The Incident Response Analyst is part of the front line of our Cyber Threat Intelligence and Incident Response team, responsible for providing Endava with high fidelity, actionable cyber threat intelligence and specialist incident response capabilities.
Strong knowledge of the latest security threats, industry standard incident response methodologies, and investigation techniques is expected. Candidates should also demonstrate adaptability, knowledge of both incident response and cyber threat intelligence, and an eagerness to learn emerging threat actor tactics, tools and techniques.
Responsibilities:
- Act as a key responder during security incidents, supporting containment, eradication and recovery activities.
- Perform detailed investigation and analysis of security alerts, intrusions and malware using EDR, SIEM and forensic tooling.
- Support post-incident reviews, identifying root cause, control gaps and lessons learned.
- Coordinate with SOC, CTI, IT, legal and third-party providers during incidents to ensure timely and effective response
- Support evidence collection and documentation to meet legal, regulatory and internal reporting requirements.
In periods without active incident response activity, the analyst will actively support Cyber Threat Intelligence operations and initiatives
