1 to 25 of 27 Contract Incident Response Jobs in the UK excluding London

Incident Response Lead Scottish Power HQ, Glasgow Flexible & Hybrid working pattern Negotiable rate, Inside IR35, PAYE and UMB options available Help us create a better future, quicker SP Energy Networks (SPEN) has kicked off an ambitious security transformation programme to transparently reduce risk, achieve compliance with NIS regulations … deliver a cyber resilient business and the Incident Response Lead is essential in achieving our goals. This role will be integrated into an active and ambitious global cyber security function, contributing to SPEN's cyber security purpose of delivering cyber resilient OT and IT, to enable a safe ...

opportunity has arisen in the Active Defence Incident Response Team within Digital Excellence (DEX) for a Cyber Threat Operations specialist. Supporting the Active Defence & Incident Response Manger in assisting DEX meet the challenges and demands of countering the Cyber Threat. The successful applicant will drive … cyber security environment and provide robust threat hunting, detection Engineering and analysis within a high performing team environment. Responsibilities: To support the Active Defence Incident Response Manager in assisting Information Management UK meet the challenges and demands of countering the Cyber Threat. Support for the operational functions ...

Analyst Contract | Up to £675 per day | Inside IR35 | London 3 days onsite Who youll be working with Youll join a Cyber Security Incident Response team within a major financial services organisation, helping investigate and respond to cyber threats. What youll be doing Investigating and responding to complex … security incidents, including malware, phishing, account compromise and data loss. Analysing SIEM and EDR/XDR alerts to identify threats and assess risk. Coordinating incident containment, eradication and recovery with technical teams. Conducting digital forensic investigations across endpoints, networks, identity and cloud environments. Carrying out threat hunting and improving ...

Cleared Major Incident & Problem Manager 6 Months initially 2 Days per week in Reading £Market Rate (Inside IR35) My client, a large defence based organisation are looking for a Major Incident & Problem Manager to take ownership of critical incident response and problem management within a complex … central point of coordination during major service disruptions, leading technical teams, suppliers and business stakeholders to restore services as quickly as possible. Alongside incident management, you will drive structured root-cause investigations, identify recurring issues and ensure lessons learned translate into meaningful service improvements. This role requires a confident ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. This … analysis and identifying potential threats or areas requiring further investigation. Working closely with external security service providers to ensure effective monitoring, alert management, and incident handling. Supporting cyber incident response activities as a technical security specialist. Analysing security metrics and trends, providing recommendations to improve security controls ...

system hardening baselines, and vulnerability management processes. Review OT network architecture, segmentation, data flows, and security dependencies. Enhance security monitoring, logging, threat detection, and incident escalation processes. Develop and maintain incident response, backup, recovery, business continuity, and cyber resilience arrangements. Coordinate restoration testing, cybersecurity exercises, and lessons … security control improvement programmes. Practical knowledge of OT asset management, privileged access, network segmentation, system hardening, vulnerability management, and security monitoring. Experience with incident response, disaster recovery, backup verification, and operational resilience. Understanding of legacy OT environments and the challenges of implementing security controls across unsupported or business ...

ISMS), policies, standards and governance processes. Lead compliance with NIS Regulations, GDPR and DB Group security requirements. Manage cyber security operations including threat monitoring, incident response, threat intelligence and vulnerability management. Develop Microsoft Sentinel, Microsoft Defender XDR and associated security monitoring capabilities. Provide governance across Azure, AWS, Microsoft … senior leadership reporting. What We Are Looking For: Demonstrable experience in cyber security, information security or IT risk management. Experience of security operations, incident response and security monitoring. Knowledge of governance, risk management, compliance frameworks and assurance processes. Experience securing cloud, endpoint and identity platforms, ideally within Microsoft ...

practical learning, and shaping the next generation of defence cyber capability. Key Responsibilities Training Delivery & Subject Matter Expertise Deliver high-quality cyber security and incident response training to learners with varying experience levels. Translate real-world cyber operations, threat analysis, and incident handling into clear, practical instruction. … competence. Key Skills & Experiences Live SC Clearance Strong hands-on knowledge of cyber threats, network security, risk management, and compliance frameworks. Deep understanding of incident response methodologies, detection, investigation techniques and tooling. Ability to communicate complex technical concepts in a clear, engaging and learner-friendly manner. Experience designing ...

Major Incident Manager Location: Sheffield Day rate: Up to 600 per day inside IR35 Duration: Until end of March 2027 (view a view to extend) Type: Full time, 5 days a week Hybrid: 2-3 days in the office, remainder remote working Are you an experienced Major Incident Manager with a background in infrastructure, networks, disaster recovery and IT service management? We are seeking a skilled Major Incident Manager to lead the restoration of critical IT services across complex enterprise environments. You'll coordinate high-severity incidents, drive service recovery, manage stakeholder communications and ensure continuous ...

Security Incident Management Analyst (x3) Onsite in Inverness or Preston £450 per day (negotiable) inside ir35 6 months duration Active SC clearance We are looking for Security Incident Management Analysts to join a major secure programme, supporting the governance and coordination of security incidents across a complex multi … security stakeholders to ensure incidents are effectively tracked, escalated, reported and evidenced. Key responsibilities: Track security incidents from identification through to closure Coordinate incident updates across multiple suppliers Monitor SLAs, resolution performance and escalation trends Produce incident reports, dashboards and governance packs Identify gaps in supplier reporting, ownership ...

streaming, ETL/ELT, batch and real-time pipelines, data contracts, lineage, cataloguing, quality rules, and scalable cloud storage. Cybersecurity: SOC workflows, threat hunting, incident response, detection engineering, vulnerability and exposure management, IAM/PAM, Zero Trust, cloud security, and security control mapping. Security standards: Practical … service accounts, roles, entitlements, devices, applications, and cloud resources. Threat-intelligence fusion linking indicators, malware, campaigns, threat actors, observed telemetry, vulnerabilities, and affected assets. Incident investigation timelines, alert correlation, root-cause analysis, blast-radius assessment, and recommended containment evidence. Risk-based vulnerability prioritization using exploit context, asset criticality, exposure ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

maintain secure, resilient infrastructure and platform services Champion security best practices across infrastructure design, configuration, and operations Support infrastructure hardening, vulnerability management, monitoring, and incident response activities Implement and maintain Infrastructure as Code solutions Collaborate with engineering, architecture, and security teams to improve platform reliability and security posture … working within complex enterprise environments Strong stakeholder engagement and problem-solving skills Desirable Experience Experience working within government or highly regulated environments Exposure to incident management and operational support activities Understanding of compliance-driven infrastructure delivery ...

vital services. What you'll be doing: Overseeing Security Operators during shifts, ensuring continuous security monitoring Performing initial investigations of potential threats using Security Incident and Event Management (SIEM) tools Monitoring SIEM systems for faults and anomalies Contributing to routine security incident management by identifying, prioritising, and escalating … customer services through proactive security measures What you'll bring: Proven experience in cyber security, with a solid understanding of security monitoring and incident response Technical leadership skills and the ability to guide and support team members Strong communication skills to clearly articulate findings and escalate issues effectively ...

leadership across cybersecurity transformation programmes. Essential Experience Cyber Security Architecture Strong cybersecurity background in one or more of: Identity & Access Management (IAM) Security Operations & Incident Response Threat & Vulnerability Management Cloud Security Infrastructure Security Network Security Application Security Data Security Cryptography Experience working on large-scale IT and cyber … Solution Architecture. Ability to communicate complex security concepts to both technical and non-technical stakeholders. Knowledge of security governance, risk management, threats, vulnerabilities, and incident response. Identity & Access Management 3+ years' experience with HashiCorp Vault (preferably on-prem). 3+ years' experience using Terraform, including development of complex reusable ...

decisions, and challenge choices that add complexity without adding value. Build to the client's technical standards and reference architecture. Support live services, leading incident response and longer-term resilience fixes. Work closely with product managers, designers, testers, and other team members to deliver user-focused services. Coach ...

Windows Services in line with agreed SLAs, escalating as necessary. Act as Tier 2/Tier 3 support for Windows-related issues, performing incident response and remediation. Coordinate with incident and technical managers during high-severity incidents. Identify root causes of recurring incidents and implement long-term ...

performance and cost Build security and compliance controls into pipelines and infrastructure Work closely with developers, testers and architects to keep releases smooth Support incident response and troubleshoot issues in live services Document processes, environments and runbooks Key Requirements Proven experience on NHS or UK government programmes Strong ...

deployment and integration of security tools, ensuring effective implementation and operational readiness. Monitor and maintain compliance with security standards, policies, and procedures. Participate in incident response investigations and contribute to security awareness and education initiatives. Identify security gaps and provide guidance on system and platform enhancements to improve ...

technical authorities and security stakeholders to demonstrate compliance with relevant defence security standards. Support through-life product security, including vulnerability management, patching, obsolescence and incident response. Provide technical security guidance to multidisciplinary engineering teams. Essential Experience Proven experience in Product Security Engineering, Systems Security Engineering or Secure by Design ...

design, develop, and maintain our SIEM data ingestion pipelines. In this role, you will leverage Elasticsearch and Kafka to boost our threat detection, incident response, and overall security posture. Key Responsibilities: Data Ingestion & Enrichment: Build and manage Elasticsearch/Kafka pipelines; integrate threat intelligence feeds. SIEM Development: Partner ...

This position focuses on cyber incident investigation, remediation, and operational security improvement. Be the escalation point of the external MSSP. This is a 1 year FTC role with high potential to extend. Client Details Our client is a well-established and respected professional services organisation with a strong national … analysis and identifying potential threats or areas requiring further investigation. Work closely with external security service providers to ensure effective monitoring, alert management, and incident handling. Perform hands-on remediation and provide recommendations to improve security controls and reduce risk. Conduct security reviews of systems, infrastructure, and operational processes. ...

SIEM Application Engineer, you'll support the design, development, operation and optimisation of an Elastic-based SIEM platform-strengthening threat detection, security monitoring and incident response. What you'll be doing: * Configure Elasticsearch pipelines to ingest security data (including from Kafka) and improve enrichment with threat intelligence and context … fast, relevant event retrieval; monitor and manage platform performance * Support security engineering activities across transitions and transformations * Work closely with Security Operations and related incident-response systems, staying current with emerging threats and best practice What you'll bring: * Proven experience in software engineering roles * Experience with some ...