Incident Response Analyst - Digital Forensics

I am recruiting for a number of Incident Response Analysts to work on a hybrid basis - 3 days in London, 2 days remote.The role falls inside IR35 so you will need to work through an umbrella company for the duration of the contract.Strong DFIR (Digital Forensics andamp; Incident Response) experience is essential.As the Incident Response Analyst you will be a key member of the Cyber Security Incident Response function, responsible for detecting, triaging, investigating, containing and coordinating the resolution of cyber security incidents. The role combines security monitoring, incident handling, threat hunting and digital forensics to reduce business impact, preserve evidence and improve organisational resilience.You must have practical experience in cyber incident response, security monitoring or a Security Operations Centre environment.You must have hands-on experience investigating security alerts and incidents using SIEM and EDR/XDR technologies.You will have experience analysing Windows and Linux host artefacts, authentication activity, security logs, network traffic and packet captures.A working knowledge of incident response life cycle activities including preparation, detection, analysis, containment, eradication, recovery and lessons learned is essential.You must also have experience producing incident records, investigation reports, management updates and post-incident findings.An understanding of attacker behaviours and frameworks including MITRE ATTandamp;CK, ..... full job details .....