Incident Response Analyst
- Location
- City of Westminster, England, United Kingdom
Investigation Collect, preserve, and analyse endpoint, server, identity, network, email, and cloud artefacts in accordance with forensic best practices. Perform host and network analysis using security logs, packet captures, forensic images, and telemetry data. Identify indicators of compromise (IOCs), attacker tactics, techniques, and procedures (TTPs), and map findings … outcomes. Incident Response Capability and Governance Develop, maintain, and improve incident response plans, playbooks, runbooks, and standard operating procedures. Conduct post-incident reviews and root cause analyses, ensuring lessons learned are captured and tracked through to completion. Contribute to service reporting, key risk indicators, trend analysis ...