1 to 25 of 56 Contract Incident Response Jobs in the UK

Incident Response Lead Scottish Power HQ, Glasgow Flexible & Hybrid working pattern Negotiable rate, Inside IR35, PAYE and UMB options available Help us create a better future, quicker SP Energy Networks (SPEN) has kicked off an ambitious security transformation programme to transparently reduce risk, achieve compliance with NIS regulations … deliver a cyber resilient business and the Incident Response Lead is essential in achieving our goals. This role will be integrated into an active and ambitious global cyber security function, contributing to SPEN's cyber security purpose of delivering cyber resilient OT and IT, to enable a safe ...

Incident Response Analyst We are seeking an experienced Incident Response Analyst to support the detection, triage, investigation, containment and resolution of cyber security incidents across a complex enterprise environment. Key Responsibilities Monitor and investigate alerts from SIEM, EDR/XDR, identity, email, cloud and network security … findings to MITRE ATT&CK where appropriate. Develop and execute threat hunts and contribute to detection rule, monitoring and logging improvements. Maintain incident records, investigation timelines, evidence and post-incident reports. Develop and maintain incident response playbooks, procedures and communication processes. Conduct post-incident reviews ...

Incident Response Specialist Working Hours: Wednesday to Saturday, 08:00 to 17:45 (UK Time) Rate: £500 - £600 per day inside IR35 - 12 month contract Remote - 2 days per month in the London office About the Role We are seeking an experienced Incident Response Specialist … opportunity to work in the Banking sector. This is an excellent opportunity for a cyber security professional looking to further develop their expertise in incident response, digital forensics, threat containment, and enterprise-scale cyber operations . You will work alongside experienced professionals across Threat Intelligence, Detection Engineering, Security ...

Role: Cyber Incident Manager Duration: 5 Months Location: UK Remote Day Rate: £500 Inside IR35 Active SC clearance required due to project restrictions Overview We are seeking an experienced Cyber Incident Manager to join a high-profile programme supporting a secure government environment. The successful candidate will lead … coordination, management, and resolution of cyber security incidents, ensuring rapid response, stakeholder engagement, and continuous service improvement. This role requires a proactive individual with strong communication skills, experience managing complex cyber incidents, and the ability to operate effectively within secure and highly regulated environments. Key Responsibilities Lead ...

Duration: 2 months Rate: £440 - £490 per day INSIDE IR35 Overview We are seeking an experienced Sentinel Defender to support the monitoring, investigation and response to cyber security incidents within a Microsoft security environment. The successful candidate will play a key role in protecting business-critical systems through proactive … threat detection, security monitoring and incident response activities. Working as part of a wider Security Operations or Cyber Defence team, you will leverage Microsoft Sentinel and the Microsoft Defender suite to identify, investigate and remediate security threats across complex enterprise environments. Key Responsibilities Monitor and investigate security alerts ...

capabilities across an enterprise security environment. You will translate cyber threat intelligence, threat modelling outputs, threat hunting findings, red/purple team exercises and incident learnings into high-fidelity detection logic that identifies sophisticated attacker behaviour while minimising false positives. This is a specialist detection engineering position focused … detection rules aligned with MITRE ATT&CK and organisational threat models. Translate threat intelligence, threat hunting insights, red/purple team findings and incident investigations into effective detection use cases. Develop behavioural, risk-based and correlated detections across endpoint, identity, cloud, network, email and application telemetry. Continuously tune ...

Cleared Major Incident & Problem Manager 6 Months initially 2 Days per week in Reading £Market Rate (Inside IR35) My client, a large defence based organisation are looking for a Major Incident & Problem Manager to take ownership of critical incident response and problem management within a complex … central point of coordination during major service disruptions, leading technical teams, suppliers and business stakeholders to restore services as quickly as possible. Alongside incident management, you will drive structured root-cause investigations, identify recurring issues and ensure lessons learned translate into meaningful service improvements. This role requires a confident ...

Incident Management Analyst Contract: 12 months Location: Chester Working Pattern Training Phase - First 2 Months Monday to Friday 7:00am - 4:00pm UK time Operational Shift Pattern Once fully operational, the role will operate on a rotating shift pattern: Shift A: Sunday to Thursday, 7:00am - 4:00pm Shift … Tuesday to Saturday, 7:00am - 4:00pm Role Overview We are seeking an experienced Incident Management Analyst to join a complex enterprise environment within the Financial Services sector. The successful candidate will be responsible for the end-to-end management of enterprise incidents, with a particular focus on major ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. This … analysis and identifying potential threats or areas requiring further investigation. Working closely with external security service providers to ensure effective monitoring, alert management, and incident handling. Supporting cyber incident response activities as a technical security specialist. Analysing security metrics and trends, providing recommendations to improve security controls ...

system hardening baselines, and vulnerability management processes. Review OT network architecture, segmentation, data flows, and security dependencies. Enhance security monitoring, logging, threat detection, and incident escalation processes. Develop and maintain incident response, backup, recovery, business continuity, and cyber resilience arrangements. Coordinate restoration testing, cybersecurity exercises, and lessons … security control improvement programmes. Practical knowledge of OT asset management, privileged access, network segmentation, system hardening, vulnerability management, and security monitoring. Experience with incident response, disaster recovery, backup verification, and operational resilience. Understanding of legacy OT environments and the challenges of implementing security controls across unsupported or business ...

ISMS), policies, standards and governance processes. Lead compliance with NIS Regulations, GDPR and DB Group security requirements. Manage cyber security operations including threat monitoring, incident response, threat intelligence and vulnerability management. Develop Microsoft Sentinel, Microsoft Defender XDR and associated security monitoring capabilities. Provide governance across Azure, AWS, Microsoft … senior leadership reporting. What We Are Looking For: Demonstrable experience in cyber security, information security or IT risk management. Experience of security operations, incident response and security monitoring. Knowledge of governance, risk management, compliance frameworks and assurance processes. Experience securing cloud, endpoint and identity platforms, ideally within Microsoft ...

operation, and continuous improvement of a critical Security Operations Centre (SOC) supporting MOD programme. You will be hands on responsible for Vulnerability Management, incident management, and SOC services meet agreed quality and assurance standards within a highly regulated environment. Key Responsibilities Act as the escalation point for all security … incidents Conduct Vulnerability Management and incident response activities Prepare report incidents and SOC performance metrics to SOC Leadership Work hands on with SIEM detection tooling and prepare reporting used for the use-case development Contribute to reporting and configuration changes, enhancements, and operational alignment Ensure incident workflows ...

consultants related programmes. Principal Preferred Requirements Cybersecurity Expertise: Significant experience and proven technical depth within one of the following domains of cybersecurity; security operations & incident response, threat & vulnerability management, identity & access management, cryptography, infrastructure, network, application, data, cloud Broad background across information technology with the ability to communicate … technical SMEs at a comfortable level Excellent command of cybersecurity organisation practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies Keen understanding of national and international laws, regulations, policies and ethics related to financial industry cybersecurity Experience and understanding of both ...

Single Sign-On (SSO) solutions. Implement Role-Based Access Control (RBAC) and least-privilege access models across enterprise platforms. Support identity threat detection, incident response, monitoring, and automation activities through IAM and PAM integrations. Your Profile Essential skills/knowledge/experience: Experience in Identity and Access Management … Understanding of Role-Based Access Control (RBAC), least-privilege principles, and Zero Trust security concepts. Experience in identity security monitoring, identity threat detection, and incident response practices. Proficiency in PowerShell scripting and automation for IAM/PAM administration and integration activities. Desirable skills/knowledge/experience: Experience ...

organisational data and services Providing expert advice on secure environments, configuration management and infrastructure hardening Supporting identity and access management, vulnerability management, monitoring and incident response activities Maintaining resilient and highly available services in line with departmental policies and security standards Driving continuous improvement and automation to enhance … design Experience with infrastructure hardening, configuration management and vulnerability management Knowledge of identity and access management principles and security best practice Understanding of monitoring, incident response and operational risk management Ability to identify opportunities for automation and continuous service improvement Excellent communication skills, with the ability to provide ...

Major Incident Manager Location: Sheffield Day rate: Up to 600 per day inside IR35 Duration: Until end of March 2027 (view a view to extend) Type: Full time, 5 days a week Hybrid: 2-3 days in the office, remainder remote working Are you an experienced Major Incident Manager with a background in infrastructure, networks, disaster recovery and IT service management? We are seeking a skilled Major Incident Manager to lead the restoration of critical IT services across complex enterprise environments. You'll coordinate high-severity incidents, drive service recovery, manage stakeholder communications and ensure continuous ...

Security Incident Management Analyst (x3) Onsite in Inverness or Preston £450 per day (negotiable) inside ir35 6 months duration Active SC clearance We are looking for Security Incident Management Analysts to join a major secure programme, supporting the governance and coordination of security incidents across a complex multi … security stakeholders to ensure incidents are effectively tracked, escalated, reported and evidenced. Key responsibilities: Track security incidents from identification through to closure Coordinate incident updates across multiple suppliers Monitor SLAs, resolution performance and escalation trends Produce incident reports, dashboards and governance packs Identify gaps in supplier reporting, ownership ...

streaming, ETL/ELT, batch and real-time pipelines, data contracts, lineage, cataloguing, quality rules, and scalable cloud storage. Cybersecurity: SOC workflows, threat hunting, incident response, detection engineering, vulnerability and exposure management, IAM/PAM, Zero Trust, cloud security, and security control mapping. Security standards: Practical … service accounts, roles, entitlements, devices, applications, and cloud resources. Threat-intelligence fusion linking indicators, malware, campaigns, threat actors, observed telemetry, vulnerabilities, and affected assets. Incident investigation timelines, alert correlation, root-cause analysis, blast-radius assessment, and recommended containment evidence. Risk-based vulnerability prioritization using exploit context, asset criticality, exposure ...

aligned to MOD security requirements Coordinate DevSecOps engineers, developers, testers and infrastructure teams Create and maintain security processes, technical standards and operational runbooks Support incident response, patching, risk management and compliance activity Expereince required: You'll need strong hands-on experience across: AWS | Kubernetes/EKS | Terraform | GitHub ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

operation and continuous improvement of EMBL-EBIs cybersecurity capabilities. Working alongside infrastructure, platform and service teams, you will be responsible for vulnerability management, incident response, security monitoring, operational security processes and the implementation of technical security controls. This is a hands-on technical role focused on protecting EMBL … Tenable, Qualys or Rapid7. Familiarity with SIEM and security automation platforms such as Microsoft Sentinel, Splunk or Elastic. Experience implementing endpoint detection and response (EDR/XDR) technologies. Understanding of Identity Governance and Privileged Access Management. Knowledge of cyber security frameworks and implementing and maintaining effective security controls. Experience ...

aligned to MOD security requirements Coordinate DevSecOps engineers, developers, testers and infrastructure teams Create and maintain security processes, technical standards and operational runbooks Support incident response, patching, risk management and compliance activity Expereince required: You'll need strong hands-on experience across: AWS | Kubernetes/EKS | Terraform | GitHub ...

delivery lifecycle Develop automation tooling using Ansible, Python and Bash Work closely with developers, product owners and stakeholders within Agile delivery teams Participate in incident response, root cause analysis and continuous service improvement activities Provide support within a 24/7 operational environment, including participation ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

standards, governance and technical assurance processes. - Leading engineering strategy, roadmaps and service modernisation initiatives. - Owning platform reliability, operational resilience and service performance. - Leading major incident response and supporting critical 24/7 services. - Managing technical risks, dependencies and architectural decisions. - Coordinating delivery across engineering, development, operations and supplier … containerised platforms. - Linux administration. - Platform engineering and infrastructure ownership. - Technical governance, assurance and engineering standards. - Live service management and 24/7 operational support. - Incident, change and problem management. - Leadership of engineering and cross-functional teams. - Major incident management experience. - Experience supporting secure, business-critical services. - GitLab, PostgreSQL ...