Senior Incident Responder

About the role You will be responsible for Investigation and Response: Perform host, network, and cloud-based forensic analysis to understand the full extent of security incidents and take appropriate response actions to contain, remediate, and recover. Incident Handling: Support cyber-security incident managers and decision makers with root cause analysis and formulating recommendations for detection and prevention controls. Technical Project Work: Use your technical capabilities to enhance our existing processes as well as identifying and working on new methods to deliver DFIR services to the ever-changing technology requirements of the business. Threat Hunting & Detection Engineering: Lead intelligence-based threat hunts to uncover anomalous behaviour in our estate that is representative of the security threats most relevant to Tesco, testing and raising potential detections to contribute to our internal detection engineering programme. You will need 4+ years of relevant experience. Experience with responding to security incidents in large scale corporate on-premises and public cloud environments (preferably Microsoft Azure). Experience with forensic analysis of cyber-security incidents on Windows, MacOS, and Unix operating systems and in-depth understanding of those operating systems. Ability to perform static and dynamic analysis of suspicious scripts, executables etc. Experience with a broad range of security technologies such as EDR, SOAR, and SIEM. Ability to think critically and lead technical investigations. Ability to handle high pressure situations in a calm, productive, and professional manner. Proficiency in at least one programming or scripting language. Whats in it for you?

• About Us Our vision at Tesco is to become every customer's favourite way to shop, whether they are at home or out on the move. Our core purpose is ‘Serving our customers, communities and planet a little better every day'. Serving means more than a transactional relationship with our customers. It means acting as a responsible and sustainable business for all stakeholders, for the communities we are part of and for the planet.      We're a big business and we can offer a range of diverse full-time & part-time working patterns across our many business areas, which means that we can find something that works for you.  We work in a more blended pattern - combining office and remote working.  Our offices will continue to be where we connect, collaborate and innovate.  If you are applying internally, please speak to the Hiring Manager about how this can work for you - Everyone is welcome at Tesco.