Cyber Security Analyst

Senior Incident Responder – Cyber Security (Regulated Environment)

Channel Recruitment is working with a leading organisation operating within a highly regulated healthcare environment to hire a Senior Incident Responder to join their cyber security function.

This is a hands-on, high-impact role at the centre of incident response activity, ideal for someone who enjoys deep technical investigation, fast-paced problem solving, and working on incidents that genuinely matter. If you’re not sure you meet every requirement but the role feels close, we’d still like to hear from you.

Working setup

This is a full-time, permanent role working standard weekday hours (with flexibility required during active incidents).

If you’re within commuting distance of the assigned office locations, the role follows a hybrid model with a minimum of 3 days per week on-site to support collaboration and incident response effectiveness.

What you’ll be doing

You’ll act as a lead responder for cyber security incidents, focusing on threats that could impact critical systems, sensitive data, or business continuity in a healthcare environment.

Your work will include:

• Leading investigation and response for high-severity security incidents
• Coordinating containment and remediation across technical and business teams
• Analysing logs, EDR telemetry, and SIEM data across endpoint, cloud, and network environments
• Investigating activity across Windows, Linux, and cloud platforms
• Supporting live incident communications with technical and non-technical stakeholders
• Driving improvements to incident response processes and playbooks
• Using threat intelligence (internal external sources) to enrich investigations
• Contributing to detection engineering and improving alerting capability
• Producing clear post-incident reports for security, risk, and compliance teams

What we’re looking for

• Strong background in cybersecurity (hands-on incident response experience essential)
• Solid experience with Windows and Linux investigations and network analysis
• Strong understanding of EDR and SIEM tools
• Experience working with incident response frameworks (e.g. NIST, MITRE ATT&CK)
• Experience operating in large, complex enterprise environments
• Confident communicator, especially during high-pressure incidents
• Experience working in regulated environments is beneficial

Nice to have:

• Exposure to healthcare or similarly regulated industries
• Familiarity with clinical or enterprise systems and data flows
• Understanding of compliance frameworks
• Experience writing detection rules or custom security content

About the role

You’ll be part of a dedicated detection and response function, working to identify, contain, and resolve cyber threats that could impact operational systems and sensitive data.

This is a highly technical, fast-moving environment where you’ll work closely with SOC, IT, and wider business stakeholders. Your work will directly contribute to protecting critical services and ensuring operational continuity.

Interested?

We’re keen to speak with experienced incident responders, even if you don’t meet every single requirement. If the core of this role aligns with your background, apply or reach out for a confidential discussion.