Senior Security Consultant (Incident Response)

Overview

As a Senior Security Consultant, you lead high-sophistication cyber incident responses within LRQA and its DSS customers, guiding a team of responders and delivering investigations and recovery. You’ll shape incident response capability, deliver training, and stay current with threat intelligence to drive effective defenses. This role combines leadership, hands-on analysis, and strategic IR planning in a fast-paced security team. You’ll engage with clients and internal stakeholders to reduce incident impact and support security maturity.

Pay / Benefits

• flexible working arrangements
• competitive salary
• comprehensive benefits package
• professional growth opportunities
• collaborative work environment

Responsibilities

• Lead technical response to customer cyber incidents and coordinate with Engagement and Incident Managers
• Conduct solo and team investigations across Windows, Linux, Cloud, and Hybrid environments
• Perform digital imaging and forensic tasks on Windows and Linux hosts
• Triage suspicious artefacts using commercial and bespoke tools
• Develop and deliver customer training for incident preparedness
• Provide written/verbal reports to IR team and senior partners
• Research threat landscape, actor TTPs, and develop IR actions and tooling
• Collaborate cross-functionally to improve detection and security capabilities
• Maintain alignment with Mitre ATT&CK and industry developments
• Support IR strategy and policy development with DSS leadership

Key requirements

• Strong incident management and analytical skills
• Excellent written and spoken English
• Solid understanding of Threat Actor TTPs
• Strong commercial awareness
• Ability to work independently and in a team
• At least 36 months IT Security industry experience in past 4 years
• Ability to lead, teach, present and inspire customers and teams
• Willingness to travel to UK and some non-UK customer locations
• Ability to join 24/7 on-call rota

• problem-solving
• self-motivated learning
• team collaboration
• Threat Actor TTPs understanding
• Windows/Linux/Cloud/Hybrid environment investigation
• Digital imaging and forensic investigation

Full job description from WhatJobs. Apply for this role →