24 of 24 Permanent Incident Response Lead Jobs in the UK excluding London

inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Incident & Production Response Lead Job LocationsUK-MaidenheadPosted Date15 hours ago(12/11/2026 05:37)Job ID2026-6950# of Openings1CategoryInformation TechnologyBanding5 … Purpose The Incident & Production Response Lead is responsible for improving how RWS detects, responds to and learns from production incidents across Product & Technology. The role will establish a consistent incident management approach, strengthen 24/7 production response, and work closely with SRE, Platform Engineering ...

allowing them to focus on delivering their business goals instead of the underlying infrastructure. Why we need this role We are seeking a Tech Lead - SOC Responder. This is an opportunity to meaningfully contribute to a highly visible security operations function with global impact upon our client, business units … partners, and customers. While working as part of this team, the successful individual will provide world class incident response functions to detect, protect, respond, and sustain operations within cyberspace. This role operates at a Tier 3 level , with the expectation that the individual has undeniable experience handling major ...

Energy Networks (SPEN) in Glasgow is seeking an Incident Response Lead to strengthen our cyber security capabilities by developing, maintaining, and improving incident playbooks, runbooks, and procedures across OT and IT environments. You will collaborate with incident responders, detection engineers, and wider cyber teams … ensure playbooks are clear, repeatable, and aligned with best practice. The role covers the full incident lifecycle, including post-incident reviews and exercises to #J-18808-Ljbffr ...

McGregor Boyall is seeking a Senior Manager of Cybersecurity Incident Response to lead a global incident response team across the US, UK and India. The role involves acting as a senior technical and operational leader for major cyber incidents and coordinating with stakeholders and partners. … ideal candidate has progression from hands-on response to leadership, with strong incident command, communications, and strategic capabilities, in a dynamic enterprise environment. #J-18808-Ljbffr ...

Inc. is seeking a Principal Security Engineer to lead the Security Incident Response Team (SIRT). You will provide expert leadership on incident handling, threat analysis, and vulnerability responses, while mentoring junior engineers and driving security content creation. In this role you will coordinate across product ...

Electronic Arts seeks a Software Engineer III (Site Reliability Engineering) in Guildford to own observability and incident response across Ventures services. You will design logging, metrics, tracing, and alerting, and lead post-incident reviews to drive improvements. The role involves cloud cost governance, security posture enhancements ...

Booz Allen Hamilton seeks a Senior Tier 3 Incident Response Analyst to lead complex investigations, provide senior technical direction, and strengthen enterprise cyber defense. You will stay hands-on with DFIR while coordinating case management, evidence handling, and stakeholder communications. Mentor junior analysts and help drive playbooks … detections improvements. The role emphasizes timely incident containment, eradication, recovery actions, and collaboration across SOC, infrastructure, #J-18808-Ljbffr ...

FASTEK Limited in the United Kingdom seeks a Security Operations role to monitor and manage IT security infrastructure, conduct vulnerability assessments, lead incident response, and implement security policies and procedures across the organization. You will ensure GDPR and ISO27001 compliance, work with SIEM tools for threat detection ...

Hampshire) seeks an Operational Security Manager to join the Solutions & Services Group. You will collaborate with global engineering teams to align security standards, manage incident response, and ensure regulatory reporting across EU and UK contexts. You will lead cross-functional incident handling, coordinate with Cybersecurity, Product ...

Addleshaw Goddard LLP is seeking a Cyber Security Lead to steer a high-performing security team, protect client data, and align IT security services with ISO27001 and ITIL frameworks. You will drive cloud security, vulnerability management and incident response across the firm. The role requires leadership, deep ...

LRQA is seeking a Principal Security Consultant to lead complex cyber incidents across the LRQA client base, guiding junior analysts and shaping incident response strategy in line with industry best practices. The role combines on-site and remote work across the UK, requires robust English communication, CREST ...

Morgan Stanley is seeking a Cyber Incident Manager to lead and support global cyber events, working within the Fusion Cyber Enterprise Management team. You will own incidents, coordinate with cyber, technology and business stakeholders, and drive timely communications under pressure in a remote-friendly, hybrid environment. The role … requires strong cybersecurity knowledge, communication and problem-solving skills, with experience in crisis management and incident response. #J-18808-Ljbffr ...

Consulting is seeking an experienced Incident Manager to coordinate IT incidents in an enterprise technology environment and help restore business-critical services in Glasgow/Kirkintilloch. This onsite role operates Monday–Friday with a gross salary around £3,450 per month (subject to confirmation). You will lead technical bridge calls, track incident priorities and actions, and contribute to post-incident reviews and knowledge records to prevent recurrence in a complex enterprise setting. #J-18808-Ljbffr ...

Maersk's Cyber team invites an experienced security professional to join a modern incident management and response function, combining digital forensics, threat hunting, detection engineering, and cyber security improvement. You will investigate complex incidents across endpoints, cloud, and OT, deliver root cause analyses, support uplift projects, and mentor ...

Consulting is seeking a Security Operations Manager to lead SOC analysts and incident response specialists within our Digital Trust & Cyber Security practice. You will manage live incidents, guide day-to-day SOC operations, and help clients modernise their security operations, improving SIEM, SOAR and EDR capabilities. ...

Zensec, part of the Zenzero Group, is seeking a Principal Security Consultant to lead high-impact DFIR engagements for clients facing sophisticated cyber threats, including ransomware and BEC. You will act as senior technical lead through the incident lifecycle, guiding triage, containment, analysis, and reporting. You will … collaborate with incident managers, SOC, insurers, legal partners, and client leadership, shaping methodology, tooling, and playbooks while mentoring consultants and growing #J-18808-Ljbffr ...

Forensic Focus in Manchester is seeking a Senior DFIR professional to investigate security incidents using our specialist platform, validate findings, and identify forensic evidence. You will work independently and collaborate with engineers to refine automated ...

Maersk is a global leader in logistics and shipper operations seeking a Cyber Incident Manager to lead and coordinate high-priority cyber incidents. You will drive decisions, coordinate cross-functional teams, and report on risks and business impact within a multinational environment. The role offers flexible remote working … opportunities to develop cyber capabilities, incident playbooks, and readiness through simulations and training while maintaining work-life balance. #J-18808-Ljbffr ...

Smart DCC in the United Kingdom is seeking a Lead Cyber Security Operations Analyst for a hybrid role in Manchester or London. You will lead complex cyber incident investigations, shape the future of our Security Operations Centre capabilities, and strengthen cyber resilience across the smart energy sector. ...

Morgan Stanley is seeking a Cyber Incident Manager in the UK to lead global cyber event response and incident management across the Fusion Response and Recovery organization. You will coordinate with cyber, technology and business stakeholders to rapidly mitigate risk and ensure regulatory and reputational ...

Bank of America is seeking a Cyber Incident Management Senior Specialist in Chester to coordinate response and recovery activities for information security incidents, engaging with global teams and executives to drive timely containment and remediation. The role requires leadership in triage, clear communication of findings, and mentoring ...

Vodafone Group Plc is seeking an Incident Specialist to play a pivotal role in the UK's largest mobile network. You will monitor technology performance, lead responses to incidents, and ensure smooth service delivery for customers. The ideal candidate will have experience in a customer-facing operations environment ...

Interface Recruitment is recruiting a SOC Shift Lead for a growing UK security operations centre in Leeds. The role combines hands-on incident triage with mentoring, escalation, and shift leadership responsibilities, guiding a small team of Associate SOC Analysts during your shift. You'll manage workloads, SLAs ...

Verizon is seeking a senior DFIR Consultant in EMEA to lead high-stakes cyber investigations and act as a crisis commander. You will direct host, network, and cloud forensics while ensuring evidence integrity, and serve as a trusted advisor on cyber resilience for key accounts. You will engage ...