Cyber Incident Response Analyst (12‑Month Contract)

About the role

We are looking for an experienced Cyber Incident Response Analyst to join a high‑performing Cyber Defence team on a 12‑month day‑rate contract. The role is hands‑on, focusing on incident response, threat detection and continuous improvement of security operations.

Key responsibilities

• Serve as the primary escalation point for the SOC, coordinating with external security partners and internal technology teams during incidents.
• Collaborate with SOC analysts to enhance monitoring, detection rules, alert quality and incident‑response playbooks.
• Drive continuous improvement of Cyber Defence processes through automation and systems integration.
• Maintain accurate incident records, evidence, audit trails and lessons‑learned documentation.
• Identify and validate security weaknesses using manual testing techniques and offensive security tools.
• Produce technical reports detailing vulnerabilities, business impact, risk ratings and remediation recommendations.
• Monitor emerging cyber threats and attacker techniques relevant to the organisation’s technology landscape.

Required profile

• 8+ years of experience in Cyber Security or IT, with at least 4 years in Security Operations, Incident Response or Offensive Security.
• Proven track record of responding to live security incidents, including investigation, digital forensics, event triage and remediation.
• Experience improving SOC processes, incident‑response playbooks and operational procedures.
• Relevant certifications such as GIAC, CISSP, OSCP, CEH or equivalent.

Required skills

• Offensive security tools: Burp Suite, Nmap, Metasploit, custom scripting.
• Security monitoring platforms: SIEM, EDR, SOAR, Threat Intelligence, Splunk, CrowdStrike, ZeroFox.
• Scripting languages: Python, PowerShell, Bash.