Careerwise-UK
Incident Response Analyst - Cyber Security
12-month contract (up to £450/day, outside IR35), hybrid in London (2 days in office), via recruiter Careerwise-UK for the Mizuho EMEA environment. The analyst detects, triages and investigates cyber incidents, performs digital forensics and threat hunting across SIEM, EDR/XDR, Windows/Linux and cloud, and coordinates incident response — requiring 8+ years in IR.
- Compensation
- £450 / day
- Location
- Not listed
- Work setup
- Hybrid
- Seniority
- Not specified
- Employment
- Contract
- Experience
- 8+ years
- Category
- Security
- Posted
Skills
Must have
- 8+ years of experience as an Incident Response Analyst
- Strong cyber security experience
- Hands-on experience in cyber security incident response, SOC operations, SIEM and EDR/XDR platforms
- Windows/Linux forensics, network analysis, cloud security, identity and access management, email security, vulnerability management
- Working knowledge of NIST incident response guidance, MITRE ATT&CK, Cyber Kill Chain and evidence-handling procedures
- Degree in Cyber Security, Computer Science or related discipline, or equivalent practical experience
- Strong analytical skills, judgement under pressure and stakeholder communication; understanding of regulatory, confidentiality and data privacy requirements
Nice to have
- Experience with Microsoft Sentinel, Defender XDR, KQL, Python, PowerShell
- Experience with threat intelligence and forensic tools such as Wireshark, Velociraptor, Volatility or EnCase
- Certifications such as GCIH, GCFA, GCIA, SC-200, CySA+ or CISSP
- Prior experience in banking, financial services or other regulated environments
Full description
Role – Incident Response Analyst (Cyber Security)Rate – upto £450/Day Outside IR3512 Months contractLondon Based (Hybrid – 2 Days in office) Responsibilities:
- Should have atleast 8+ yrs of experience as an Incident Response Analyst.
-Must havestrong Cyber Security experience.
- Incident Detection, Triage & Response: Monitor and analyse security alerts across SIEM, EDR/XDR, identity, email, cloud, and network security platforms. Validate incidents, assess severity and business impact, investigate threats such as phishing, malware, account compromise, and unauthorised access, and coordinate containment, eradication, and recovery activities in line with established SLAs.
- Digital Forensics & Threat Investigation: Conduct forensic investigations across Windows/Linux endpoints, servers, network traffic, authentication logs, email, and cloud environments. Collect and preserve digital evidence, maintain chain of custody, identify Indicators of Compromise (IoCs), establish root cause, and map attacker tactics and techniques to the MITRE ATT&CK framework.
- Threat Hunting & Detection Engineering: Perform proactive, hypothesis-driven threat hunting using threat intelligence, security telemetry, and attacker behavioural patterns. Develop, tune, and validate detection rules, SIEM queries, correlation logic, and custom indicators to improve threat detection, reduce false positives, and address security monitoring gaps.
- Incident Coordination & Stakeholder Management: Collaborate with infrastructure, application, cloud, identity, risk, legal, compliance, business, and third-party teams to manage incidents throughout the response lifecycle. Maintain accurate incident timelines, evidence, action logs, escalation records, and investigation reports while providing timely technical updates and management communications.
- Incident Response Governance & Continuous Improvement: Develop and maintain incident response playbooks, standard operating procedures, escalation matrices, and communication templates. Conduct root-cause analysis and post-incident reviews, track remediation actions, support cyber incident simulations, and report incident metrics, trends, risks, and control effectiveness to management.
- Technical Skills & Experience: Demonstrate hands-on experience in Cyber Security Incident Response, SOC operations, SIEM and EDR/XDR platforms, Windows/Linux forensics, network analysis, cloud security, identity and access management, email security, and vulnerability management. Working knowledge of NIST incident response guidance, MITRE ATT&CK, Cyber Kill Chain, and evidence-handling procedures is essential. Experience with Microsoft Sentinel, Defender XDR, KQL, Python, PowerShell, threat intelligence, and forensic tools such as Wireshark, Velociraptor, Volatility, or EnCase is desirable.