Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this Senior Cloud Incident Response Consultant role.
Rezi rewrites your resume against S-RM's job description. Free.
Tailor your resume to this Senior Cloud Incident Response Consultant role.
Rezi rewrites your resume against S-RM's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Senior Cloud Incident Response Consultant posting at S-RM — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Senior Cloud Incident Response Consultant posting at S-RM — free, in seconds.
About the Role
Our Incident Response Consultants are central to the success of our Cyber Security consulting practice. As a Technical Lead, you will bring deep cloud expertise to a senior, client-facing delivery role, leading the response to incidents in cloud environments. You will work across the full lifecycle of security incidents to help clients respond and recover.
Responsibilities
- Leading technical incident response engagements from first contact through to closure
- Acting as the primary technical resource on response cases, applying your own expertise and guiding colleagues on the project team
- Leading cloud-based investigations across AWS, Azure and GCP, including compromised cloud identities, access keys, APIs and control planes
- Analyzing cloud log, audit trail and telemetry (CloudTrail, Entra ID, Azure Activity Logs, GCP Cloud Audit Logs and similar)
- Investigating abuse of CI/CD pipelines, source code repositories, secrets and software supply chains
- Investigating Infrastructure-as-Code and automated deployment workflows
- Investigating containers and Kubernetes environments
- Overseeing host- and network-based investigations, including triage and containment, system recovery and remediation support, evidence collection and forensic analysis, and malware and root cause analysis
- Investigating a wide range of incident types, including cloud account and tenant compromise, unauthorised access and data breaches in cloud environments, ransomware and extortion incidents, Business Email Compromise (BEC), and software supply chain and pipeline compromise
- Developing and sharing domain expertise, with support to deepen technical knowledge and share it across the wider team
- Participating in an on-call rotation, providing 24x7x365 incident response coverage for clients
- Responding to a huge variety of incidents for both public and corporate clients
- Broadening security awareness into testing and advisory projects, in addition to deepening incident response expertise
Requirements
- 5+ years' experience in a technical cloud security, cloud engineering, DevSecOps, platform engineering or security operations role
- Hands-on experience of at least one major cloud platform
- Direct experience in a consulting or in-house incident response team is beneficial, but not essential
- Hands-on experience with AWS, Azure or GCP, including identity and access management, logging and audit trails, and cloud-native security tooling
- Experience with CI/CD platforms (such as GitHub Actions, GitLab CI or Azure DevOps), Infrastructure-as-Code and automation
- Strong technical foundations for investigating a range of incident types, including ransomware and intrusion scenarios
- Comfortable using scripting and automation (such as Python, PowerShell or Bash) to support investigations and analysis
- Experience with containers and Kubernetes is advantageous
- A strong investigative mindset, with the ability to work through complex problems using limited or incomplete information
- Comfortable operating in high-pressure, time-critical client situations
- Demonstrable knowledge of cyber threat actors and their tactics, techniques and procedures, particularly those targeting cloud identities, SaaS platforms and cloud-based infrastructure
- Able to communicate technical findings and risk clearly to non-technical client audiences in a professional consulting setting
- Must have permission to work in the UK by the start of their employment
Skills
- Cloud Security
- Cloud Engineering
- DevSecOps
- Platform Engineering
- Security Operations
- AWS
- Azure
- GCP
- Identity and Access Management
- Logging and Audit Trails
- Cloud-Native Security Tooling
- CI/CD platforms
- Infrastructure-as-Code
- Automation
- Ransomware Investigation
- Intrusion Investigation
- Scripting
- Python
- PowerShell
- Bash
- Containers
- Kubernetes
- Investigative Mindset
- Problem Solving
- Communication
- Risk Communication
- Cyber Threat Actor Knowledge
- TTPs
- Cloud Identity Security
- SaaS Platform Security
- Cloud-Based Infrastructure Security
Location
- United Kingdom
Work Type
- Flexible working practices
Experience Level
- 5+ years' experience
Education Level
- Cloud and platform certifications are particularly valued, such as AWS, Azure or GCP security and architecture certifications, Kubernetes (CKA/CKS) and Terraform.
- GCFE, GCFA, GCLD, GCIH, EnCE, CFSR, CISSP, GREM, OSCP and Security+ certifications are also beneficial.
Benefits
- 25 days holiday per year in addition to bank holidays (+1 day for every year of service up to a maximum of 30 days)
- Matching pension contribution up to 7% (up to a maximum of 14% combined)
- Financial education
- Life Insurance 4X Annual salary
- Fertility treatment leave – 5 days of leave per cycle of treatment per year
- Maternity leave – 26 weeks of full pay followed by 13 weeks of half pay
- Paternity leave – 6 weeks of full pay
- Private dental and medical insurance (taxable benefit)
- Virtual GP for you and your family members that live in the same household
- Gym discounts for you and your partner
- EAP programme for you and your immediate family
- Free access to the mindfulness app Headspace
About the Company
- S-RM is a global intelligence and cyber security consultancy.
- Since 2005, we’ve helped some of the most demanding clients in the world solve some of their toughest information security challenges.
- We’re committed to developing sharp, curious, driven individuals who want to think critically, solve complex problems, and achieve success.
- We also know that work isn’t everything. It’s about the lives and careers it helps us build.
- We’re immensely proud of this culture and we invest in our people’s wellbeing, learning, and ideas every day.
- Our Cyber Security division is the fastest-growing part of S-RM.
- Demand for our Advisory, Ethical Hacking and Incident Response practices has never been higher, and the threat landscape keeps changing.
- We are building a team to keep pace, one that responds quickly, innovates and keeps improving.
- We also don’t believe there is a typical cyber security professional. Our people include intelligence analysts, technical specialists, software developers, investigators and risk managers, so you will always be working alongside different perspectives and expertise that help you learn and grow.
Equal Opportunity
- We nurture a culture of equality, diversity and inclusion and we are dedicated to developing a workforce that displays a variety of talents, experiences and perspectives.