{"id":3274528,"url":"https://alion.io/job/experis-uk-incident-response-specialist","title":"Incident Response Specialist","company":{"id":53987,"name":"Experis UK","domain":"experis.co.uk","url":"https://alion.io/company/experis","size_band":"1001-5000","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":450,"max":455,"currency":"GBP","period":"day","gross":null,"usd_annual":152250},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-26T12:49:43Z","employer_posted_date":null,"last_verified_at":"2026-10-26T12:49:43Z","board_verified":false,"closed_at":null,"days_open":9,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":9},"description":"Incident Response Specialist (SOC)\nLocation: London (Onsite)\nDuration: 12 Months\nInside IR35\nThe Opportunity\nWe're seeking an experienced Incident Response Specialist to provide hands-on Security Operations Centre (SOC) and Incident Response support within a fast-paced cyber security environment.\nThis role focuses on monitoring, investigating, and responding to cyber security threats across macOS endpoints, Linux cloud environments, microservices, and containerised platforms. You'll work closely with security and engineering teams to contain threats, coordinate remediation activities, and continuously strengthen detection and response capabilities.\nKey Responsibilities\nMonitor and triage security alerts within a SOC environment.\nInvestigate and respond to cyber security incidents across endpoint, cloud, and application environments.\nAnalyse security events to determine severity, scope, impact, and remediation requirements.\nConduct investigations involving:\nmacOS endpoints\nLinux cloud workloads\nMicroservices architectures\nContainerised environments\nSupport incident containment, recovery, and remediation activities.\nDocument investigation findings, evidence, and response actions.\nEscalate complex incidents and collaborate with technical and security teams.\nContribute to the development of detection rules, response playbooks, and process improvements.Essential Skills & Experience\nProven experience within a Security Operations Centre (SOC) or Incident Response function.\nHands-on experience investigating threats across:\nmacOS\nLinux\nCloud platforms\nContainers and microservices\nExperience with:\nSIEM platforms\nEDR/XDR technologies\nCloud security monitoring tools\nStrong understanding of cyber threat detection and incident response methodologies.\nKnowledge of attacker tactics, techniques, and procedures (TTPs).\nFamiliarity with the MITRE ATT&CK Framework.\nExperience correlating security telemetry from multiple sources to assess threats and incidents.\nStrong documentation and reporting skills.\nAbility to communicate technical findings clearly to technical and non-technical stakeholders.What We're Looking For\nYou'll be a proactive cyber security professional who thrives in operational environments and enjoys investigating complex security incidents. Comfortable working under pressure, you'll have a strong analytical mindset and a passion for improving cyber resilience through effective threat detection, investigation, and response.\nIf you have strong SOC and Incident Response experience across cloud, Linux, macOS, and containerised environments, we'd love to hear from you.\nIf you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website","description_format":"text","description_chars":2714,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response"],"lifecycle":[{"event":"open","at":"2026-10-26T13:34:46Z"}],"visa":[],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.571,"p_room":0.945,"age_days":8,"expected_fill_days":23,"reasons":["seen:8","agency","urgency","velocity","win:mid"],"computed_at":"2026-11-04T06:34:25Z"},"pay":{"stated_usd_annual":152250,"is_top_pay":false},"html_url":"https://alion.io/job/experis-uk-incident-response-specialist","json_url":"https://alion.io/job/experis-uk-incident-response-specialist.json","meta":{"generated_at":"2026-11-04T21:14:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"search","counted_by":"address","units_charged":0,"used_today":0,"day_limit":null,"remaining_today":null,"minute_limit":null,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":53987},"rest":"https://alion.io/mcp/rest/get_company?id=53987"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fexperis-uk-incident-response-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fexperis-uk-incident-response-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fexperis-uk-incident-response-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/experis-uk-incident-response-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fexperis-uk-incident-response-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3274528}},{"tool":"search_jobs","arguments":{"company":"experis.co.uk","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3274528},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}