack techniques, security frameworks and threat intelligence practices is essential. Relevant professional certifications in incident response, digital forensics, security operations or cloud security are desirable. You must be able to obtain appropriate client or regulatory clearance where required.
In return, you will have the opportunity to work on varied and challenging investigations, expand your technical expertise and make a measurable contribution to improving cyber resilience. A collaborative approach, professional integrity and the ability to explain complex issues clearly are central to success in this position.
Security Consultant - Incident Responder (SOC/DFIR)
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Consultant
- Security Analyst
- Identity Access Management IAM
- IT Security Manager
- Security Architect
- Data Protection
- Cyber Security Consultant
- Governance and Compliance
- Risk Analyst
- SOC Analyst
- Application Security
LATEST JOBS
- Senior Security Consultant-Sec...
- Manager Application Security
- Data Privacy Co-Ordinator
- Information Security Manager
- Senior Technical Consultant-Se...
- Red Team Operator (Cyber Resil...
- Cyber Security Analyst
- CTI Lead
- Microsoft IAM Consultant / Ass...
- Security Architect
- IT Security Operations Lead
- Cyber Policy Lead