Cyber Security Incident Response Consultant (Mid Level)

About the role

We are looking for a Mid‑Level Cyber Security Incident Response Consultant to join a fast‑growing incident response team in Belfast. You will work on high‑pressure, business‑critical cyber incidents, guiding clients from detection through containment, recovery and post‑incident assurance.

Key responsibilities

• Coordinate and execute incident response activities following established frameworks.
• Perform digital forensics on Windows, Linux and cloud environments.
• Analyse alerts from SIEM, EDR, IDS/IPS and firewall solutions.
• Identify, contain and remediate ransomware, phishing and other attack vectors.
• Document findings and provide clear communication to technical and non‑technical stakeholders.
• Contribute to knowledge‑base articles and improve internal processes.

Required profile

• 3‑5 years of experience in cyber security, preferably with exposure to SOC or incident response.
• Solid understanding of networking concepts, operating systems and common attack techniques.
• Ability to stay calm and effective under pressure.
• Strong written and verbal communication skills.
• Eligibility for UK security clearance.

Required skills

• SIEM platforms (e.g., Splunk, QRadar)
• Endpoint Detection & Response (EDR) tools
• IDS/IPS and firewall technologies
• Windows, Linux and cloud forensics
• Network traffic analysis
• Ransomware and phishing detection techniques
• Incident response frameworks (e.g., NIST, SANS)
• Relevant certifications: GCIH, GCFA, GCIA, GNFA, GCFR, CySA+, BTL2, AWS/Azure security certifications

What we offer

• Competitive salary £35,000‑£50,000 per year.
• Permanent contract with office‑based work in Belfast.
• Structured training, mentoring and certification pathways.
• Exposure to real‑world cyber incidents across multiple sectors.