1 to 25 of 27 Contract Incident Response Jobs in London

environments, helping clients protect critical services, systems, and data against evolving cyber threats. The successful candidates will play a key role in security monitoring, incident response, detection engineering, and threat analysis, working alongside Security Operations, Threat Intelligence, and Incident Response teams. You will … cyber security subject matter expert, helping to strengthen defensive capabilities while contributing to the continuous improvement of security operations, threat detection, and incident response functions. Key Responsibilities Security Monitoring & Incident Response Monitor and triage security alerts generated through SIEM and security tooling. Investigate and respond ...

solutions into operational security environments. Ensure operational teams have the controls, monitoring capabilities, and processes required to manage secure services. Collaborate with Security Operations, Incident Response, Engineering, and Platform teams to maintain secure systems. Drive continuous improvement within security monitoring and incident response capabilities. Stakeholder Engagement … supporting government departments, public sector organisations, or Critical National Infrastructure programmes. Knowledge of: Zero Trust Architecture Secure by Design Principles DevSecOps Methodologies Security Operations & Incident Response Identity & Access Management (IAM) Data Protection & Privacy Controls Enterprise Security Architecture Frameworks Familiarity with: NCSC Cloud Security Principles ISO 27001 NIST Cybersecurity ...

approve OT technology deployments from a cybersecurity perspective. Support the secure adoption of Industrial IoT (IIoT), cloud-connected systems, and remote access solutions. Incident Response & Operational Security Develop and maintain OT-specific incident response processes. Lead investigations and response activities for OT cybersecurity incidents. Coordinate ...

leadership position-not a hands-on technical analyst role. You will take full ownership of the Cyber Security Operations Centre (CSOC), driving strategy, managing incident response, and directing internal teams and external vendors. Key Responsibilities Define and lead the CSOC strategy, operations, and governance. Take command of major … incident response, managing remediation and stakeholder communication. Oversee threat intelligence, vulnerability management, and security monitoring capabilities. Manage relationships with external agencies, Managed Security Service Providers (MSSPs), and technology partners. What We Need From You Proven experience as a SOC Manager (previous leadership experience is essential; this ...

attack vectors and security weaknesses. Support security strategy initiatives by providing intelligence-led insights and risk assessments. Collaborate with security teams to improve detection, response, and mitigation capabilities. Support incident investigations and provide intelligence to assist with response activities. Assist in the development and enhancement of security … procedures (TTPs). Understanding of common attack frameworks such as MITRE ATT&CK and Cyber Kill Chain. Experience investigating security events and supporting incident response activities. Strong analytical, investigative, and problem-solving skills. Ability to assess cyber risks and communicate findings clearly to stakeholders. Excellent written and verbal ...

/2027 , based in London on a hybrid model (around 60% on site) , and would suit someone who already has strong SOC/incident response experience and is looking to take the next step in a critical national environment. Why this role stands out Length & stability: Contract … environments to determine the nature and scope of incidents. Support and implement containment, eradication and recovery actions. Help coordinate incidents and contribute to post-incident reviews and lessons learned. Identify and support continuous improvements to incident investigation and response processes. Work closely with other Cyber Defence functions ...

Cyber Security Consultant - Incident and Vulnerability Management Duration: 30/11/2026 Pay: up to £610 per day (umbrella) Location: Preston, London or Birmingham UK, Hybrid - 30% office 70% home CONTRACTOR MUST BE MOD SC CLEARED AND BE A SOLE UK NATIONAL Role Summary The Security Incident … transition to a multi-supplier (SIAM) model within a Defence environment. The role focuses on understanding, aligning and governing existing high-severity security incident management (S3/S4) and vulnerability management processes across suppliers. Ensuring a consistent, risk-based approach in line with client policy and regulatory requirements, supported ...

release processes. * Familiar with Observability functions, designing and operating end-to-end logging, metrics, tracing, dashboards, and alerting systems using ELK, Splunk, Prometheus, Grafana. * Incident-management leadership — owning major incident response, prioritisation, real-time coordination, stakeholder communication, and supporting post-incident reviews and reliability improvements. * Thorough ...

performing security team. About the Role As the SOC Manager, you will be responsible for leading the Security Operations Centre, ensuring effective security monitoring, incident response and threat intelligence capabilities while shaping the future direction of the SOC. Working closely with internal stakeholders, external vendors and managed security … experience with the ability to develop and evolve SOC capabilities. Demonstrated experience leading and managing high-performing cyber security teams. Strong understanding of security incident management and response processes. Experience delivering and managing effective security monitoring capabilities. Proven experience in threat intelligence, threat assessment and cyber risk management. ...

Cloud Hardening: Design secure baselines for Kubernetes and cloud-native resources. Vulnerability Management: Prioritize and remediate software supply chain risks from development to production. Incident Response: Scale detection and response solutions to triage alerts and stop malicious activity. Experience: 5 to 7+ years in cloud security engineering ...

Cloud Hardening: Design secure baselines for Kubernetes and cloud-native resources. Vulnerability Management: Prioritize and remediate software supply chain risks from development to production. Incident Response: Scale detection and response solutions to triage alerts and stop malicious activity. Experience: 5 to 7+ years in cloud security engineering ...

aligned to MOD security requirements Coordinate DevSecOps engineers, developers, testers and infrastructure teams Create and maintain security processes, technical standards and operational runbooks Support incident response, patching, risk management and compliance activity Expereince required: You'll need strong hands-on experience across: AWS | Kubernetes/EKS | Terraform | GitHub ...

patching and security updates. Create and maintain technical documentation and operational procedures. Collaborate with development teams to improve deployment processes and automation. Participate in incident response and on-call support activities. Work within established engineering standards, security controls and operational processes. Support a 24/7 operational environment ...

Security, SOC, Infrastructure, Cloud, IAM, Network and Service Management teams. Drive the implementation and enhancement of Security Operations capabilities, including SOC, SIEM, detection and response, vulnerability management and incident response. Manage the transition of new security capabilities into live operational services. Work closely with security architects and technical … within enterprise environments. Strong understanding of Security Operations and the delivery of operational cyber capabilities. Experience delivering programmes involving areas such as SOC, SIEM, incident response, threat detection, vulnerability management, security tooling or security service transformation. Proven experience transitioning security capabilities from project delivery into BAU operations. Strong ...

skills. Experience working within large-scale enterprise, government, or regulated environments. Desirable Experience Experience supporting Security Operations Centre (SOC) functions. Exposure to threat hunting, incident response, or cyber investigations. Knowledge of cloud security principles and modern enterprise architectures. Experience working with security monitoring and intelligence platforms. Familiarity with ...

cycle. Own the reliability of what you build - set up CI/CD and release processes, automated testing, monitoring and alerting, and lead the response when things break, so the systems scientists rely on stay dependable. Build and operate the model-serving infrastructure that exposes our models in production … management in cloud environments. Experience running production services at scale, including defining and working to service-level objectives (SLOs/SLIs). Experience with incident response and post-incident review, and with building the observability that supports it. Infrastructure-as-code (e.g. Terraform) for provisioning and maintaining ...

central topology and the replication between them. Own infrastructure as code, CI/CD pipelines and automated, repeatable deployments. Implement observability, monitoring, alerting and incident response across distributed clusters using Prometheus, Grafana and Loki. Harden systems and embed the security controls needed for accreditation, covering network policy, secrets ...

Support governance, risk, compliance, and assurance activities. Contribute to security roadmaps and continuous improvement initiatives. Provide guidance on cloud security monitoring, threat management, and incident response capabilities. Support managed cloud security service engagements where required. Essential Skills & Experience Proven experience working as a Security Architect within complex enterprise ...

pipelines and deployment automation using Azure DevOps . Monitor production services using Application Insights and Azure Monitor , diagnosing and resolving issues proactively. Participate in incident response and root-cause analysis when required. Identify technical debt and deliver targeted improvements within sprint capacity. Work closely with Product Owners … handling, and retry behaviour. Azure DevOps — CI/CD pipeline authoring, automated testing integration, and deployment management. Production operational experience — monitoring via App Insights, incident diagnosis, and root cause analysis. Excellent written communication skills — PR descriptions, PBI commentary, ADO notes, and incident updates must be unambiguous and complete. ...

logging using Prometheus and Grafana Supporting microservices-based environments and platform modernisation initiatives Driving automation, infrastructure as code and DevSecOps best practices Providing incident response, RCA and production support for critical services What we're looking for Strong AWS experience (EC2, S3, RDS, IAM, VPC) Kubernetes (EKS), Docker ...

recruit a Cyber Resilience Specialist to support a high-profile Operational Resilience programme.This role will focus on linking cyber threats, vulnerabilities, security controls and response scenarios to business service impacts and Operational Resilience outcomes. The successful candidate will work closely with security, technology operations, risk teams and service owners … tolerance assessments and resilience planning. Provide clear recommendations and actionable improvements to strengthen resilience capabilities. Essential Skills & Experience Experience in Cyber Resilience, Cybersecurity Operations, Incident Response, Threat Management or Vulnerability Management. Strong understanding of security controls, SOC operations, detection, response and recovery processes. Experience translating technical cyber ...

technology services across a multi-site organisation. The chosen Candidate will be responsible for TechBar and desktop support, hardware and software asset management, major incident response and the performance of third-party technology support providers. This is a key operational leadership role, combining service delivery, supplier management … standards, monitoring performance and leading regular service reviews. Own hardware and software asset management, including lifecycle, stock, deployment and licence compliance. Lead the technology response to P1 and P2 major incidents, coordinating resources, communications and resolution. Drive post-incident reviews, root-cause analysis and continuous improvement. ...

hyperautomation platforms like Torq, Tines, Swimlane, and Cortex XSOAR. Identify and automate manual, repetitive SOC activities to enhance efficiency. Develop automated triage, enrichment, and response workflows that make a difference. Improve integrations across security tools and collaboration systems. Establish best practises and governance for automation development. AI-Enabled Security … within the Security Operations team. Stay updated on emerging industry practises around Security Automation and AI SOCs. Essential Experience: Strong background in Security Operations, Incident Response, Detection Engineering, or Security Engineering. Hands-on experience with automation solutions and platforms (Tines, Swimlane, Cortex XSOAR, etc.). Proven track record ...

uses the servers' local storage to create a resilient shared storage pool) Experience managing production-critical infrastructure environments with high availability requirements. Experience with incident management, problem management, RCA, and continuous operational improvement. Knowledge of monitoring, observability, alerting, and performance management. Microsoft Hyper-V (Core Expertise) Deep hands … Familiarity with monitoring and observability platforms such as Azure Monitor, Prometheus, Grafana, Splunk, or similar tools. Experience supporting enterprise VDI environments. Understanding of ITIL Incident, Problem, Change, and Release Management. Experience working in regulated industries such as Banking or Financial Services. Experience & Qualifications 6+ years of infrastructure engineering experience ...

integrity and compliance with established standards. Identify, assess and manage risks across IT technology assets. Support improvements to system performance, resilience, lifecycle management and incident response. Collaborate with Cyber Security, Enterprise Architecture, Information Governance and other internal and external stakeholders. Support ongoing technology transformation, modernisation and continuous improvement initiatives. ...