1 to 25 of 210 Incident Response Jobs in the UK excluding London

Incident Response, Senior Management £110 - 130,000 + Benefits + Bonus North London (x4 days a month in office) Snr Manager, Incident Response - Lead a global cybersecurity incident response team, managing major cyber incidents and developing response capabilities. Requires demonstrable experience progressing from … hands-on technical response to leadership, leading teams through complex investigations, and a solid grasp of incident response processes and tools. This is a Manager role a Manager of IR technical teams, strategic mindset and responsibilities and requires solid gravitas to take incident command/command ...

Incident Response Lead Scottish Power HQ, Glasgow Flexible & Hybrid working pattern Negotiable rate, Inside IR35, PAYE and UMB options available Help us create a better future, quicker SP Energy Networks (SPEN) has kicked off an ambitious security transformation programme to transparently reduce risk, achieve compliance with NIS regulations … deliver a cyber resilient business and the Incident Response Lead is essential in achieving our goals. This role will be integrated into an active and ambitious global cyber security function, contributing to SPEN's cyber security purpose of delivering cyber resilient OT and IT, to enable a safe ...

client is a leading cyber security services provider. They are hiring a Senior Incident Response Investigator to lead investigations into targeted attacks for UK defence industry clients and to help shape the growth of their incident response practice. Senior Incident Response Investigator Location - Remote … attackers got in, then explaining what it means for the business in language senior leaders can act on. What you'll do Lead incident response investigations for client organisations and deliver high-quality reports with clear findings and guidance Maintain target utilisation on chargeable client projects Produce technical ...

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

opportunity has arisen in the Active Defence Incident Response Team within Digital Excellence (DEX) for a Cyber Threat Operations specialist. Supporting the Active Defence & Incident Response Manger in assisting DEX meet the challenges and demands of countering the Cyber Threat. The successful applicant will drive … cyber security environment and provide robust threat hunting, detection Engineering and analysis within a high performing team environment. Responsibilities: To support the Active Defence Incident Response Manager in assisting Information Management UK meet the challenges and demands of countering the Cyber Threat. Support for the operational functions ...

Incident Responder/DFIR Consultant Location: Gloucester or London - Hybrid/Flexible Salary: £60,000-£80,000 DOE Type: Permanent I'm working with a growing cyber security consultancy and MSSP looking for an Incident Responder/DFIR Consultant to join its specialist security team. You'll investigate … incidents across endpoint, identity, network and cloud environments. Conduct digital forensic investigations, including evidence collection and analysis. Coordinate containment, eradication and recovery activities. Develop incident response plans, playbooks and support tabletop exercises. Communicate investigation findings and recommendations directly to customers. What We're Looking For Hands-on incident ...

Incident Response Specialist (SOC) Location: London (Onsite) Duration: 12 Months Inside IR35 The Opportunity We're seeking an experienced Incident Response Specialist to provide hands-on Security Operations Centre (SOC) and Incident Response support within a fast-paced cyber security environment click apply ...

Analyst Contract | Up to £675 per day | Inside IR35 | London 3 days onsite Who youll be working with Youll join a Cyber Security Incident Response team within a major financial services organisation, helping investigate and respond to cyber threats. What youll be doing Investigating and responding to complex … security incidents, including malware, phishing, account compromise and data loss. Analysing SIEM and EDR/XDR alerts to identify threats and assess risk. Coordinating incident containment, eradication and recovery with technical teams. Conducting digital forensic investigations across endpoints, networks, identity and cloud environments. Carrying out threat hunting and improving ...

client is a leading cyber security services provider. They are hiring a Senior Incident Response Investigator to lead investigations into targeted attacks for UK defence industry clients and to help shape the growth of their incident response practice. Senior Incident Response Investigator Location - Remote ...

sharing knowledge and guiding good practice. Key functions/outputs: 1. Vulnerability Management, Reporting & Risk Prioritisation 2. Endpoint, Identity & Cloud Security Engineering (AWS) 3. Incident Response Leadership & Operational Security 4. Secure Configuration, Hardening & Compliance Assurance 5. Security Design Review, Change Impact Assessment & ST&V 6. Stakeholder Engagement, Governance … assure cloud security controls across networking, identity, logging/monitoring, and configuration management; validate guardrails and support secure landing zone patterns where applicable. Incident Response Leadership & Operational Security: Incident Identification: help to recognise and confirm potential incidents through alerts, logs, and user reports; apply sound judgement ...

estate. This is an exciting opportunity to join a forward-thinking organisation where security is a strategic priority. Working across security operations, engineering and incident response, you'll help detect and respond to emerging threats while continuously improving the tools, processes and controls that protect the business. … role offers a fantastic opportunity to influence security strategy whilst remaining hands-on with leading security technologies. What You'll Be Doing Security Operations & Incident Response Investigate, triage and respond to security alerts and incidents. Coordinate incident response activities to minimise business impact. Perform root-cause ...

estate. This is an exciting opportunity to join a forward-thinking organisation where security is a strategic priority. Working across security operations, engineering and incident response, you'll help detect and respond to emerging threats while continuously improving the tools, processes and controls that protect the business. … role offers a fantastic opportunity to influence security strategy whilst remaining hands-on with leading security technologies. What You'll Be Doing Security Operations & Incident Response Investigate, triage and respond to security alerts and incidents. Coordinate incident response activities to minimise business impact. Perform root-cause ...

minimizes organizational risk and reduces the impact of security breaches, by utilizing the latest industry standards and combining experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, you will be able to help clients contain security events, harden their environments, and transform their security … role, you will be responsible for driving remediation efforts by developing, coordinating, and executing the eradication, recovery, and remediation plan in parallel with active incident response. You will partner with key stakeholders, including the Incident Response (IR) team, IT operations, business units, and legal, to ensure that ...

monitoring, detecting, analysing, and responding to security threats and incidents. You will help drive continuous improvements across security operations while ensuring robust monitoring and incident response capabilities are maintained. Key Responsibilities Manage the day-to-day operation of the SIEM platform, including monitoring, administration, and optimisation. Develop, fine … tune, and maintain detection rules and use cases to improve threat visibility. Investigate security alerts and incidents through to resolution. Provide effective monitoring and incident response capability across the organisation. Analyse security events to identify trends, attack patterns, and emerging threats. Escalate and track security issues through ...

respond to, recover from and learn from cyber incidents. This is a varied position combining hands-on technical recovery testing with Business Continuity, Incident Response and Cyber Recovery planning. You could be testing the recovery of a critical system in the morning and working with stakeholders on Business … plans across the organisation, working closely with teams throughout IT and the wider business. Key responsibilities will include: Analysing business systems to understand cyber-incident impact, dependencies and recovery paths Maintaining and testing Business Continuity, Incident Response and Cyber Recovery plans Conducting practical system recovery and resilience ...

learn from cyber incidents. This is a varied position combining hands-on technical recovery, analysing, planning and testing and coordinating between Business Continuity, Incident Response and Cyber Recovery. You could be testing the recovery of a critical system in the morning and working with stakeholders on Business Continuity … plans across the organisation, working closely with teams throughout IT and the wider business. Key responsibilities will include: Analysing business systems to understand cyber-incident impact, dependencies and recovery paths Maintaining and testing Business Continuity, Incident Response and Cyber Recovery plans Conducting practical system recovery and resilience ...

stays hands-on. You'll manage a team of Information Security professionals and a group of security vendor partners. You'll drive improvements in incident response, cyber resilience, governance, risk management and security awareness. The role is highly visible, and you'll work closely with senior stakeholders … capability Managing, coaching and developing a team of Information Security professionals Managing security vendor partners and making sure they deliver Owning and improving security incident response, including communications and recovery Leading security investigations and overseeing remediation after incidents or identified risks Driving compliance with security policies, standards ...

control systems remain secure, compliant and operationally robust. You'll work closely with engineers, cybersecurity specialists, and external partners to monitor OT environments, support incident response, maintain asset and patch records, and contribute to risk, compliance and audit activities. The role also supports the ongoing improvement … safe, secure and continuous delivery of energy to millions. Location: UK-based hybrid role, Occasional travel to site. Day to day Support OT cybersecurity incident response, including investigation, evidence gathering, containment, remediation, and technical actions such as system isolation and patching, under CSIRT and GSOC guidance. Operate ...

role is the single point of ownership when incidents occur. You will directly oversee the offshore Production Support team, run on-call and incident response, and ensure fast detection, triage and restoration of services. This is not a passive monitoring role. You are expected to understand … offshore Production Support team and be the single point person when incidents occur, escalating only to Head Of when required. Run on-call and incident response; ensure fast detection, triage, and restoration. Maintain observability standards (logs, metrics, traces) and alert quality (low noise, high signal). Understand ...

Cleared Major Incident & Problem Manager 6 Months initially 2 Days per week in Reading £Market Rate (Inside IR35) My client, a large defence based organisation are looking for a Major Incident & Problem Manager to take ownership of critical incident response and problem management within a complex … central point of coordination during major service disruptions, leading technical teams, suppliers and business stakeholders to restore services as quickly as possible. Alongside incident management, you will drive structured root-cause investigations, identify recurring issues and ensure lessons learned translate into meaningful service improvements. This role requires a confident ...