26 to 50 of 503 Incident Response Jobs in the UK

SIEM, NDR, applications, security architecture, IAM, PAM encryption technologies, network security, Zero Trust, secure interconnection patterns and cyber security principles. Experience within Security Operations, Incident Response, Security Assurance, or GRC functions. Experience managing or overseeing MSSP, SOC activities, third party management. Strong understanding of: ISO 27001, SOC2, NIST … Cyber Security Framework, Incident Response methodologies, Cyber Security Governance, GDPR and regulatory compliance Certifications (one or more) CISSP CISM CRISC The Cyber Security Assurance & Incident Response Lead is responsible for strengthening and maintaining Telehouse's cyber security posture through effective security assurance, incident response ...

opportunity has arisen in the Active Defence Incident Response Team within Digital Excellence (DEX) for a Cyber Threat Operations specialist. Supporting the Active Defence & Incident Response Manger in assisting DEX meet the challenges and demands of countering the Cyber Threat. The successful applicant will drive … cyber security environment and provide robust threat hunting, detection Engineering and analysis within a high performing team environment. Responsibilities: To support the Active Defence Incident Response Manager in assisting Information Management UK meet the challenges and demands of countering the Cyber Threat. Support for the operational functions ...

business goals instead of the underlying infrastructure. Why we need this role Colt is redefining its cyber security strategy and building an industry-leading incident response function that operates across every level of the organisation. This role is central to that purpose and will combine hands-on cyber … investigation with incident leadership and coordination to take incidents from initial detection, business impact review, containment and incident review. You will work with internal teams and external partners to turn complex technical findings into business level findings management to take critical decisions. As an individual contributor, you will ...

Incident Responder/DFIR Consultant Location: Gloucester or London - Hybrid/Flexible Salary: £60,000-£80,000 DOE Type: Permanent I'm working with a growing cyber security consultancy and MSSP looking for an Incident Responder/DFIR Consultant to join its specialist security team. You'll investigate … incidents across endpoint, identity, network and cloud environments. Conduct digital forensic investigations, including evidence collection and analysis. Coordinate containment, eradication and recovery activities. Develop incident response plans, playbooks and support tabletop exercises. Communicate investigation findings and recommendations directly to customers. What We're Looking For Hands-on incident ...

Incident Response Analyst £650 - £750 GBP Hybrid WORKING Location: Central London, Greater London - United Kingdom Type: Contract Cyber Security Incident Response Analyst London (Hybrid) 6-Month Contract Inside IR35 We're looking for an experienced Cyber Security Incident Response Analyst to join a high ...

client is a leading cyber security services provider. They are hiring a Senior Incident Response Investigator to lead investigations into targeted attacks for UK defence industry clients and to help shape the growth of their incident response practice. Senior Incident Response Investigator Location - Remote ...

with hands-on experience securing endpoints, networks, identity systems, cloud infrastructure, and applications — someone equally comfortable architecting a control as they are leading the response to a live incident. Strong incident response experience is a significant asset for this role; penetration testing exposure is a plus. … systems (e.g., Active Directory, Entra ID, SSO/MFA).Act as a senior responder for security incidents: lead triage, investigation, containment, eradication, and post-incident review, and help mature the firm's incident response playbooks, tooling, and processes globally. Monitor, tune, and improve detection capabilities across SIEM ...

sharing knowledge and guiding good practice. Key functions/outputs: 1. Vulnerability Management, Reporting & Risk Prioritisation 2. Endpoint, Identity & Cloud Security Engineering (AWS) 3. Incident Response Leadership & Operational Security 4. Secure Configuration, Hardening & Compliance Assurance 5. Security Design Review, Change Impact Assessment & ST&V 6. Stakeholder Engagement, Governance … assure cloud security controls across networking, identity, logging/monitoring, and configuration management; validate guardrails and support secure landing zone patterns where applicable. Incident Response Leadership & Operational Security: Incident Identification: help to recognise and confirm potential incidents through alerts, logs, and user reports; apply sound judgement ...

estate. This is an exciting opportunity to join a forward-thinking organisation where security is a strategic priority. Working across security operations, engineering and incident response, you'll help detect and respond to emerging threats while continuously improving the tools, processes and controls that protect the business. … role offers a fantastic opportunity to influence security strategy whilst remaining hands-on with leading security technologies. What You'll Be Doing Security Operations & Incident Response Investigate, triage and respond to security alerts and incidents. Coordinate incident response activities to minimise business impact. Perform root-cause ...

estate. This is an exciting opportunity to join a forward-thinking organisation where security is a strategic priority. Working across security operations, engineering and incident response, you'll help detect and respond to emerging threats while continuously improving the tools, processes and controls that protect the business. … role offers a fantastic opportunity to influence security strategy whilst remaining hands-on with leading security technologies. What You'll Be Doing Security Operations & Incident Response Investigate, triage and respond to security alerts and incidents. Coordinate incident response activities to minimise business impact. Perform root-cause ...

forefront of cyber security, using industry-leading technologies to protect and support our clients. Alongside our SOC capability, we have cutting-edge incident response teams delivering rapid cyber breach investigations for clients through insurance panels and direct engagements, supporting organisations at their most critical moments. We invest heavily … teams. We're seeking an experienced Network Engineer to join our Cyber Defence Centre. This is a hands-on technical role that spans live incident response, security assessment and hardening, and the design and delivery of managed security solutions in client environments. You will ...

developed and rewarded here. Everything that makes you unique is welcome; join us and let’s build what’s next - together!As a Threat Response Engineer, you will lead and improve how we investigate, respond to, and learn from security incidents. This is a senior, hands-on role that … combines deep digital forensics and incident response expertise with strong threat intelligence knowledge. You will lead complex investigations, perform forensic analysis, conduct threat hunting, and leverage intelligence to understand who we are up against and how they operate.You'll help build a mature, intelligence-driven IR capability, focused ...

team of intelligent, motivated, and collaborative people, and help us make financial protection accessible to all. About the Role We are seeking a senior incident response ("DFIR") professional to lead complex cyber investigations, strengthen RGA's enterprise resilience, and guide security teams through critical incidents. This role combines … with new ideas. You are comfortable with engaging executives, legal teams, technology leaders, and technical responders during high-pressure situations. Key Responsibilities Lead enterprise incident response and cyber crisis engagements from detection through recovery. Direct host, network, cloud, identity, and SaaS investigations across Windows, Linux, macOS, Microsoft ...

minimizes organizational risk and reduces the impact of security breaches, by utilizing the latest industry standards and combining experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, you will be able to help clients contain security events, harden their environments, and transform their security … role, you will be responsible for driving remediation efforts by developing, coordinating, and executing the eradication, recovery, and remediation plan in parallel with active incident response. You will partner with key stakeholders, including the Incident Response (IR) team, IT operations, business units, and legal, to ensure that ...

minimizes organizational risk and reduces the impact of security breaches, by utilizing the latest industry standards and combining experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, you will be able to help clients contain security events, harden their environments, and transform their security … role, you will be responsible for driving remediation efforts by developing, coordinating, and executing the eradication, recovery, and remediation plan in parallel with active incident response. You will partner with key stakeholders, including the Incident Response (IR) team, IT operations, business units, and legal, to ensure that ...

minimizes organizational risk and reduces the impact of security breaches, by utilizing the latest industry standards and combining experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, you will be able to help clients contain security events, harden their environments, and transform their security … role, you will be responsible for driving remediation efforts by developing, coordinating, and executing the eradication, recovery, and remediation plan in parallel with active incident response. You will partner with key stakeholders, including the Incident Response (IR) team, IT operations, business units, and legal, to ensure that ...

join a busy cyber security operations team supporting a large-scale enterprise environment. This role will suit someone with a strong background in incident response, threat detection, investigation and remediation, who is comfortable operating as a senior escalation point within a Security Operations Centre. What … Doing: Acting as an L3 escalation point for complex security incidents and investigations Leading incident response activities from detection through to containment and remediation Conducting in-depth analysis of security alerts, events and threat intelligence Supporting and optimising SIEM use cases and detection engineering activities Performing threat hunting ...

Role: Cyber Incident Manager Duration: 5 Months Location: UK Remote Day Rate: £500 Inside IR35 Active SC clearance required due to project restrictions Overview We are seeking an experienced Cyber Incident Manager to join a high-profile programme supporting a secure government environment. The successful candidate will lead … coordination, management, and resolution of cyber security incidents, ensuring rapid response, stakeholder engagement, and continuous service improvement. This role requires a proactive individual with strong communication skills, experience managing complex cyber incidents, and the ability to operate effectively within secure and highly regulated environments. Key Responsibilities Lead ...

empower creators to own their own destiny. Klaviyo is looking for a Senior Security Engineer to add to our growing Detection & Response Team. This is an engineering role that spans the full detection and response lifecycle - leveraging software development practices to build detections, triaging alerts, lead investigations, respond … Detect and respond to cyber threats using security data lake, SIEM, and cloud platforms Respond to alerts, cyber threats, and drive end-to-end incident response investigations Perform digital forensic investigations to include collection and analysis of evidence Automate and codify detection and response workflows and processes ...

alongside the wider SOC to escalate and resolve confirmed threats, document findings clearly, and feed what you learn back into detections, tuning, and automation.Incident Response & DFIR: Support the investigation and response to confirmed security incidents, applying digital forensics and incident response skills across endpoint, cloud … identity data. Help with evidence collection and preservation, timeline reconstruction, containment, and root cause analysis, and contribute to post-incident reviews that turn lessons learned into improved detections and tooling.SIEM Engineering: Contribute to the engineering of our SIEM platform, including onboarding and normalising log sources, building and maintaining parsers ...

This is a rare opportunity for a hands-on cyber security professional who enjoys building security controls, improving SOC effectiveness, mentoring analysts, and leading incident response activities in a complex cloud environment. Approximately 60% of the role is focused on security engineering, with the remainder centred … leadership, detection engineering, and incident response. You'll lead a team of three analysts whilst remaining technically hands-on as the senior escalation point for complex investigations and security challenges. The Role As Security Engineering & SOC Lead, you will be responsible for designing, implementing, and continuously improving the security ...

security analysts and engineers to deliver high-quality services, respond to incidents, and improve operational performance. This role focuses on managing service delivery, supporting incident response, and ensuring operational efficiency within established frameworks and guidelines. Key ResponsibilitiesService DeliveryManage and oversee SOC operations and delivery of managed security services … clients. Monitor service performance against SLAs and KPIs, ensuring consistent and high-quality execution. Implement standard procedures and best practices for incident management, threat monitoring, and vulnerability assessments. Serve as the escalation point for client concerns and day-to-day operational issues. Conduct regular reviews and contribute to client ...

opportunity to rapidly accelerate your skills? Do you crave new and innovative work that actually matters to your customer? Do you have an Incident Response or Information Security background that you’re not fully utilizing? Are you capable of leading teams and interacting well with customers … learn from and mentor on a daily basis? What You'll Do: Conduct monitoring and perform in-depth analysis of security alerts. Exercise incident handling processes across Windows, Mac, and Linux platforms. Perform malware analysis. Perform remote remediation of malware or malicious activity. Develop and improve processes for incident ...

Team: Information Security Position overviewThe IT Sec Operations Lead will lead Squarepoint's global security operations capability, covering threat monitoring, detection and response, incident management, forensic readiness, cyber recovery, and vulnerability operations. The role will protect the firm's proprietary research, source code, models, data and trading technology … SaaS, Linux, containers, repositories and data flows. Lead material cyber incidents, coordinating investigation, containment, eradication, communications and recovery across relevant teams. Maintain and exercise response playbooks for insider threat, IP theft, ransomware, identity or cloud compromise, supplier compromise and data-integrity events. Establish forensic-readiness, evidence-handling and investigation ...

aligning with product security standards. Corporate Investigations: Ensure any Operating Companies investigations and data/evidence acquisitions is conducted following WPP polices and process. Incident Response: Coordinate and manage the response to security incidents within the region, working closely with the Enterprise Technology Cyber Incident Response … global and regional security standards and regulations (e.g., GDPR, ISO 27001).Experience in a global, multi-national organisation. Proven track record in risk management, incident response, and security policy implementation. Demonstrated experience in working with global teams and functions. Excellent communication and interpersonal skills, with the ability ...