Senior Security Consultant (Incident Response)

Salary: £57,000 - 93,000 per year

Requirements:

• Demonstrably strong incident management and analytical skills.
• Demonstrably strong written and spoken English skills.
• Demonstrably strong understanding of threat actor TTPs.
• Demonstrably strong commercial awareness.
• Demonstrable ability to work on own projects and within a team.
• At least 36 months of relevant IT security industry experience in the past 4 years.
• Ability to lead, teach, present, and inspire customers and the wider team.
• Ability to travel to UK customer locations where requested and non-UK customer locations where mutually agreed.
• Ability to join a 24/7 on-call rota.
• Maintain a relevant industry-level certification, preferably CREST CCIM, and at least one other CREST Certified level certification in the Incident Response field.
• Advantageous certifications include CREST CCIM / CRI, GIAC GCFA / GCIH / GNFA, and UKSC Chartered / Principal Professional in IR.

Responsibilities:

• Respond to and lead cyber incidents within our Group and our professional service and Defensive Security Service customers.
• Provide education internally and externally and help improve the teams capability.
• Lead a team of responders and conduct solo incident investigations involving sophisticated threat actors.
• Use agreed mitigation, preparedness, response, and recovery approaches to minimise the impact of cyber incidents.
• Design and execute training engagements to prepare stakeholders for cyber incidents.
• Stay up to date with CTI industry developments, security developments, vulnerabilities, attacks, news, and techniques aligned to Mitre ATT&CK.
• Escalate issues to senior management when appropriate using sound judgement.
• Manage the collective technical response to customer cyber incidents with the Customer Engagement Manager and Cyber Incident Manager.
• Develop and drive our IR strategy with our DSS leadership.
• Develop, refine, and monitor our IR policies, procedures, and technical capability with our DSS leadership.
• Conduct analysis and investigation of cyber security events across Windows, Linux, Cloud, and Hybrid environments.
• Conduct digital imaging and forensic investigation tasks on Windows and Linux hosts.
• Conduct initial triage on suspicious artefacts using commercial and bespoke tools.
• Provide written and verbal reports to the wider IR team and senior business partners.
• Conduct ongoing research around the threat landscape, including threat actors and TTPs, and develop IR actions, investigation strategies, and tooling.
• Work collaboratively across technical teams to identify opportunities for improvement in detection sets.
• Operate autonomously and continuously learn, upskill, and challenge yourself in a fast-paced team.

Technologies:

• Cloud
• Incident Management
• Support
• Linux
• Security
• Windows

More:

We are LRQA, a leading global assurance partner with over 2,500 professionals operating in more than 50 countries and supporting more than 60,000 clients worldwide through assurance, certification, cybersecurity, inspection, and training services. Our cyber security team delivers services including red teaming, penetration testing, threat intelligence, research and development, detection and response, governance, risk, and compliance. This is a home-based UK role with hybrid working, occasional work on client sites and from our Birmingham office, and remote work supported across the UK. We offer a collaborative environment, flexible working arrangements where applicable, a competitive salary aligned with the market, a comprehensive benefits package, strong career progression opportunities, and support for professional development. We are an award-winning provider at an exciting stage of growth, working with clients across sectors including central banks, government, critical national infrastructure, and large retailers.

last updated 36 week of 2026