22 of 22 Contract Incident Response Jobs in London

Incident Response Analyst We are seeking an experienced Incident Response Analyst to support the detection, triage, investigation, containment and resolution of cyber security incidents across a complex enterprise environment. Key Responsibilities Monitor and investigate alerts from SIEM, EDR/XDR, identity, email, cloud and network security … findings to MITRE ATT&CK where appropriate. Develop and execute threat hunts and contribute to detection rule, monitoring and logging improvements. Maintain incident records, investigation timelines, evidence and post-incident reports. Develop and maintain incident response playbooks, procedures and communication processes. Conduct post-incident reviews ...

Incident Response Specialist Working Hours: Wednesday to Saturday, 08:00 to 17:45 (UK Time) Rate: £500 - £600 per day inside IR35 - 12 month contract Remote - 2 days per month in the London office About the Role We are seeking an experienced Incident Response Specialist … opportunity to work in the Banking sector. This is an excellent opportunity for a cyber security professional looking to further develop their expertise in incident response, digital forensics, threat containment, and enterprise-scale cyber operations . You will work alongside experienced professionals across Threat Intelligence, Detection Engineering, Security ...

Role: Cyber Incident Manager Duration: 5 Months Location: UK Remote Day Rate: £500 Inside IR35 Active SC clearance required due to project restrictions Overview We are seeking an experienced Cyber Incident Manager to join a high-profile programme supporting a secure government environment. The successful candidate will lead … coordination, management, and resolution of cyber security incidents, ensuring rapid response, stakeholder engagement, and continuous service improvement. This role requires a proactive individual with strong communication skills, experience managing complex cyber incidents, and the ability to operate effectively within secure and highly regulated environments. Key Responsibilities Lead ...

aligned to MOD security requirements Coordinate DevSecOps engineers, developers, testers and infrastructure teams Create and maintain security processes, technical standards and operational runbooks Support incident response, patching, risk management and compliance activity Expereince required: You'll need strong hands-on experience across: AWS | Kubernetes/EKS | Terraform | GitHub ...

aligned to MOD security requirements Coordinate DevSecOps engineers, developers, testers and infrastructure teams Create and maintain security processes, technical standards and operational runbooks Support incident response, patching, risk management and compliance activity Expereince required: You'll need strong hands-on experience across: AWS | Kubernetes/EKS | Terraform | GitHub ...

delivery lifecycle Develop automation tooling using Ansible, Python and Bash Work closely with developers, product owners and stakeholders within Agile delivery teams Participate in incident response, root cause analysis and continuous service improvement activities Provide support within a 24/7 operational environment, including participation ...

standards, governance and technical assurance processes. - Leading engineering strategy, roadmaps and service modernisation initiatives. - Owning platform reliability, operational resilience and service performance. - Leading major incident response and supporting critical 24/7 services. - Managing technical risks, dependencies and architectural decisions. - Coordinating delivery across engineering, development, operations and supplier … containerised platforms. - Linux administration. - Platform engineering and infrastructure ownership. - Technical governance, assurance and engineering standards. - Live service management and 24/7 operational support. - Incident, change and problem management. - Leadership of engineering and cross-functional teams. - Major incident management experience. - Experience supporting secure, business-critical services. - GitLab, PostgreSQL ...

Monitor and triage security alerts within Splunk SIEM. Investigate security incidents including phishing attacks, credential abuse, malicious process activity, and suspicious network traffic. Support incident response activities through containment and escalation procedures. Maintain detailed security case documentation and investigation notes. Contribute towards operational metrics including MTTD and MTTR … detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with Windows, Linux, authentication systems, and endpoint security logs. Strong communication and stakeholder engagement skills. Desirable Skills ...

observability capabilities. * Ensure platform resilience, availability and operational readiness. * Manage configuration, secrets and environment controls. * Embed security best practice throughout the delivery lifecycle. * Support incident response, troubleshooting and continuous improvement activities. * Work across engineering and assurance teams to ensure environments meet security and operational requirements. * Drive automation ...

incidents and make informed operational decisions. What we're looking for: Strong hands on experience with Microsoft Defender XDR. Experience working within Security Operations, Incident Response or Detection & Response environments. Ability to explain technical concepts clearly to operational teams. Confidence delivering training and facilitating discussions. Commercial ...

delivery of a risk-based technical assurance programme, providing independent oversight of security controls across infrastructure, cloud, identity, applications, vulnerability management, data security and incident response capabilities. The role combines technical cyber security expertise, assurance methodology, stakeholder engagement and leadership. You'll engage with senior business and technology ...

functional requirements Identify and surface issues proactively and help drive improvements to code quality, observability, and system architecture Participate in operational ownership, including monitoring, incident response support, root-cause analysis, and follow-through on remediation work The role is based in London and requires ...

. Relevant Google Cloud certifications , such as Developer, Solutions Architect or Security. Experience implementing cloud security practices including secure coding, threat modelling, compliance and incident response. Open-source contributions or a strong track record of technical knowledge sharing. Experience leading multi-team initiatives spanning infrastructure, application and platform engineering. ...

/IP, firewalls, load balancers), and post-migration performance stabilization. 4. Support, Operations & Compliance Provide tier-3 production support and participate in major incident response and root cause analysis (RCA). Execute operational changes under standard ITIL frameworks (Incident, Problem, and Change Management). Maintain clear operational ...

Working with Cyber Security, Risk and Control and development teams to onboard applications and remediate vulnerabilities Supporting platform upgrades, patching, resilience, DR, monitoring and incident response What You'll Bring Strong hands-on experience of enterprise software build, packaging and deployment engineering Strong C# development skills … Server and on-premises hosting knowledge, working knowledge of Linux deployment patterns, and SQL Server database deployment (e.g. DACPAC) Experience working within formal change, incident and release management in a controlled, regulated environment Desirable: ASP.NET/ASP.NET Core, Entity Framework, NUnit/xUnit, ServiceNow integration, Terraform, Docker/Kubernetes ...

performance and cost Build security and compliance controls into pipelines and infrastructure Work closely with developers, testers and architects to keep releases smooth Support incident response and troubleshoot issues in live services Document processes, environments and runbooks Key Requirements Proven experience on NHS or UK government programmes Strong ...

performance and cost Build security and compliance controls into pipelines and infrastructure Work closely with developers, testers and architects to keep releases smooth Support incident response and troubleshoot issues in live services Document processes, environments and runbooks Key Requirements Proven experience on NHS or UK government programmes Strong ...

deployment and integration of security tools, ensuring effective implementation and operational readiness. Monitor and maintain compliance with security standards, policies, and procedures. Participate in incident response investigations and contribute to security awareness and education initiatives. Identify security gaps and provide guidance on system and platform enhancements to improve ...

unauthorised access. Advise on audit and logging design (for example pgaudit and database activity monitoring) so future incidents can be traced. Support live incident response, including performance tuning and fault finding on production databases. Review backup, disaster recovery, replication and archiving arrangements. Support database migrations and upgrades, including … Strong written reporting and stakeholder communication. Able to work independently at SFIA Level 5. Desirable: Experience of database or digital forensics, evidence handling or incident response. Experience in central government or other regulated environments. Infrastructure as code (Terraform). Data modelling and data warehouse experience (3NF, dimensional). Migration ...

deploy production changes across routing, firewall, and cloud network infrastructure Troubleshoot complex environments (BGP, OSPF, MPLS, multicast, HSRP) Provide real-time monitoring and incident response for global network infrastructure Lead escalations and advanced troubleshooting across network, cloud, and infrastructure domains Build automation, monitoring, and observability tooling via scripting ...

months | Large enterprise client We're looking for an experienced network engineer to join the operations team. This is day to day incident response and production support, not a project/build role. You'll be the technical SME for DDI/DNS and load balancing infrastructure, owning … extend Working pattern: 4 days/week, 40 hours, rota covering 07:00-18:00 What You'll Be Doing BAU operational support and incident triage for BlueCat DDI (DNS, DHCP, IPAM - on-prem and Cloud Resolver), F5 (LTM/GTM/APM), and VMware Advanced Load Balancer ...

technical support for Server, Storage, Data Centre, Virtual and Backup infrastructure platforms. Provide vendor engagement and technical troubleshooting. Monitor infrastructure health and availability. Manage incident response and problem resolution. Support hardware lifecycle management. Key Skills & Experience Essential: VMware vSphere Administration Proxmox Administration SAN Storage Administration and Infrastructure Technologies ...