26 to 50 of 757 Incident Response Jobs in London

Incident Response Engineer, UK Security Operations, Hampshire

Location
Greater London, England, United Kingdom
Incident Response Engineer, UK Security Operations, Hampshire Share Incident Response Engineer, UK Security Operations, Hampshire corporate_fare Google place London, UK X In most instances, this position requires in-person interviews as part of the hiring process. Must be a British citizen to meet compliance … more programming languages. Active, or the ability to obtain, a Developed Vetting (DV) UK security clearance. Preferred qualifications: Security+ or similar Cyber Security/Incident Response related certifications. Experience responding to security incidents on Kubernetes. Experience analyzing, triaging, and remediating common information security incidents. Understanding of common attacker ...

Cyber Incident Lead

Location
Greater London, England, United Kingdom
bring your ambition to work every day, which is why, at British Airways the sky is never the limit. The role: Cyber Incident Lead This role reports into the Cyber Incident Manager, and works with stakeholders across the organisation to ensure BA is able to effectively identify, respond … across the BA estate 24/7 365 days a year as part of an on call function Responsible for developing, maintaining, and managing incident response processes Ability to present on complex, technical concepts to a wide range of stakeholders of varying seniority and knowledge Confident to engage ...

Head of Information Security

Location
Greater London, England, United Kingdom
regulators, auditors, customers and technology teams whilst leading a high-performing security function. The successful candidate will lead the team responsible for security operations, incident management and response, vulnerability management, cyber risk management and security architecture, while working closely with outsourced security service providers. Key Accountabilities Information Security … security architecture Build strong relationships across technology and business functions to ensure security is embedded into decision-making and delivery processes Security Operations & Incident Response Own the operational effectiveness of Bravura's information security controls and services Lead incident management and cyber incident response activities ...

Senior Incident Response & Digital Forensics Analyst

Location
Greater London, England, United Kingdom
# Senior Incident Response & Digital Forensics Analyst*Bloomberg***London, England**Onsite · Senior · Full-time### The RoleBased within a global Cyber Security Operations Centre, this senior position leads end-to-end technical investigations into complex security incidents. Day-to-day work spans acquiring and analysing forensic images, examining memory … root cause and impact. The analyst also mentors teammates and contributes to tooling, playbooks, and detection development.### Skills & ExperienceCandidates must bring substantial hands-on incident response leadership, strong Windows and Linux disk and memory forensics, static and dynamic malware analysis, and deep OS internals knowledge. Proficiency with Splunk ...

Senior Information Security Analyst, UK

Location
Greater London, England, United Kingdom
Senior Information Security Analyst supports the day-to-day operations of the global Information Security program, with a focus on security alert triage, incident investigation, and operational effectiveness across the environment.This role is responsible for monitoring and responding to security alerts, performing assigned operational tasks, and optimizing security tooling … documentation, and escalation.* Perform daily operational information security tasks, including the management and resolution of ServiceNow incidents assigned to the Information Security team.* Support incident response efforts through investigation, coordination, and detailed documentation of findings.* Participate occasionally in an on-call rotation as required to support timely response ...

Cyber Risk Advisory Consultant, London Cyber security London

Location
Greater London, England, United Kingdom
Cyber Security practice is the newest and fastest-growing part of S-RM. The cyber sector is always evolving, and our Advisory, Testing, Incident Response and Forensics practices are in more demand than ever. We’re building a team to meet this challenge. This means we’re quick … Security Consulting At the core of the Associate role is hands‐on cyber security consulting. You will lead delivery across multiple domain areas, including: Incident Response Preparedness Cy ber incident response strategy, policy, and plan development. Simulation exercising at leadership and operational levels. Digital Resilience Business ...

Senior Cyber Analyst

Location
Greater London, England, United Kingdom
your unique needs. We help organisations improve processes such as threat management by building an identity management programme, and establishing prevention, detection and response capabilities to cyber-attacks. Role Summary The Senior Cyber Analyst is the senior technical lead within the Cyber Services function, responsible for complex cyber investigations … incident response, threat detection, and security platform optimisation. Acting as the highest technical escalation point within cyber operations, the role provides leadership, mentoring, and strategic direction to ensure customers maintain a strong and resilient security posture. Incident Response & Threat Management Lead the investigation and resolution ...

Cyber Defence Network Engineer

Location
City Of London, England, United Kingdom
forefront of cyber security, using industry-leading technologies to protect and support our clients. Alongside our SOC capability, we have cutting-edge incident response teams delivering rapid cyber breach investigations for clients through insurance panels and direct engagements, supporting organisations at their most critical moments. We invest heavily … teams. We’re seeking an experienced Network Engineer to join our Cyber Defence Centre. This is a hands‐on technical role that spans live incident response, security assessment and hardening, and the design and delivery of managed security solutions in client environments. You will ...

Security Engineer – Cloud & On-Prem (Hybrid Security)

Location
Greater London, England, United Kingdom
foundation in cyber security and Microsoft technologies who wants to build deeper capability across Azure security, Microsoft Defender, Sentinel, identity security, vulnerability management and incident response. Working within Platform Engineering, you will collaborate with Cyber Security, Infrastructure, Cloud, Network, Application, Service and Operations teams to investigate security events, implement … vulnerabilities and support security improvement and transformation initiatives. The role offers clear scope to develop expertise in cloud security, threat detection, security automation and incident response, with increasing technical ownership as your experience grows. Key Responsibilities Cloud & Infrastructure Security Administer and support security controls across Microsoft Azure, Microsoft ...

Security Engineer - Systems Integrator

Location
Greater London, England, United Kingdom
growing Security Operations function, with a strong focus on Microsoft Defender XDR and Microsoft Sentinel. The role covers security engineering, detection development, vulnerability management, incident response, and Microsoft 365 security, with direct client exposure. This is a primarily remote position with occasional attendance at the London or Cardiff … associated risks. Produce structured security reports and recommendations. Present technical findings to clients and stakeholders. Support client remediation and security improvement activities. Handle escalated Incident Response investigations. Support advanced security investigations from the triage team. Develop and improve Incident Response playbooks. Automate processes using Azure Logic ...

Senior Remediation Advisor, Mandiant STS

Location
City of Westminster, England, United Kingdom
minimizes organizational risk and reduces the impact of security breaches, by utilizing the latest industry standards and combining experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, you will be able to help clients contain security events, harden their environments, and transform their security … role, you will be responsible for driving remediation efforts by developing, coordinating, and executing the eradication, recovery, and remediation plan in parallel with active incident response. You will partner with key stakeholders, including the Incident Response (IR) team, IT operations, business units, and legal, to ensure that ...

Senior Remediation Advisor

Hiring Organisation
Hackajob Ltd
Location
South West London, London, United Kingdom
Employment Type
Permanent
minimizes organizational risk and reduces the impact of security breaches, by utilizing the latest industry standards and combining experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, you will be able to help clients contain security events, harden their environments, and transform their security … role, you will be responsible for driving remediation efforts by developing, coordinating, and executing the eradication, recovery, and remediation plan in parallel with active incident response. You will partner with key stakeholders, including the Incident Response (IR) team, IT operations, business units, and legal, to ensure that ...

Principal Software Engineer-AI

Location
Greater London, England, United Kingdom
agentic runtime, auth, data retrieval, eval tooling) Experience running AI systems in production at scale, including observability, cost and capacity planning, regression detection, and incident response for AI-powered applications Experience operating production distributed systems on AWS/Azure, with a strong grasp of reliability, observability, and incident response at scale Deep knowledge of cloud-native technologies, serverless applications, event-driven architectures, data and inference pipelines, relational, NoSQL, and vector databases, and modern software architecture patterns Proven track record of owning multi-year technical strategy and architectural roadmaps, guiding teams from AI prototype through production deployment ...

Incident response investigator

Location
Greater London, England, United Kingdom
motivations and methods adopted by a wide range of threat sources with a good understanding of how exploitation of systems occurs. In addition, supporting Incident Readiness activities (such as Tabletop sessions, Client Training, and Playbook creation), when not actively supporting investigations. Key Responsibilities Performing investigations for WithSecure clients … producing high quality reports to present findings and guidance. Maintaining target utilization on client chargeable projects whilst working as a Senior Incident Response Investigator. Producing output to highlight the technical competence of the company to a standard that can be published. Supporting your practice area in successful delivery ...

Engagement Manager

Location
City Of London, England, United Kingdom
with prominent global insurance carriers, leading law firms, and Fortune 1000 businesses. The Engagement Manager oversees complex client engagements related to cybersecurity, digital forensics, incident response, and post-breach remediation. This leadership role focuses on managing the entire client lifecycle, from initial engagement and strategy development to project … suite" executives, legal counsel, and boards of directors. Strategic advisory: Provide expert guidance on cyber resilience, digital risk identification, risk mitigation strategies, and incident response planning. Help clients navigate complex technical, legal, and regulatory landscapes. Project oversight: Supervise digital forensics and incident response teams, ensuring that ...

Cyber Incident Manager

Hiring Organisation
Experis
Location
London, United Kingdom
Employment Type
Contract
Contract Rate
£500/day
Role: Cyber Incident Manager Duration: 5 Months Location: UK Remote Day Rate: £500 Inside IR35 Active SC clearance required due to project restrictions Overview We are seeking an experienced Cyber Incident Manager to join a high-profile programme supporting a secure government environment. The successful candidate will lead … coordination, management, and resolution of cyber security incidents, ensuring rapid response, stakeholder engagement, and continuous service improvement. This role requires a proactive individual with strong communication skills, experience managing complex cyber incidents, and the ability to operate effectively within secure and highly regulated environments. Key Responsibilities Lead ...

Senior Cyber Security Analyst

Location
Greater London, England, United Kingdom
Cyber Security Analyst, you'll act as a technical authority within Security Operations, owning the design, development and continuous improvement of our detection and response capabilities. You'll lead the response to major security incidents, drive threat-informed detection engineering, influence security architecture decisions, and work closely with … expertise with leadership responsibilities, offering the opportunity to mentor junior analysts while contributing to strategic security initiatives across the business. Key responsibilities: Lead Security Incident Response by managing high‐severity security incidents end‐to‐end, coordinating containment and recovery activities, conducting post‐incident reviews, and acting ...

Cyber Operations Analyst - Internal Applicants Only

Location
Greater London, England, United Kingdom
traditional relationship and service-led banking powered by modern technology. Job Purpose Support the Bank's operational cyber security capability through cyber security monitoring, incident response coordination, vulnerability management, supplier assurance and operational reporting activities. To place the interests of customers at the centre of all activities … Conduct Rules. Job Description Key Responsibilities: Support the day-to-day oversight of outsourced cyber security services, including Managed Detection and Response (MDR), Security Operations Centre (SOC) and threat monitoring providers. Coordinate cyber security alerts, incidents and escalations, ensuring actions, decisions and outcomes are appropriately recorded and tracked. ...

Sr Manager, Cyber Defense

Location
Greater London, England, United Kingdom
handovers with the US and India locations. Manage the end-to-end lifecycle of EMEA security events — from detection through investigation and escalation to Incident Response (CIRT) to closure — in line with defined SLOs and KPIs, coordinating with market security and technology teams. Detection & Response Operations Identify … investigate intrusions and drive effective response using SIEM, SOAR, EDR/XDR, and email security solutions, supporting threat hunting and developing remediation plans across EMEA markets. Provide detection tuning and feedback loops to Detection Engineering and managed providers, and coordinate with CIRT and Cyber Threat Intelligence on handoffs ...

Security Monitoring & Detection Engineering Lead

Location
Greater London, England, United Kingdom
technical role. You'll own the architecture and engineering of Microsoft Sentinel and our wider security monitoring estate, lead complex investigations and technical incident response, and turn real-world adversary behaviour into effective detection and response. You'll work across Cyber Defence Operations, Technology and our Managed Security … across requirements, design, testing, deployment, tuning, performance assessment and retirement, supported by version control, peer review and controlled release practices. Build better detection and response You'll lead the engineering discipline behind our detection capability, continually improving how we identify, investigate and respond to threats. Lead the development ...

Senior AWS DevOps Engineer

Location
Greater London, England, United Kingdom
reliability, resilience and operational performance of large-scale platforms within a regulated environment. This role combines hands‐on engineering with technical leadership, production incident management, automation and reliability engineering. You will drive improvements across platform operations, embed reliability throughout the software development lifecycle and apply agentic AI to incident … operations and security teams to embed reliability into the software development lifecycle. Define and track KPIs for reliability, performance and operational efficiency. Lead production incident management, including detection, triage, escalation and resolution, working with development and support teams. Manage major incident response for critical outages, ensuring rapid ...

Senior Security Incident Manager London, GBR Posted today

Location
Greater London, England, United Kingdom
Senior Security Incident Manager Location London Business Area Legal, Compliance, and Risk Ref # 10054594 Description & Requirements Senior Security Incident Manager EMEA - London OR Dublin We Protect Bloomberg. The Bloomberg Security Incident Management (Sec IM) team provides consistent coordination and management of information security incidents and events … ensuring responses are efficient and comprehensive. The team also plays a key role in identifying methods to improve upon similar scenarios. Key partners include incident responders, threat intelligence, legal, vulnerability analysts, security program leads, and many other teams within the company. What is the role? A successful candidate will ...

Security Engineering Manager - Incident Response, AWS CloudOps

Location
Greater London, England, United Kingdom
Security Engineering Manager - Incident Response, AWS CloudOps Job ID: 10581501 | AWS EMEA SARL (UK Branch) We are looking for an experienced security leader to join the CloudOps team. As a security leader, you will own building and managing a team of incident managers and technical leaders, fostering … mitigate risks. We're looking for a leader that's highly passionate about the potential of cloud computing and building a high performing incident management team, working closely with our incident responders. Ideally you have a track record of delivering high quality technology products and services ...

Senior Security Incident Manager

Location
City Of London, England, United Kingdom
Protect Bloomberg. The Bloomberg Security Incident Management (Sec IM) team provides consistent coordination and management of information security incidents and events across Bloomberg's diverse lines of business and vast global network. What is the team? Sec IM works closely with teams across Bloomberg, coordinating, commanding, and documenting responses … ensuring responses are efficient and comprehensive. The team also plays a key role in identifying methods to improve upon similar scenarios. Key partners include incident responders, threat intelligence, legal, vulnerability analysts, security program leads, and many other teams within the company. What is the role? A successful candidate will ...

Cyber Response & Recovery Manager (Reactive DFIR) – German Speaking

Location
Greater London, England, United Kingdom
Role This hands-on position sits within a cyber advisory practice, focusing on reactive digital forensics and incident response. Day to day, the role involves managing medium to large incident response cases, supporting clients in building internal IR capabilities, contributing to runbooks and playbooks, and developing internal … tooling, processes, and team training when not engaged on active cases. Skills & Experience Candidates require a strong technical background in digital forensics and incident response, with proven incident management experience. The role demands eligibility for SC or DV security clearance. Opportunities exist to obtain recognised security certifications ...