CERT Incident Responder

The CERT Incident Responder is responsible for leading digital forensics and incident response (DFIR) readiness. While also advancing the organisation's Adversarial Exposure Validation (AEV)— including Red and Purple Team activities The role ensures detection, response, and control validation against real-world threat actor tactics, techniques, and procedures (TTPs).
Salary : £50,000 - £60,000 depending on experience
Dynamic (hybrid) working : Minimum 2 days per week on-site due to workload classification
Security Clearance : Company bonus: Up to £2,500 (based on company performance and will vary year to year)
Pension: maximum total (employer and employee) contribution of up to 14%
Overtime: opportunity for paid overtime
Flexible working: We welcome applicants who are looking for flexible working arrangements
Enhanced parental leave: offers up to 26 weeks for maternity, adoption and shared parental leave -enhancements are available for paternity leave, neonatal leave and fertility testing and treatments
Facilities: Fantastic site facilities including subsidised meals, free car parking and much more…
Healthcare Cash Plan: The Healthcare Cash Plan benefit provides the option to claim cash back on everyday healthcare expenses such as optical, dental, health and wellbeing and more.
The CERT Incident Responder is responsible for leading digital forensics and incident response (DFIR) readiness. The role ensures detection, response, and control validation against real-world threat actor tactics, techniques, and procedures (TTPs).
This is a Next step role for an experienced Analyst with a passion for Incident response and Threat mitigation.
Lead digital forensics and incident response (DFIR) activities, ensuring lab readiness, artefact management, and delivery of forensic objectives.
Conduct detailed forensic analysis, malware reverse engineering, and cyber investigation of complex incidents.
Maintain accurate digital forensics documentation, incident playbooks, and readiness rehearsal materials.
Lead and execute tabletop exercises (TTEx) to test and improve incident response and forensic readiness.
Perform network and endpoint investigations, including AV scans, incident remediation, and validation of security alerts.
Deputise for CERT responders during major incidents or third-party attacks, coordinating with national and international partners (e.g., Develop and maintain enterprise security documentation, including policies, standards, baselines, and playbooks.
Manage remediation and closure of security cases, ensuring timely implementation of corrective actions.
Translate threat intelligence into testable hypotheses and simulation exercises in collaboration with Threat Intelligence teams.
Produce detailed reporting and metrics on detection coverage, response performance, and control effectiveness.
Support SOC operations with investigation, alert triage, and implementation of lessons learned from adversarial validation and DFIR activities.
provide gap analysis and recommendations to influence investment.
Contribute to small-to-medium cyber projects enhancing threat detection, emulation, and response maturity.
Cloud account takeover
Leading incident response calls, advising leadership, and writing executive summaries
We partner with governments to work together towards a common goal, defending our freedom.
We are proud of our employee-led networks, examples include: Gender Equality, Pride, Menopause Matters, Parents and Carers, Armed Forces, Ethnic Diversity, Neurodiversity, Disability and more…
Follow us on LinkedIn (MBDA), X (@MBDA_UK), Instagram (MBDA_UK) and Glassdoor or visit our MBDA Careers website for more information.