FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in incident response, digital forensics, and security operations, with a strong focus on evidence preservation, forensic analysis, and effective communication of technical findings. Proficient in developing incident response plans and playbooks while collaborating with cross-functional teams in hybrid IT environments.
Highest-signal resume keywords
Incident ResponseDigital ForensicsThreat HuntingSecurity Operations Center (SOC) ExperienceCloud Platform Knowledge
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Incident ResponseDigital ForensicsMalware AnalysisEvidence PreservationForensic AcquisitionEndpoint SecurityNetwork InfrastructureCloud TechnologiesThreat Hunting MethodologiesAttack Techniques
Soft Skills
Clear CommunicationCollaborationProblem Solving
Tools & Technologies
Magnet AXIOMAWSAzureGCPNIST CSFISO 27001NIS Regulations
Certifications & Qualifications
Security Blue Team Level 1Security Blue Team Level 2GCIHGCFA
Industry Keywords
Cyber SecurityIncident Response ProceduresHybrid IT EnvironmentsSOC ProcessesCNI Environments
Tech Stack
Tools & technologiesAndroidAWSAzureCloudCyber SecurityGoogle Cloud PlatformiOS
About the role
Key responsibilities & impact- Support delivery and ongoing improvement of incident response services
- Maintain technical documentation, playbooks, and response procedures for endpoint, network, and cloud environments
- Follow triage, investigation, and escalation processes for alerts and security incidents across hybrid IT environments
- Investigate incidents across endpoint, network, and cloud platforms
- Identify containment, remediation, and recovery actions with senior responders
- Conduct investigation, containment, and eradication activities, escalating complex or high-priority matters
- Support forensic acquisition, preservation, examination, and analysis of digital evidence
- Perform logical acquisition and forensic analysis of Android, iOS, iPadOS, and Windows devices
- Collaborate with incident responders and SOC analysts across client environments
- Help customers improve detection and response capabilities
- Develop and maintain incident response plans and playbooks
- Support and conduct threat hunts
- Perform initial malware analysis and support detailed analysis when required
- Contribute to knowledge sharing, technical blogs, webinars, and industry content
- Support incident coordination, provide updates, and maintain accurate investigation records
Requirements
What you’ll need- Practical experience of incident response, security operations, digital forensics, or a closely related cyber security role
- Practical knowledge of digital forensic principles, including evidence preservation, forensic acquisition, chain of custody, artefact analysis, and clear documentation of findings
- Experience using digital forensic tools to examine endpoint or mobile device data is desirable
- Familiarity with logical mobile extraction using tools such as Magnet AXIOM would be beneficial
- Working knowledge of enterprise endpoint technologies, network infrastructure, and at least one major cloud platform such as AWS, Azure, or GCP
- Relevant training or certifications, such as Security Blue Team Level 1 or 2, GCIH, GCFA, or equivalent incident response and digital forensics qualifications, are desirable
- Experience working in a SOC, CSIRT, MSSP, consultancy, or internal security team is desirable
- Understanding of incident response within regulated or CNI environments would be beneficial
- Awareness of NIST CSF, ISO 27001, and the NIS Regulations
- Ability to communicate technical findings clearly to technical and non-technical audiences through written reports and verbal updates
- Familiarity with SOC processes, security monitoring, and incident response procedures across hybrid IT environments
- Some experience of threat hunting methodologies and tools across enterprise environments
- Good understanding of common attack techniques, adversary behaviours, and TTPs, including familiarity with MITRE ATT&CK
- Must either hold SC or be eligible and willing to go through security clearance
- Willingness to travel to UK and international client locations approximately 20–25% of working time
- Willingness to participate in on-call responsibilities as part of the incident response rotation
Benefits
Comp & perks- 25 Days Holiday - Plus buy and sell options and increasing for long service
- Flexible Working (around core office hours)
- Employee Shareholder Scheme and Performance Reward Model
- Private Healthcare (Bupa)
- Company Pension
- Personal Day & Birthday Off - After 1 year of service
- Family Leave – After 1 year of service
- Enhanced Maternity based on length of service
- Access to a Training Budget
- Life Assurance
- Electric Vehicle Scheme & Cycle to Work Scheme
- Travel expenses for required UK and international client-site travel