1 to 25 of 61 Incident Response Jobs in Central London

pigeonholed into one narrow specialism. At CyPro, you’ll have the opportunity to get involved in a wide range of areas including monitoring, incident response, threat intelligence, detection engineering, automation and internal security operations. You’ll play a key role in our Security Operations Centre, delivering … monitoring, detection and response to our growing customer base. You’ll contribute to building out our capabilities, improving tooling and processes, and shaping how we operate as the function matures. As the team grows further, you’ll have the flexibility to focus more deeply on the areas that interest ...

pigeonholed into one narrow specialism. At CyPro, you’ll have the opportunity to get involved in a wide range of areas including monitoring, incident response, threat intelligence, detection engineering, automation and internal security operations. You’ll play a key role in our Security Operations Centre, delivering … monitoring, detection and response to our growing customer base. You’ll contribute to building out our capabilities, improving tooling and processes, and shaping how we operate as the function matures. As the team grows further, you’ll have the flexibility to focus more deeply on the areas that interest ...

operations. This is a technical role suited to an experienced analyst with strong engineering instincts, hands-on coding capabilities, and a deep understanding of incident response, detection engineering, and adversary tradecraft. This position includes approximately one week per month of on-call availability for high-priority incident … ideal for someone who has likely grown from an engineering background and can write scripts (Python, Bash) to automate, enhance, and refine detection and response workflows. Experience with Splunk, SIEM operations, cloud endpoints, networks, and detection engineering will be highly advantageous. NOTE: Candidates for this role must be eligible ...

team. This is an excellent opportunity to join a fast-paced cybersecurity environment, helping to protect critical infrastructure and enterprise systems through proactive monitoring, incident response, and threat analysis. Working as part of a 24/7 operational security function, you will play a key role in identifying … monitoring tools, network infrastructure, and endpoint technologies. Investigate and triage security alerts to identify malicious activity and determine attack methods and techniques. Follow established incident response and escalation procedures to contain and mitigate security risks. Ensure all incidents are accurately documented, including indicators of compromise, evidence, and investigation ...

play a key role in ensuring our systems and processes align with ISO 27001 and SOC 2 requirements, contributing to risk assessments, and supporting incident response activities. Working closely with product and engineering teams, you’ll help embed security into the design of our Microsoft Word … threat modelling, define non-functional security requirements, and review designs for security impact. Guide security considerations in our AI/LLM-enabled products. Risk & Incident Management Own the company-wide incident response plan and lead tabletop exercises. Perform ongoing risk assessments, vendor security reviews, and DPIAs. Ensure ...

intersection of cyber leadership, risk governance, and business engagement . This is a people-focused leadership role , managing a capable, self-sufficient team across incident response, engineering, and architecture-while acting as a key deputy to the CISO (EMEA). Key Responsibilities Lead and manage cyber teams across … incident response, engineering, and architecture Act as deputy to CISO , supporting risk, governance, and leadership forums Oversee incident response , providing executive-level updates Ensure security controls and architecture align to CISO strategy and risk appetite Manage senior stakeholders (CIO, COO, CFO) and translate risk into business ...

business continuity, disaster recovery, physical security, facilities management and estates, ensuring robust governance, compliance and operational excellence. You will also lead enterprise risk management, incident response, crisis management and resilience planning across the organisation. Key Responsibilities Lead the organisation's Security, Resilience and Facilities Management strategy. Oversee cyber … Drive enterprise risk assessment, threat management and control assurance activities. Ensure compliance with relevant legislation, regulatory requirements and recognised security standards. Lead crisis management, incident response and resilience testing exercises. Manage key suppliers and third-party assurance arrangements. Provide strategic advice and reporting to senior leadership and governance ...

work is hands-on and the environment moves fast. You'll own the security posture across a cloud-native, Azure-first stack, covering incident response, vulnerability management and day-to-day monitoring and defence. The tools are already in place. CrowdStrike, Sumo Logic, Tenable, Wiz. Your … looking for: 5+ years of hands-on security experience, ideally within a fast-moving or scaling environment Strong across security operations, vulnerability management and incident response Cloud-first mindset with solid Azure exposure. This is not an on-prem role Hands-on with modern security tooling. CrowdStrike, SIEM ...

edge security solutions across the business. This is a broad, hands-on role encompassing Identity and Access Management (IAM), device security, vulnerability management, and incident response - with a strong emphasis on building secure-by-default, zero trust environments at scale. The ideal candidate will have 5+ years … platforms - particularly Kubernetes , including securing workloads, managing RBAC, network policies, and secrets management - is highly desirable, as is a background in security operations or incident response and familiarity with threat intelligence and TTP frameworks. My client offers a highly competitive compensation package, including significant increases on current base ...

edge security solutions across the business. This is a broad, hands-on role encompassing Identity and Access Management (IAM), device security, vulnerability management, and incident response - with a strong emphasis on building secure-by-default, zero trust environments at scale. The ideal candidate will have 5+ years … platforms - particularly Kubernetes , including securing workloads, managing RBAC, network policies, and secrets management - is highly desirable, as is a background in security operations or incident response and familiarity with threat intelligence and TTP frameworks. My client offers a highly competitive compensation package, including significant increases on current base ...

engine room—executing day-to-day operations, streamlining workflows, and optimizing the Microsoft security and compliance stack. Key Responsibilities ️ Security Operations (2/3) Incident Response: Lead and coordinate security incident triage, active investigations, and containment activities across the enterprise estate. SIEM/XDR Engineering: Continually tune … techniques. Vulnerability Management: Oversee vulnerability scanning, remediation tracking, and control assurance activities. Privacy Operations (1/3) Smarter Data Discovery: Own the operational response for Subject Access Requests (SARs) and deletion requests. You will be expected to use Microsoft Purview's eDiscovery tools to efficiently filter massive data dumps ...

engine room—executing day-to-day operations, streamlining workflows, and optimizing the Microsoft security and compliance stack. Key Responsibilities 🛡️ Security Operations (2/3) Incident Response: Lead and coordinate security incident triage, active investigations, and containment activities across the enterprise estate. SIEM/XDR Engineering: Continually tune … techniques. Vulnerability Management: Oversee vulnerability scanning, remediation tracking, and control assurance activities. 🔐 Privacy Operations (1/3) Smarter Data Discovery: Own the operational response for Subject Access Requests (SARs) and deletion requests. You will be expected to use Microsoft Purview's eDiscovery tools to efficiently filter massive data dumps ...

high-performing SOC environments and driving continuous improvement. The Role This role also involves contributing to security service improvements and core operational processes, including incident, change, and problem management, as well as supporting the design, implementation, and review of security controls. There may occasionally be a requirement to support … performance, coverage, and detection fidelity Assess and improve SIEM architecture, including ingestion pipelines, parsing, and correlation logic Implement automation and orchestration (SOAR) to streamline response activities Log Source Onboarding & Integration Identify and onboard new log sources across cloud, network, endpoint, and application environments Develop custom parsers, connectors, and ingestion ...

join the firm in London. Responsibilities: * Undertake efficient, effective and proactive day-to-day cybersecurity operations to minimise the risk of a security incident, enabling the firm to do business. * Maintain the capability to react and respond to incidents in an effective and timely manner, minimising their impact … event data across the firms' systems, and procuring threat intelligence to inform the hunts. Key Skills: * Strong understanding of network and end point security, incident response, threat intelligence, and vulnerability management. * Experienced with security tools such as SIEM platforms, EDR/XDR solutions, firewalls, IDS/IPS. * Strong ...

downtime or data compromise. Areas of Responsibility: Own the security posture of the Spaceflux platform: threat modelling, vulnerability management, penetration test remediation, and incident response. Design and maintain secure CI/CD pipelines, integrating SAST, DAST, dependency scanning, and container security tooling. Manage cloud infrastructure (Azure) using infrastructure ...

downtime or data compromise. Areas of Responsibility: Own the security posture of the Spaceflux platform: threat modelling, vulnerability management, penetration test remediation, and incident response. Design and maintain secure CI/CD pipelines, integrating SAST, DAST, dependency scanning, and container security tooling. Manage cloud infrastructure (Azure) using infrastructure ...

security, ensuring appropriate technical, physical, and procedural safeguards are implemented and maintained. ● Ensure appropriate arrangements are in place for security risk assessment, vulnerability management, incident response and remediation. ● Embed secure-by-design principles into systems, products, and business processes. ● Manage security incidents, and lessons learned processes. ● Support secure ...

security, ensuring appropriate technical, physical, and procedural safeguards are implemented and maintained. ● Ensure appropriate arrangements are in place for security risk assessment, vulnerability management, incident response and remediation. ● Embed secure-by-design principles into systems, products, and business processes. ● Manage security incidents, and lessons learned processes. ● Support secure ...

tracing. Support large-scale server provisioning and platform operations. Collaborate closely with software engineering teams to deliver resilient, high-performance infrastructure. Participate in incident response, continuous improvement and mentoring within the team. What they're looking for Strong Linux administration experience (RHEL/CentOS/Ubuntu). Experience ...

tracing. Support large-scale server provisioning and platform operations. Collaborate closely with software engineering teams to deliver resilient, high-performance infrastructure. Participate in incident response, continuous improvement and mentoring within the team. What they're looking for Strong Linux administration experience (RHEL/CentOS/Ubuntu). Experience ...

home. What youll be doing: Building and maintaining scalable AWS infrastructure using IaC (Terraform, CloudFormation, CDK) Improving monitoring, logging, alerting, and overall observability Leading incident response, RCA, and preventative engineering Automating operational toil to free up engineering time Enhancing SLIs/SLOs/SLAs for critical services Partnering ...

GDPR, ISO 27001, SOC 2, and client security obligations Lead SaaS/vendor security assurance, including risk assessments, architecture reviews, and due diligence Support incident response, resilience, backup, and disaster recovery architecture patterns and standards Collaborate with Legal, Procurement, and Commercial teams to ensure governance and contractual controls ...

Launch Your Cyber Security Career – Job Guaranteed! Read all the information about this opportunity carefully, then use the application button below to send your CV and application. Cyber attacks are rising, and companies need skilled ...

reduce manual intervention. Working extensively in Linux-based environments supporting production infrastructure. Monitoring, troubleshooting, and resolving issues across distributed systems and services. Improving incident response, alerting, observability, and system resilience. Partnering with engineering and infrastructure teams to deliver robust operational support. Contributing to performance tuning and support … production support roles. Solid Python programming skills for automation and tooling. Deep hands-on Linux experience in operational environments. Strong understanding of ops, incident management, and service reliability. Experience supporting low-latency, high-availability, or mission-critical systems. A calm, structured approach to troubleshooting and problem-solving. Good communication ...

pipelines, and reliability function as the platform scales. Main headlines: Own the full infrastructure stack end-to-end: IaC, CI/CD, observability, and incident response in a regulated environment AWS-native setup with Terraform, Docker, GitHub Actions and Octopus Deploy: mature tooling, no legacy mess to untangle ...