# Cyber Incident Response Consultant

**Company**: Control Risks
**Location**: London, England
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Consulting

**Apply**: https://apply.workable.com/j/AACD009663?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_ffb66afa-d6a

## Description

We are seeking a Cyber Incident Response Consultant to join our team in London. As a Cyber Incident Response Consultant, you will deliver Control Risks' Cyber Incident Response projects for clients. You will work as part of a team on high-profile incidents, undertaking compromise assessments and business email compromise investigations, as well as investigating and helping to lead the technical response to complex cases, including ransomware attacks.

Responsibilities:

- Lead and assist with host, network, web server, and cloud-based investigations into complex cyber incidents, including ransomware attacks.

- Investigate incidents affecting SaaS platforms and software development environments.

- Conduct threat hunting and identification of attacker activity using EDR and agent-led forensic tooling.

- Perform live compromise assessments for organisations who suspect live and ongoing system intrusion.

- Detect and hunt unknown live, dormant, and custom malware in memory across multiple systems in an enterprise environment.

- Contribute to the design and development of investigative toolsets and automation.

- Demonstrate an understanding of both existing and emerging threat actors.

- Work with the Cyber Threat Intelligence team to identify where they could benefit from the technical information acquired during Cyber Response cases.

- Advise on the safe technical recovery of an organisation's IT systems.

Requirements:

- Proven experience investigating complex cyber incidents, including ransomware attacks.

- Technical degree or demonstrated knowledge of common networks, software, and hardware used in business environments.

- Strong understanding of enterprise infrastructure, web servers, and cloud environments.

- Experience in conducting log analysis and digital forensics following a cyber incident.

- Proven experience in responding to cyber-attacks.

- Fluent in English.

- Excellent presentation skills.

- Excellent analytical skills.

- Scripting and/or development experience.

Benefits:

- Competitively positioned compensation and benefits package.

- Discretionary global bonus scheme.

- Hybrid working arrangements.

- Equal opportunities employer.

## Skills

### Required
- incident response
- threat hunting
- EDR
- digital forensics
- scripting
- development
- cloud environments
- enterprise infrastructure
- cyber threat intelligence

### Nice to have
- MITRE ATT&CK techniques
- SIGMA rules
- SNORT rules
- YARA Signatures
- SaaS platforms
- software development practices

---

Source: [Apply at apply.workable.com](https://apply.workable.com/j/AACD009663?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)