1 to 25 of 1,663 Permanent Incident Response Jobs in the UK

Senior Manager/Associate Director - Cyber Incident Response Advisory & Incident Management This is a senior opportunity within a leading Cyber Risk & Security practice, working with major organisations to strengthen their ability to prepare for, manage and recover from complex cyber incidents. The role sits across both proactive … cyber incident response advisory and live incident management, helping clients improve resilience while supporting them through high-impact security events. You will work closely with senior stakeholders and C-suite leaders, advising on cyber incident preparedness, crisis and incident management, response strategies and organisational ...

Difenda. This was closely followed in December 2024 by the acquisition of US-based, Kivu Consulting, a global cyber security firm with world-leading incident response capabilities. Role Purpose: Incident Response is a core and strategic component of Quorum Cyber’s business. It is central … managed security services and MDR customers, providing specialist expertise when incidents require investigation, containment, remediation, and recovery beyond routine monitoring and response. The Incident Response Consultant supports investigations into cyber security incidents and, with appropriate guidance, takes ownership of defined investigative workstreams. The role provides sound technical analysis ...

Incident Response, Senior Management £110 – 130,000 + Benefits + Bonus North London (x4 days a month in office) Snr Manager, Incident Response - Lead a global cybersecurity incident response team, managing major cyber incidents and developing response capabilities. Requires demonstrable experience progressing from … hands-on technical response to leadership, leading teams through complex investigations, and a solid grasp of incident response processes and tools. This is a Manager role... a Manager of IR technical teams, strategic mindset and responsibilities and requires solid gravitas to take incident command/command ...

more. We combine deep technical expertise with outcome-driven services that accelerate secure cloud adoption, modernise threat protection and simplify compliance. Job Title Incident Response Analyst Location Hybrid; 1 day per month reporting in London office Employment Type Full-time Profile Summary CyberOne is seeking an experienced Incident Response Analyst to join our growing Cyber Security team. This is an exciting opportunity to play a critical role in protecting organisations from cyber threats by leading investigations, conducting digital forensics, performing threat hunting activities, and driving continuous improvements in incident detection and response. As an Incident ...

About the Role Reporting to the Director of Cyber Threat Management & Incident Response, this executive-level, hands-on senior security position works within the Information Security group and alongside the internal IT department. The role centres on ensuring consistent, measurable end-to-end triage and closure of security … events, and involves assessing, developing, and deploying detection capabilities to protect enterprise systems and data. The successful candidate will serve as the Incident Response Lead for European and Pacific regions, playing a key part in building a defensible environment to quickly detect, contain, and respond to threats. ...

human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection … response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with the visibility and scalability needed to stay ahead of evolving threats. Sophos goes to market with a global partner ecosystem, including Managed Service Providers (MSPs), Managed Security ...

About the Role Exciting opportunity to join the Security Incident Response Team, part of the Security function within DD&T. Our team is responsible for: Ensuring we effectively respond to cyber and physical security incidents; Mitigating potential security threats by identifying lessons learned and translating these into business … improvements; Developing Incident Response readiness plans and processes; Exercising and testing to ensure NESO is prepared to respond to the security threats we face. The Incident Response Specialist will lead the team's response to security incidents, following industry best practice incident management frameworks. ...

# Senior Incident Response AnalystSophos · sophos.comCategory: Incident Response/DFIRLocation: RemoteLevel: SeniorAbout UsSophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them … human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection ...

responds, and mitigates cybersecurity risk, protecting EY and client data, and our information management systems. The opportunity The Cyber & Investigative Services (CIS) Senior Cyber Incident Response Coordinator will exercise exemplary incident management techniques to coordinate incident response to cybersecurity events or incidents stemming from suspected … threats on a global scale. Candidates for the role must have an exceptional comprehension of cybersecurity incident response plans and coordination of activities, establish and foster relationships on a global scale, and have superb verbal and written communication skills. Additionally, candidates must have a sense of diplomacy, ability ...

human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection … response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with the visibility and scalability needed to stay ahead of evolving threats. Sophos goes to market with a global partner ecosystem, including Managed Service Providers (MSPs), Managed Security ...

will play a key role in helping organisations strengthen their cyber resilience through the delivery of Solis Security's professional services. Working across Cyber Incident Exercising (CIE), Managed Detection and Response (MDR) and Incident Response (IR), you will partner with clients, delivery teams and commercial stakeholders … offers the opportunity to work on a diverse range of engagements, supporting clients across multiple sectors and geographies. You'll lead and facilitate cyber incident exercises, support client onboarding and service adoption, contribute to incident triage activities and collaborate closely with our Security Operations and Incident Response ...

Contract Incident Response Analyst Location: Hybrid/London 2 days Per Week Contract Type: Contract Day Rate: Competitive We are seeking an experienced Incident Response Analyst to support a specialist Cyber Security function responsible for identifying, investigating and responding to cyber threats across a complex enterprise … environment. This role is ideal for a hands-on cyber security professional with strong experience in incident response, threat hunting, security operations and digital forensics. You will play a key role in protecting critical systems and data by managing security incidents through their full lifecycle while collaborating with ...

Tier 3 SOC Analyst, SeniorThe Opportunity:Are you looking for an opportunity to lead complex cyber incident investigations, provide senior technical direction during high-severity events, and help strengthen an enterprise cyber defense capability? Cyber threats continue to evolve in speed and sophistication, and effective response requires experienced … practitioners who can combine deep technical investigation skills with calm operational leadership and clear communication. We are looking for a senior Tier 3 Incident Response Analyst who can lead investigations from escalation through resolution or handover, operate effectively under time pressure, and work across SOC, incident response ...

life and work. Innovate with intention Build mission-ready tech that protects the nation. Are you looking for an opportunity to lead complex cyber incident investigations, provide senior technical direction during high-severity events, and help strengthen an enterprise cyber defense capability? Cyber threats continue to evolve in speed … sophistication, and effective response requires experienced practitioners who can combine deep technical investigation skills with calm operational leadership and clear communication. We are looking for a senior Tier 3 Incident Response Analyst who can lead investigations from escalation through resolution or handover, operate effectively under time pressure ...

Join Police Digital Service as NMC Cyber Incident Responder (Cloud Security) Salary starting at £55,000 per annum As a member of the National Management Centre (NMC) Cyber Incident Response team, you will lead and support the investigation of cyber security incidents affecting UK policing. This role … combines incident response, cloud security and stakeholder engagement, requiring the ability to identify, contain and investigate sophisticated cyber threats across traditional, hybrid and cloud-hosted environments. You will investigate incidents across cloud, endpoint, network and identity platforms, analysing security telemetry and attacker activity to determine scope, impact ...

Join Police Digital Service as NMC Cyber Incident Responder (Cloud Security) Salary starting at £55,000 per annum As a member of the National Management Centre (NMC) Cyber Incident Response team, you will lead and support the investigation of cyber security incidents affecting UK policing. This role … combines incident response, cloud security and stakeholder engagement, requiring the ability to identify, contain and investigate sophisticated cyber threats across traditional, hybrid and cloud-hosted environments. You will investigate incidents across cloud, endpoint, network and identity platforms, analysing security telemetry and attacker activity to determine scope, impact ...

Main Responsibilities: Support the delivery and ongoing improvement of incident response services, including maintaining technical documentation, playbooks, and response procedures for endpoint, network, and cloud environments. Follow established triage, investigation, and escalation processes when responding to alerts and security incidents across modern hybrid IT environments. Investigate security … including Android, iOS, iPadOS, and Windows devices, using approved tooling and documented processes. Device access may require a valid passcode. Work collaboratively with other incident responders and SOC analysts to ensure consistent, high-quality delivery across client environments. Support customers in improving their detection and response capabilities across ...

ensuring enterprise systems and data are protected. We are looking for candidates who have a passion for Cyber Security, threat detection, threat hunting, and incident response. You will be a key part of our efforts to build and support a defensible environment where we are able to detect, contain … technology, including early adoption of various cloud services along with the challenges of integrating those services into our security practice. Conduct day-to-day Incident Response activities as well as additional SOC related detection and response activities as required for a global environment Design, engineer, and implement ...

Manager Location: Corporate Offices/Hybrid (UK) Industry: Financial Services/Insurance (Regulated Environment) Type: Full-Time, Permanent Senior Security & Cyber Operations Manager | Operations, Incident Response & AI Innovation End-to-end operational ownership of enterprise security operations (SOC), incident response, threat detection, and cyber defence capabilities. … Drive detection engineering, SOAR automation, and AI integration across cloud, hybrid infrastructure, endpoints, and third-party services. Key focus: Incident leadership, MSSP/vendor management, response playbooks, metrics (MTTD/MTTR), and executive risk governance. About the Opportunity A leading UK financial services organisation is seeking a high ...

Security Engineer I, AWS Security Incident Response AWS Security Incident Response is looking for technical Security Engineers that are passionate about learning new concepts and work well within a team environment to keep customers secure. We value engineers that can work through ambiguity to identify suspicious … activity, lead security response, and can explain technical security concepts to non-technical audiences. Key job responsibilities Respond to threat findings that indicate unauthorized activity has occurred Identify, evaluate and communicate security threats, risks and vulnerabilities, and propose recommended remediation for security issues. Contribute to the development of security ...

enable GHD to deliver for clients and communities around the world. As cyber threats become more sophisticated and connected environments grow in complexity, effective incident response depends on more than technology alone. At GHD, we combine disciplined investigation, practical judgement and close collaboration to understand threats quickly, contain … enable GHD to deliver for clients and communities around the world. As cyber threats become more sophisticated and connected environments grow in complexity, effective incident response depends on more than technology alone. At GHD, we combine disciplined investigation, practical judgement and close collaboration to understand threats quickly, contain ...

enable GHD to deliver for clients and communities around the world. As cyber threats become more sophisticated and connected environments grow in complexity, effective incident response depends on more than technology alone. At GHD, we combine disciplined investigation, practical judgement and close collaboration to understand threats quickly, contain … enable GHD to deliver for clients and communities around the world. As cyber threats become more sophisticated and connected environments grow in complexity, effective incident response depends on more than technology alone. At GHD, we combine disciplined investigation, practical judgement and close collaboration to understand threats quickly, contain ...

Incident Response Engineer, UK Security Operations, Hampshire Google is looking for an Incident Response Engineer to join our Security Operations team based in Hampshire. You will be responsible for identifying, mitigating, and responding to security threats, ensuring the safety and integrity of Google's infrastructure … This role is not marked as remote. Company context Google has active SoftwareCareers listings in the current job inventory. Experience signal: Relevant experience in incident response or security operations.. Prepare examples for: Incident Response, Security Operations, Cybersecurity, Network Security, Threat Detection. Job Overview Incident Response ...

human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection … response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with the visibility and scalability needed to stay ahead of evolving threats. Sophos goes to market with a global partner ecosystem, including Managed Service Providers (MSPs), Managed Security ...

swiftly and effectively return to business following a cyber-attack. As a global market leader in ransomware post-breach remediation and cyber-attack first response, we consistently deliver results that exceed market standards for handling cyber-extortion and ransomware events. Our team collaborates with prominent global insurance carriers, leading … firms, and Fortune 1000 businesses. We're seeking a Senior Digital Forensics and Incident Response (DFIR) Consultant to join our team. In this role, you'll lead complex investigations, conduct forensic analyses across various platforms, and develop strategic incident response plans. If you're passionate about ...