Incident Response Analyst at World Wide Technology, Remote, 6 Months, £Contract Rate

World Wide Technology (WWT) is a global technology integrator and supply chain solutions provider.

Through our culture of innovation, we inspire, build, and deliver business results from ideas to outcome.

World Wide Technology (WWT) is looking for an experienced Incident Response Analyst responsible for detecting, triaging, investigating, containing and coordinating the resolution of cyber security incidents across the organization.

The ideal candidate will have security monitoring, incident handling, threat hunting and digital forensics to reduce business impact, preserve evidence and improve organizational resilience.

This is a contract Role & Inside IR35

Incident Response Analyst

Contract Duration: 6+ months Contract

Location: Remote, United Kingdom

Duties and Responsibilities:

• Incident Detection, Triage and Response
• Digital Forensics and Investigation
• Threat Hunting and Detection Improvement
• Incident Response Capability and Governance

Essential Skills:

• Practical experience in cyber incident response, security monitoring or a Security Operations Centre environment.
• Hands-on experience investigating security alerts and incidents using SIEM and EDR/XDR technologies.
• Experience analyzing Windows and Linux host artefacts, authentication activity, security logs, network traffic and packet captures.
• Working knowledge of incident response lifecycle activities including preparation, detection, analysis, containment, eradication, recovery and lessons learned.
• Experience producing incident records, investigation reports, management updates and post-incident findings.
• Understanding of attacker behaviors and frameworks including MITRE ATT&CK, Cyber Kill Chain and NIST incident response guidance.
• Knowledge of enterprise networking, identity and access management, cloud services, email security, endpoint security, vulnerability management and data loss prevention.
• Ability to manage multiple priorities, exercise sound judgement under pressure and communicate clearly with technical and senior stakeholders.
• Awareness of evidence handling, forensic integrity, confidentiality and regulatory considerations relevant to cyber investigations.

Desirable Skills:

• Experience in banking, financial services or another regulated environment.
• Experience with threat intelligence, malware analysis, scripting or automation using PowerShell, Python, KQL or similar languages.
• Experience developing detection rules, response playbooks, threat hunts or security orchestration and automation workflows.
• Knowledge of Microsoft security technologies such as Sentinel, Defender XDR, Defender for Identity and Defender for Cloud, or equivalent platforms.
• Exposure to forensic tools such as EnCase, FTK, Velociraptor, Volatility, Wireshark or equivalent.
• Understanding of cloud investigation techniques across Microsoft Azure, Microsoft 365 or other major cloud platforms.

Candidates will be required to go through background checks before commencing contract.

Must be eligible to live and work in the specified work location. Some occasional travel may be required. Only successful candidates will be contacted

EQUAL OPPORTUNITIES

World Wide Technology is committed to equal opportunities and actively seeks applications from all sectors of the community irrespective of sex, race, color, nationality, ethnic or national origin, disability, marital status, sexual orientation, having responsibility for dependents, age, religion/beliefs, or any other reason which cannot be shown to be justified.