1 to 25 of 106 Incident Response Jobs in Central London

more. We combine deep technical expertise with outcome-driven services that accelerate secure cloud adoption, modernise threat protection and simplify compliance. Job Title Incident Response Analyst Location Hybrid; 1 day per month reporting in London office Employment Type Full-time Profile Summary CyberOne is seeking an experienced Incident Response Analyst to join our growing Cyber Security team. This is an exciting opportunity to play a critical role in protecting organisations from cyber threats by leading investigations, conducting digital forensics, performing threat hunting activities, and driving continuous improvements in incident detection and response. As an Incident ...

will play a key role in helping organisations strengthen their cyber resilience through the delivery of Solis Security's professional services. Working across Cyber Incident Exercising (CIE), Managed Detection and Response (MDR) and Incident Response (IR), you will partner with clients, delivery teams and commercial stakeholders … offers the opportunity to work on a diverse range of engagements, supporting clients across multiple sectors and geographies. You'll lead and facilitate cyber incident exercises, support client onboarding and service adoption, contribute to incident triage activities and collaborate closely with our Security Operations and Incident Response ...

Incident Response Analyst £650 - £750 GBP Hybrid WORKING Location: Central London, Greater London - United Kingdom Type: Contract Cyber Security Incident Response Analyst London (Hybrid) | 6-Month Contract | Inside IR35 We're looking for an experienced Cyber Security Incident Response Analyst to join a high …/XDR, cloud, identity, endpoint and network security tools. Analyse malicious activity including phishing, ransomware, account compromise, insider threats and unauthorised access. Coordinate incident containment, remediation and recovery with technical teams and key stakeholders. Carry out digital forensic investigations, preserving and analysing evidence from endpoints, servers, cloud platforms ...

build resilience against cyber threats. We're seeking a Senior DFIR Investigator to join our Global Security Services team. Working at the forefront of incident response, you'll lead complex investigations for organisations around the world, helping clients understand what happened, contain threats and recover with confidence. This … actor activity, attack techniques, malware and potential data exposure. Produce high‐quality forensic reports, attack timelines and actionable recommendations for clients. Deploy and utilise incident response tooling to collect, preserve and analyse forensic evidence. Provide trusted technical guidance to clients throughout the incident response lifecycle. Work ...

Incident Response Analyst £650 - £750 GBP Hybrid WORKING Location: Central London, Greater London - United Kingdom Type: Contract Cyber Security Incident Response Analyst London (Hybrid) 6-Month Contract Inside IR35 We're looking for an experienced Cyber Security Incident Response Analyst to join a high ...

forefront of cyber security, using industry-leading technologies to protect and support our clients. Alongside our SOC capability, we have cutting-edge incident response teams delivering rapid cyber breach investigations for clients through insurance panels and direct engagements, supporting organisations at their most critical moments. We invest heavily … teams. We’re seeking an experienced Network Engineer to join our Cyber Defence Centre. This is a hands‐on technical role that spans live incident response, security assessment and hardening, and the design and delivery of managed security solutions in client environments. You will ...

minimizes organizational risk and reduces the impact of security breaches, by utilizing the latest industry standards and combining experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, you will be able to help clients contain security events, harden their environments, and transform their security … role, you will be responsible for driving remediation efforts by developing, coordinating, and executing the eradication, recovery, and remediation plan in parallel with active incident response. You will partner with key stakeholders, including the Incident Response (IR) team, IT operations, business units, and legal, to ensure that ...

with prominent global insurance carriers, leading law firms, and Fortune 1000 businesses. The Engagement Manager oversees complex client engagements related to cybersecurity, digital forensics, incident response, and post-breach remediation. This leadership role focuses on managing the entire client lifecycle, from initial engagement and strategy development to project … suite" executives, legal counsel, and boards of directors. Strategic advisory: Provide expert guidance on cyber resilience, digital risk identification, risk mitigation strategies, and incident response planning. Help clients navigate complex technical, legal, and regulatory landscapes. Project oversight: Supervise digital forensics and incident response teams, ensuring that ...

plans and security reporting. Support supplier and third-party security reviews, client security questionnaires, tenders, requests for proposal and assurance activities. Participate in security incident response activities, including monitoring, triage, investigation support, containment, recovery and post‐incident reviews. Maintain incident response plans, playbooks, escalation routes … Active Directory, including user accounts, permissions, groups and licences. Experience supporting Windows devices, productivity applications, endpoint security tools and workplace technology. Working knowledge of incident response, vulnerability management, identity and access management, security monitoring, patch management, networking, endpoints, enterprise infrastructure and cloud services. Experience maintaining service desk, asset ...

Protect Bloomberg. The Bloomberg Security Incident Management (Sec IM) team provides consistent coordination and management of information security incidents and events across Bloomberg's diverse lines of business and vast global network. What is the team? Sec IM works closely with teams across Bloomberg, coordinating, commanding, and documenting responses … ensuring responses are efficient and comprehensive. The team also plays a key role in identifying methods to improve upon similar scenarios. Key partners include incident responders, threat intelligence, legal, vulnerability analysts, security program leads, and many other teams within the company. What is the role? A successful candidate will ...

supporting secure AI adoption, reviewing LLM‐based applications, advising on SOC automation, developing AI security guardrails, and helping organisations use AI to enhance detection, response, reporting and risk management. The right candidate will combine strong cyber security fundamentals with curiosity and practical knowledge of AI security. You should … business risk. Support the design and implementation of security controls across areas such as access management, data protection, logging and monitoring, vulnerability management, incident response and third‐party risk. Help clients interpret security requirements, assess control maturity and develop actionable improvement roadmaps. Translate technical findings into clear, business ...

drive automation efforts to reduce operational toil, and help build resilient systems that deliver exceptional customer experiences. You will leverage your expertise in observability, incident response, and distributed systems to proactively identify and resolve reliability challenges. Working closely with engineering teams, you will design and implement solutions that … hands-on experience of DevOps practices including monitoring, virtual networks, cloud storage, containers and orchestration, CI/CD, configuration management, and securing cloud applications. Incident Management Has the ability to create and/or present RCAs including the executive summary, timeline, detailed impact statement, follow-on actions, and residual ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

Incident Executive Job Title : IT Incident Executive Location: London City Contract Type: Permanent Annual Salary: Circa £30,000 DOE Working Pattern: Full Time, 40 hours per week (08:30 - 17:30, Mon - Fri). Potential for 1 day working from home after a successful probation period … ready to take your career to the next level? Our client, a dynamic organisation in the technology sector, is seeking an enthusiastic IT Incident Executive to join their team! This is an exciting opportunity for a talented individual who thrives in fast-paced environments and is passionate about delivering ...

Security Engineer to join a high-performing Security Operations team. This is a hands-on role focused on detection engineering, threat hunting, automation, incident response, and security tooling optimisation within a modern cloud-first environment. Key Skills & Experience: Strong background in Security Engineering, SOC, Detection Engineering, or Incident Response Hands-on experience with SIEM/XDR platforms and KQL, SPL, or LogScale Microsoft 365 security experience Threat hunting and detection engineering aligned to MITRE ATT&CK Python and/or PowerShell scripting EDR experience across Windows and macOS environments Security automation and orchestration Experience using ...

join a busy, global security operations team. This is an excellent opportunity for a security professional with experience in monitoring, threat detection, and incident response to work within a fast-paced enterprise environment. Hours of work: Sunday to Wednesday, 8:00am - 5:45pm Day rate … month in the London City office Required Skills & Experience Previous experience in cyber security, IT operations, or a related field. Experience with security monitoring, incident response, or security operations. Familiarity with SIEM platforms such as Splunk or QRadar. Understanding of cyber security frameworks and threat detection methodologies. Knowledge ...

continual development of cybersecurity controls and security architecture. You will develop security policies, identify and mitigate vulnerabilities, investigate security incidents, and lead the response and resolution of major cyber incidents, helping to ensure the technology environment remains secure, resilient, and aligned to business needs. Key areas of focus: Cyber … Engineering: - Identify vulnerabilities in hardware and software to be remediated by Engineering\Operations teams. - Understand current and emerging security threats. - Assist and lead in Incident Response investigations and mitigation Project Delivery: - Be able where relevant to participate in and lead varied IT Infrastructure lifecycle & security projects. Including ...

drive automation efforts to reduce operational toil, and help build resilient systems that deliver exceptional customer experiences. You will leverage your expertise in observability, incident response, and distributed systems to proactively identify and resolve reliability challenges. Working closely with engineering teams, you will design and implement solutions that … deployment rollbacks. AWS Networking & Security: Proficiency in VPCs, networking, ALBs, Route53, ACM/TLS, IAM, OIDC, Secrets Manager, KMS, and cloud security best practices. Incident Response & Observability: Skilled in troubleshooting using logs, metrics, alarms, deployment history, root cause analysis, rollback decisions, and operational runbooks. Linux & Automation: Strong Linux ...

vulnerabilities and compromises, utilizing advanced tools and techniques to detect anomalies and contribute to the development of strategies for security investigation, threat mitigation, and incident response Collaborate with cross-functional teams to ensure a coordinated approach to blockchain and enterprise security, sharing insights, and promoting best practices across … Degree in Computer Science, Cybersecurity, Data Science, or related disciplines 5+ years of experience in cybersecurity operations, with a focus on threat detection, incident response, and security infrastructure management Demonstrated expertise in multiple security domains, including network security, malware analysis, threat hunting, and security architecture and design, with ...

vulnerabilities and compromises, utilizing advanced tools and techniques to detect anomalies and contribute to the development of strategies for security investigation, threat mitigation, and incident response Produce actionable threat intelligence products including IOC development, exploit analysis reports, and threat actor tracking to inform detection engineering and security operations … Computer Science, Cybersecurity, Data Science, or related disciplines 5+ years of experience in cybersecurity threat intelligence or operations, with a focus on threat detection, incident response, and security infrastructure management Demonstrated expertise in multiple security domains, including network security, malware analysis, threat hunting, threat intelligence production, and security ...

take ownership of its day-to-day cyber security operations. This is a hands‐on leadership role where you'll oversee security monitoring, incident response and detection engineering, while driving improvements across the wider security environment. You'll play a key role in developing the team's capabilities … providing technical guidance, mentoring and support. Take ownership of security incidents, coordinating investigations, containment and recovery. Improve security monitoring, SIEM detections, threat hunting and incident response playbooks. Oversee security controls across Azure, Entra ID, endpoint and email security, identity management and vulnerability management. Manage outsourced security providers, ensuring ...

governance and accountability systems for safe, secure and sustainable AI deployment in their operations (risk assessments, control expectations, documentation/evidence packs, monitoring and incident response, accountability boundaries between vendor and operator). Public sector & regulator engagement: Support dialogue with government and regulators; translate emerging expectations into clear … integrate governance into product delivery systems. Responsible deployment patterns: Define and drive responsible deployment requirements (release criteria, human oversight, rollback plans, monitoring and incident response coordination) so governance is real in production, not theoretical. Regulated-sector readiness: Ensure auditability, traceability, evidence generation, change control and third-party risk ...

toil for engineering teams Improve observability across metrics, logging, tracing and production monitoring Define and manage SLOs across latency, availability and error rates Lead incident response, triage complex production issues and ship long-term fixes as code Partner with product engineering teams to improve the path from code … networking, IAM, managed services and secure cloud architecture Experience owning observability, logging, APM or distributed tracing tooling An SRE mindset across SLOs, reliability, incident response and toil reduction Clear communication skills and the ability to influence how engineers build and operate services This is an amazing opportunity ...

seeking a Cyber Operations Manager to own day-to-day cyber security operations in a hands-on leadership role. You will lead security monitoring, incident response and detection engineering, strengthening security controls and driving improvements across the security environment in a global law firm. Hybrid working with ...

London is seeking an IT Cyber Security Specialist to join the Infrastructure Engineering team. This hands-on role focuses on protecting our global systems, incident response, threat monitoring, and vulnerability management. You will lead security improvements, support business continuity, and collaborate with internal teams and vendors. Hybrid work ...