Cyber Incident Response Senior Associate Job at Douglas Scott (Greater London)

Senior Cybersecurity Incident Response Analyst

You will work as a Senior Cybersecurity Incident Response Analyst as part of Hew...

Location

Ireland , Galway

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor's degree (or equivalent work experience) required, preferably in computer science, engineering or related area of study
typically 4+ years of relevant experience
SOC team/Incident response analyst experience is required
proven track record of leading complex cybersecurity initiatives and managing ambiguous incidents
advanced understanding of adversary tactics, techniques, and procedures (TTPs)
advanced Cyber and IT security knowledge
advanced understanding of Cyber and IT security risks, best practices, threats and prevention measures as well as containment and remediation actions
advanced understanding of SQL and relevant scripting languages
advanced data security system analysis skills
advanced risk assessment and management skills

Job Responsibility

Lead and coordinate responses to the most complex cybersecurity incidents, guiding cross-functional teams through containment, eradication, and recovery
analyze associated logs and respond to high severity incidents
suggest automation opportunities to enhance IR
mentor and provide technical guidance to less experienced cybersecurity professionals
stay at the forefront of cybersecurity trends, threats, and technologies
foster a culture of continuous improvement and innovation
encourage the adoption of new technologies and methodologies
provide insight and guidance through after action reviews working with stakeholders.

What we offer

Comprehensive suite of benefits supporting physical, financial and emotional wellbeing
programs for professional and personal career development
unconditional inclusion and flexibility to manage work and personal needs.

Fulltime

Senior Security Engineer

Truveta is the world’s first health provider led data platform with a vision of ...

Location

United States , Seattle

Salary:

135000.00 - 180000.00 USD / Year

Truveta

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Cyber Security, Computer Science, Information Security, Information Systems, or a related field, or equivalent practical experience
5+ years of experience in Security Operations (SOC), Incident Response, or Detection & Response role, with demonstrated ownership of complex security incidents
Hands-on experience with Microsoft Sentinel (SIEM) and Microsoft Defender XDR (Defender for Endpoint, Identity, Office 365, Cloud Apps)
Proficiency in KQL (Kusto Query Language) for investigations, threat hunting, and detection engineering
Experience designing, tuning, and maintaining SIEM detections and SOAR automation, including alert triage and response workflows
Solid understanding of Azure cloud architecture, core services, and native security controls
Familiarity with Azure Entra ID, identity security concepts, RBAC, and IAM-related threats
Experience with handing high-severity security incidents, including cross-team coordination and stakeholder communication
Familiarity with MITRE ATT&CK, threat actor techniques, and modern attack methodologies across cloud, identity, and endpoint environments
Experience supporting on-call rotations and working in a 24/7 or follow-the-sun SOC environment

Job Responsibility

Incident Response: Handle investigation and response to security incidents across endpoints, identities, email, cloud workloads, and SaaS applications
Act as a senior escalation point for SOC analysts during complex or ambiguous security events
Participate in on-call rotations and provide senior-level escalation support when needed
Lead or contribute to post-incident reviews (RCA, postmortems) and track remediation actions to completion
Ensure incidents are accurately documented for audit, compliance, and operational learning
Maintain and improve incident response runbooks, playbooks, and escalation procedures
Support incident readiness activities, including tabletop exercises and response drills
Detection Engineering & Automation: Develop, tune, and maintain Microsoft Sentinel analytics rules to improve detection quality and reduce false positives
Design and optimize KQL queries for investigations, threat hunting, and detection engineering
Integrate and maintain log sources and data connectors in Microsoft Sentinel, ensuring data quality and proper normalization

What we offer

Interesting and meaningful work for every career stage
Great benefits package
Comprehensive benefits with strong medical, dental and vision insurance plans
401K plan
Professional development & training opportunities for continuous learning
Work/life autonomy via flexible work hours and flexible paid time off
Generous parental leave
Regular team activities (virtual and in-person)

Fulltime

Global Chief Information Security Officer

The Global Chief Information Security Officer (GCISO) will lead Allied Universal...

Location

United States , Irvine

Salary:

275000.00 - 350000.00 USD / Year

Allied Universal®

Expiration Date

Until further notice

Requirements

Bachelor’s degree in computer science, Information Technology, cybersecurity, or a related field
Minimum of fifteen (15) years of progressive experience in cybersecurity
Minimum of seven (7) years in a senior management role in an information security function
Experience in managing, responding to, and mitigating cyber incidents
Experience or familiarity with government contracting and public and private company cybersecurity reporting requirements
Hands-on cyber incident response coordination and oversight experience
Expertise in risk-based frameworks (NIST CSF, ISO 27001, SOC 2, CMMC, NIST 800-171) and familiarity with applicable regulatory regimes (SEC, GDPR, state breach laws, etc.)
Proven ability to engage with CEO, Board of Directors, and Executive Team on cybersecurity strategy and governance
Ability to operate effectively as both strategist and practitioner, a player-coach who drives global cybersecurity direction while engaging hands-on to guide, mentor, and resolve complex technical and operational challenges
Strong leadership skills as well as the ability to work and communicate (verbal, written, and interpersonal) effectively with other leadership and their teams

Job Responsibility

Develop and execute a global, risk-based cybersecurity strategy and program aligned with Allied Universal’s business objectives
Establish, communicate, and oversee governance of enterprise-wide cybersecurity policies, standards, and controls that are appropriate for the company’s diverse global operations
Lead, mentor and manage Regional Cybersecurity Leaders to promote consistency, accountability, and operational effectiveness across all regions
Define and monitor key risk indicators, cybersecurity metrics, and maturity objectives to inform executive decision-making and drive ongoing program improvement
Oversee global monitoring, detection, and response capabilities that provide 24×7 visibility into potential cyber risks and support timely containment activities
Identify and assess emerging threats, technologies, and vulnerabilities to support informed planning and risk mitigation efforts
Provide recommendations regarding cybersecurity investments and resource allocation, helping prioritize efforts based on risk, business impact, and value
Foster a culture of cybersecurity awareness, ownership, and accountability across all functions and geographies
Coordinate, develop, and implement programs designed to train Allied Universal’s workforce regarding the company’s cybersecurity requirements, including applicable cybersecurity laws and requirements and responding to evolving cybersecurity threats
Evaluate emerging threats and vulnerabilities, driving continuous improvement of the company’s cybersecurity posture as appropriate

What we offer

Medical, dental, vision, supplemental income plan with a company match, basic life, AD&D, and disability insurance
Eight paid holidays annually, five sick days, and four personal days
Executive Flex Vacation Plan
annual bonus, equity package

Fulltime

Senior Security Engineer - Security Incident Response

The Cloud & AI organization accelerates Microsoft’s mission and bold ambitions t...

Location

United States , Redmond

Salary:

119800.00 - 234700.00 USD / Year

Microsoft Corporation

Expiration Date

Until further notice

Requirements

Doctorate in Statistics, Mathematics, Computer Science, or related field
Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
equivalent experience
Active U.S. Government Secret Security Clearance
Ability to meet Microsoft, customer and/or government security screening requirements
U.S. citizenship verification

Job Responsibility

Coordinate with investigators to prioritize investigation objectives, understands attack paths, and systematically executes mitigation and protection actions to evict threat actors for any security incident impacting any of Microsoft’s products or services
Conduct hands-on mitigation where possible
engages service owners when there is a risk of a production outage
Maintain hands-on knowledge of mitigation and protection steps for various asset types (e.g. M365, Azure, AI) and publishes self-service guidance for impacted engineering teams
Brief executive stakeholders on eviction plans and associated status
Maintain and evolves an inventory of threat actor Tactics, Techniques, and Procedures (TTPs) and the corresponding eviction capabilities
Define and prioritize requirements and use cases for Microsoft’s threat actor eviction platform
operationalize as they are delivered
Drive strategic change to accelerate eviction scenarios (e.g. lean business cases to garner support for broader Microsoft product initiatives or features)
Participate in an on-call rotation

Fulltime

Senior Security Engineer - Security Incident Response

The Cloud & AI organization accelerates Microsoft’s mission and bold ambitions t...

Location

United States , Multiple Locations

Salary:

119800.00 - 234700.00 USD / Year

Microsoft Corporation

Expiration Date

Until further notice

Requirements

Doctorate in Statistics, Mathematics, Computer Science, or related field
Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
equivalent experience
Active U.S. Government Secret Security Clearance
Ability to meet Microsoft, customer and/or government security screening requirements
Pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter

Job Responsibility

Coordinates with investigators to prioritize investigation objectives, understands attack paths, and systematically executes mitigation and protection actions to evict threat actors for any security incident impacting any of Microsoft’s products or services
Conducts hands-on mitigation where possible
engages service owners when there is a risk of a production outage
Maintains hands-on knowledge of mitigation and protection steps for various asset types (e.g. M365, Azure, AI) and publishes self-service guidance for impacted engineering teams
Briefs executive stakeholders on eviction plans and associated status
Maintains and evolves an inventory of threat actor Tactics, Techniques, and Procedures (TTPs) and the corresponding eviction capabilities
Define and prioritize requirements and use cases for Microsoft’s threat actor eviction platform
operationalize as they are delivered
Drives strategic change to accelerate eviction scenarios (e.g. lean business cases to garner support for broader Microsoft product initiatives or features)
Participates in an on-call rotation

Fulltime

Senior Cybersecurity Incident Response Analyst

Senior Cybersecurity Incident Response Analyst. This role has been designed as ‘...

Location

Ireland , Galway

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelors degree (or equivalent work experience) required, preferably in computer science, engineering or related area of study
Typically 4+ years of relevant experience
SOC team/Incident response analyst experience is required
Proven track record of leading complex cybersecurity initiatives and managing ambiguous incidents
Advanced understanding of adversary tactics, techniques, and procedures (TTPs)
Advanced Cyber and IT security knowledge
Advanced understanding of Cyber and IT security risks, best practices, threats and prevention measures as well as containment and remediation actions
Advanced understanding of SQL and relevant scripting languages
Advanced data security system analysis skills
Advanced risk assessment and management skills

Job Responsibility

Lead and coordinate responses to the most complex cybersecurity incidents, guiding cross-functional teams through containment, eradication, and recovery
Combines deep industry expertise with a thorough understanding of information and security technology to effectively analyze associated logs and respond to high severity incidents
Contributes to the company's security response methods, suggesting automation opportunities which can enhance IR
Mentor and provide technical guidance to less experienced cybersecurity professionals
Stay at the forefront of cybersecurity trends, threats, and technologies, driving innovation within the organization's threat detection and response capabilities
Foster a culture of continuous improvement and innovation, encouraging the adoption of new technologies and methodologies within the team
Providing insight and guidance through after action reviews working with stakeholders

What we offer

Health & Wellbeing
Personal & Professional Development
Unconditional Inclusion

Fulltime

Senior Security Operations Engineer

The Cloud & AI organization accelerates Microsoft’s mission and bold ambitions t...

Location

India , Hyderabad

Salary:

Not provided

Microsoft Corporation

Expiration Date

Until further notice

Requirements

Bachelor's or Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
7+ years of hands-on experience working in cybersecurity incident response
Hands-on experience with incident response in Azure or Microsoft 365
Proficient with Kusto data query languages
Ability to work under pressure, structure unstructured problems and provide clarity where ambiguity exists
Ability to operate with autonomy, influence others, and a bias for action

Job Responsibility

Coordinates with investigators to prioritize investigation objectives, understands attack paths, and systematically executes mitigation and protection actions to evict threat actors for any security incident impacting any of Microsoft’s products or services
Conducts hands-on mitigation where possible
engages service owners when there is a risk of a production outage
Maintains hands-on knowledge of mitigation and protection steps for various asset types (e.g. M365, Azure, AI) and publishes self-service guidance for impacted engineering teams
Briefs executive stakeholders on eviction plans and associated status
Maintains and evolves an inventory of threat actor Tactics, Techniques, and Procedures (TTPs) and the corresponding eviction capabilities
Define and prioritize requirements and use cases for Microsoft’s threat actor eviction platform
operationalize as they are delivered
Drives strategic change to accelerate eviction scenarios (e.g. lean business cases to garner support for broader Microsoft product initiatives or features)
Participates in an on-call rotation

Fulltime

Senior Security Engineer

The Senior Security Engineer will provide hands-on technical leadership within t...

Location

United Kingdom , Leeds; Thame

Salary:

65000.00 - 75000.00 GBP / Year

PEXA UK

Expiration Date

Until further notice

Requirements

Proactive, can-do attitude to get things done quickly and efficiently
Strong collaboration and communication skills
Willingness to contribute ideas to the security programme
Demonstratable first-hand experience in achieving organisational adherence to security best practices
Experience in the practical protection of a remote working laptop estate and SaaS cloud solutions
Experience in identity and access management solutions
Experience in device business automation and updates
Experience in the security aspects of cloud web application hosting and defence measures like WAF

Job Responsibility

Maintenance and Operational Security: Ensure all security solutions remain operationally effective
Ensure technical teams timely patch applications, systems, software, and hardware
Maintain and audit secure configurations for devices, applications, and cloud environments
Access Control and Identity Management: Conduct regular user and privileged account reviews
Manage and monitor Privileged Identity Management (PIM) profiles and elevated access accounts
Coordinate with IT and HR for onboarding/offboarding
Tool, Infrastructure, and Encryption Management: Maintain and optimise security infrastructure and tools
Oversee encryption key and certificate management
Work with vendors and internal teams to ensure tools remain current
VPN, Network & Firewall Security: Design, configure, and maintain secure VPN and Zero-Trust network solutions

What we offer

Your growth: We encourage you to hit your personal and professional learning and development goals with our tailored programs and tools
Your wellness: We care about your holistic wellbeing
Your work/life blend: We want to help you create your ideal work/life blend

Fulltime

Cyber Incident Response Senior Associate

Douglas Scott

Location:
United Kingdom , Greater London

Category:
Legal

Contract Type:
Employment contract

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
May 16, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Cyber Incident Response Senior Associate

Senior Cybersecurity Incident Response Analyst

Senior Security Engineer

Global Chief Information Security Officer

Senior Security Engineer - Security Incident Response

Senior Security Engineer - Security Incident Response

Senior Cybersecurity Incident Response Analyst

Senior Security Operations Engineer

Senior Security Engineer

Cyber Incident Response Senior Associate

Douglas Scott

Location:United Kingdom , Greater London

Category:Legal

Contract Type:Employment contract

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:May 16, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Cyber Incident Response Senior Associate

Senior Cybersecurity Incident Response Analyst

Senior Security Engineer

Global Chief Information Security Officer

Senior Security Engineer - Security Incident Response

Senior Security Engineer - Security Incident Response

Senior Cybersecurity Incident Response Analyst

Senior Security Operations Engineer

Senior Security Engineer

Location:
United Kingdom , Greater London

Category:
Legal

Contract Type:
Employment contract

Job Posted:
May 16, 2025