Senior Incident Responder – Cyber Security (Regulated Environment)

Channel Recruitment is working with a leading organisation operating within a highly regulated healthcare environment to hire a Senior Incident Responder to join their cyber security function.

This is a hands-on, high-impact role at the centre of incident response activity, ideal for someone who enjoys deep technical investigation, fast-paced problem solving, and working on incidents that genuinely matter. If you’re not sure you meet every requirement but the role feels close, we’d still like to hear from you.

Working setup

This is a full-time, permanent role working standard weekday hours (with flexibility required during active incidents).

If you’re within commuting distance of the assigned office locations, the role follows a hybrid model with a minimum of 3 days per week on-site to support collaboration and incident response effectiveness.

What you’ll be doing

You’ll act as a lead responder for cyber security incidents, focusing on threats that could impact critical systems, sensitive data, or business continuity in a healthcare environment.

Your work will include:

Leading investigation and response for high-severity security incidents
Coordinating containment and remediation across technical and business teams
Analysing logs, EDR telemetry, and SIEM data across endpoint, cloud, and network environments
Investigating activity across Windows, Linux, and cloud platforms
Supporting live incident communications with technical and non-technical stakeholders
Driving improvements to incident response processes and playbooks
Using threat intelligence (internal + external sources) to enrich investigations
Contributing to detection engineering and improving alerting capability
Producing clear post-incident reports for security, risk, and compliance teams

What we’re looking for

Strong background in cybersecurity (hands-on incident response experience essential)
Solid experience with Windows and Linux investigations and network analysis
Strong understanding of EDR and SIEM tools
Experience working with incident response frameworks (e.g. NIST, MITRE ATT&CK)
Experience operating in large, complex enterprise environments
Confident communicator, especially during high-pressure incidents
Experience working in regulated environments is beneficial

Nice to have:

Exposure to healthcare or similarly regulated industries
Familiarity with clinical or enterprise systems and data flows
Understanding of compliance frameworks
Experience writing detection rules or custom security content

About the role

You’ll be part of a dedicated detection and response function, working to identify, contain, and resolve cyber threats that could impact operational systems and sensitive data.

This is a highly technical, fast-moving environment where you’ll work closely with SOC, IT, and wider business stakeholders. Your work will directly contribute to protecting critical services and ensuring operational continuity.

Interested?

We’re keen to speak with experienced incident responders, even if you don’t meet every single requirement. If the core of this role aligns with your background, apply or reach out for a confidential discussion.

Channel Recruitment Agency vacatures

Cyber Security Analyst

Never Miss a New Opportunity