Security Incident Response Analyst

The Incident Response Analyst is part of the front line of our Cyber Threat Intelligence and Incident Response team, responsible for providing Endava with high fidelity, actionable cyber threat intelligence and specialist incident response capabilities.

Strong knowledge of the latest security threats, industry standard incident response methodologies, and investigation techniques is expected. Candidates should also demonstrate adaptability, knowledge of both incident response and cyber threat intelligence, and an eagerness to learn emerging threat actor tactics, tools and techniques.

Responsibilities:

· Act as a key responder during security incidents, supporting containment, eradication and recovery activities.

· Perform detailed investigation and analysis of security alerts, intrusions and malware using EDR, SIEM and forensic tooling.

· Support post-incident reviews, identifying root cause, control gaps and lessons learned.