{"id":2596733,"url":"https://alion.io/job/lrqa-senior-security-consultant-incident-response","title":"Senior Security Consultant (Incident Response)","company":{"id":1756963,"name":"LRQA","domain":"lrqa.com","url":"https://alion.io/company/lrqa-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Birmingham, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":74000,"max_usd":135000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":36},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Incident Management","optional":false},{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Red Teaming","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-09-22T02:00:00Z","employer_posted_date":"2026-09-22","last_verified_at":"2026-10-20T15:45:25Z","board_verified":true,"closed_at":null,"days_open":29,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":29},"description":"Job ID:44293\nLocation:UK : Home Based\nPosition Category:Consulting\nPosition Type:Employee Regular\nSenior Security Consultant\nRole Purpose:\nThis is a new, exciting opportunity for a Senior Security Consultant to join LRQA’s existing dynamic Cyber Incident Response Team.\nThis role follows a hybrid working arrangement and will involve working on client sites and from the office from time to time. We support remote work across the UK; however, the main office is in Birmingham. Applicants are required to be resident in the UK.\nKey Responsibilities:\nThe successful candidate will be responsible for responding to and leading cyber incidents within LRQA Group and LRQA’s professional service and Defensive Security Service (DSS) customers, providing education (internally and externally) and improving the team’s capability, in line with managerial direction.\nThe role will lead a team of responders, as well as conduct solo incident investigations, where the actor operates with a high level of sophistication (Organised Crime or above) using agreed mitigation, preparedness, and response and recovery approaches, as needed, to minimise the impact of a cyber-incident.\nThey will design and execute training engagements that will prepare all levels of stakeholders for a cyber-incident, and keep up to date with the latest CTI industry developments, security developments, vulnerabilities, attacks, news and techniques aligned to Mitre ATT&CK and use this to further the team’s capability.\nThey are expected to operate autonomously using judgement to escalate issues to senior management when appropriate. They must continue to maintain a relevant industry level certification preferably the CREST CCIM and at least one other CREST Certified level certification in the Incident Response field, for which LRQA will provide support.\nThe following list is indicative of the overall expectations of the role (not exhaustive):\nIn conjunction with the Customer Engagement Manager and Cyber Incident Manager, manage the collective technical response to customer cyber incidents.\nIn conjunction with the DSS leadership, develop and drive the IR strategy.\nIn conjunction with the DSS leadership, develop, refine and monitor IR policies, procedures and technical capability.\nConduct analysis and investigation of cyber security events across Windows, Linux, Cloud and Hybrid environments.\nConduct digital imaging and forensic investigation tasks on Windows and Linux hosts.\nConduct initial triage on suspicious artefacts using both commercial and bespoke tools\nProvide customer training engagements to develop internal and external stakeholder preparedness for dealing with cyber incidents.\nProvide written and verbal reports to the wider IR team, senior business partners (internal and external).\nConduct ongoing research around the threat landscape, including threat actors, TTPs and develop IR actions, investigation strategies and tooling.\nA team-first, collaborative approach working across all relevant technical teams to identify opportunity for improvement in detection sets.\nExcellent problem-solving skills and self-motivated to learn and upskill regularly. \nA strong desire to continually challenge and develop yourself as part of a fast-paced, high-performing team.\nWhat You'll Bring:\nThe following list of requirements are pre-requisites for the role:\nDemonstrably strong incident management and analytical skills. \nDemonstrably strong written and speaking English skills. \nDemonstrably strong understanding of Threat Actor TTP’s. \nDemonstrably strong commercial awareness. \nDemonstrable ability to work on own projects and within a team. \nAt least 36 months of relevant IT Security industry experience in past 4 years. \nAn ability to lead, teach, present and inspire customers and the wider team. \nAbility to travel to UK customer locations where requested and non-UK customer locations where mutually agreed. \nAbility to join 24/7 on-call rota.\nWe value capability over credentials. We’re not looking for badge collectors. That said, one or more of the following will serve as a distinct advantage:\nCREST CCIM / CRIA\nGIAC GCFA / GCIH / GNFA\nUKSC Chartered / Principal Professional in IR\nSimilar\nWhy Join Us?\nWe’ve built a team that people tend to stay with - and that’s intentional. Our cyber unit includes the full spectrum of services from SOC analysis and Incident Response through Penetration Testing, Adversarial Simulation (Red Teaming) and Threat Intelligence. There are always people available to help you and always more to learn and we have excellent and varied career progression opportunities.\nWe push ourselves to be excellent, so if you enjoy solving complex technical challenges and working in an environment that supports continuous development, you’ll fit right in! Please visit our website to understand more about how we develop our people, work on cutting edge engagement and offer multiple career progression paths.\nWho are LRQA?\nLRQA is a leading global assurance partner, combining deep industry expertise with innovative solutions to help organizations manage risk, improve performance, and drive sustainable growth.\nOperating in over 50 countries with a team of 2,500+ professionals, we support more than 60,000 clients worldwide through assurance, certification, cybersecurity, inspection, and training services. Our purpose is simple: to help businesses build a safer, more secure, and more sustainable future.\nAt LRQA our focus has always been on excellence in cyber security. We have teams that offer world class services in red teaming, penetration testing, threat intelligence, research and development, detection and response, governance, risk, and compliance, and plenty more. Our business is global and so are our clients. We work closely with central banks, central and local government, critical national infrastructure, large retailers, and plenty more besides!\nWe’re an award-winning provider of cyber security services and we’re at a very exciting stage of development. We are looking for the right people to join us as we embrace the challenges thrown up by the advancements within the IT industry and within the threats faced. LRQA will be at the forefront of this arena and we want to seek the right people to join the team and make it happen.\nYou can find out more about us at https://www.lrqa.com/en-us/cyber-security-services/.\nWhat We Offer:\nJoin a global team where your expertise is valued and your development is supported. We offer a collaborative work environment, opportunities for professional growth, flexible working arrangements where applicable, a competitive salary aligned with the market, and a comprehensive benefits package.\nPre-Employment Checks\nIf you are successful in securing a role with us, we may carry out pre-employment checks, as permitted by local law, including verification of identity, right to work, employment history, education, and criminal records where applicable.\nThese checks are conducted by our trusted screening partner, Cfirst, in compliance with applicable data protection laws. Any personal data collected will be used solely for recruitment purposes, stored securely, and retained only as required.\nFor questions about the screening process, contact  , For queries regarding your personal data, contact \nAt LRQA, we belive that as a leading Global Leading Assurance and Risk Management Service provider, our talented people are our risk management advantage.\nWe belive the best outcomes come from diverse perspectives, shared ambition and working together with integrity. That's how we buid a workplace where everyone can contribute, grow and thrive.\nGuided by Vision and powered by Expertise, we're united by a shared purpose. If you're driven to make a difference, you'll belong here.\nAll rights reserved. Terms of use. Privacy Policy.","description_format":"text","description_chars":7874,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Flexible schedule","Hybrid work"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response"],"lifecycle":[{"event":"open","at":"2026-10-15T07:24:38Z"}],"visa":[],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.437,"p_room":0.35,"age_days":29,"expected_fill_days":7,"reasons":["conf:14","velocity","win:tail"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/lrqa-senior-security-consultant-incident-response","json_url":"https://alion.io/job/lrqa-senior-security-consultant-incident-response.json","meta":{"generated_at":"2026-10-21T21:29:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30531,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1756963},"rest":"https://alion.io/mcp/rest/get_company?id=1756963"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flrqa-senior-security-consultant-incident-response"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flrqa-senior-security-consultant-incident-response"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flrqa-senior-security-consultant-incident-response"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/lrqa-senior-security-consultant-incident-response\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flrqa-senior-security-consultant-incident-response"}]}