1 to 25 of 121 Incident Response Jobs in Central London

combine deep technical expertise with outcome-driven services that accelerate secure cloud adoption, modernise threat protection and simplify compliance. Job Title: Head of Incident Response Location: Hybrid Employment Type: Full time Role purpose The Head of Incident Response is accountable for the management, quality and continual … improvement of CyberOne’s National Cyber Security Centre (NCSC) Cyber Incident Response (CIR) Standard Level service. The role ensures that Cyber Incident Response Leads have the direction, tools, processes and support needed to deliver effective retained customer onboarding, incident response engagements and preparedness activities. ...

more. We combine deep technical expertise with outcome-driven services that accelerate secure cloud adoption, modernise threat protection and simplify compliance. Job Title Incident Response Analyst Location Hybrid; 1 day per month reporting in London office Employment Type Full-time Profile Summary CyberOne is seeking an experienced Incident Response Analyst to join our growing Cyber Security team. This is an exciting opportunity to play a critical role in protecting organisations from cyber threats by leading investigations, conducting digital forensics, performing threat hunting activities, and driving continuous improvements in incident detection and response. As an Incident ...

more. We combine deep technical expertise with outcome-driven services that accelerate secure cloud adoption, modernise threat protection and simplify compliance. Job Title: Incident Response Lead Location: Hybrid Employment Type: Full time Role purpose The Cyber Incident Response (CIR) Lead is responsible for delivering CyberOne … incident response engagements as part of a pool of CIR Leads, leading clients and technical teams through the investigation, containment and recovery of cyber security incidents. The role combines incident leadership, technical judgement and clear stakeholder communication to minimise business impact and support informed decisions under pressure. ...

will play a key role in helping organisations strengthen their cyber resilience through the delivery of Solis Security's professional services. Working across Cyber Incident Exercising (CIE), Managed Detection and Response (MDR) and Incident Response (IR), you will partner with clients, delivery teams and commercial stakeholders … offers the opportunity to work on a diverse range of engagements, supporting clients across multiple sectors and geographies. You'll lead and facilitate cyber incident exercises, support client onboarding and service adoption, contribute to incident triage activities and collaborate closely with our Security Operations and Incident Response ...

Incident Response Analyst £650 - £750 GBP Hybrid WORKING Location: Central London, Greater London - United Kingdom Type: Contract Cyber Security Incident Response Analyst London (Hybrid) | 6-Month Contract | Inside IR35 We're looking for an experienced Cyber Security Incident Response Analyst to join a high …/XDR, cloud, identity, endpoint and network security tools. Analyse malicious activity including phishing, ransomware, account compromise, insider threats and unauthorised access. Coordinate incident containment, remediation and recovery with technical teams and key stakeholders. Carry out digital forensic investigations, preserving and analysing evidence from endpoints, servers, cloud platforms ...

build resilience against cyber threats. We're seeking a Senior DFIR Investigator to join our Global Security Services team. Working at the forefront of incident response, you'll lead complex investigations for organisations around the world, helping clients understand what happened, contain threats and recover with confidence. This … actor activity, attack techniques, malware and potential data exposure. Produce high‐quality forensic reports, attack timelines and actionable recommendations for clients. Deploy and utilise incident response tooling to collect, preserve and analyse forensic evidence. Provide trusted technical guidance to clients throughout the incident response lifecycle. Work ...

making a real impact for some of the world’s biggest brands. About the role We have created a new standard in ransomware incident response and need a leader to help us take our client experience to the next level. We are looking for an experienced incident response operator/leader to help us continue to shape our product and service. Your work will help companies from around the world recover from cyber-attacks. We want you to play a major part in raising the bar as we continue our growth. What ...

Incident Response Analyst £650 - £750 GBP Hybrid WORKING Location: Central London, Greater London - United Kingdom Type: Contract Cyber Security Incident Response Analyst London (Hybrid) 6-Month Contract Inside IR35 We're looking for an experienced Cyber Security Incident Response Analyst to join a high ...

forefront of cyber security, using industry-leading technologies to protect and support our clients. Alongside our SOC capability, we have cutting-edge incident response teams delivering rapid cyber breach investigations for clients through insurance panels and direct engagements, supporting organisations at their most critical moments. We invest heavily … teams. We’re seeking an experienced Network Engineer to join our Cyber Defence Centre. This is a hands‐on technical role that spans live incident response, security assessment and hardening, and the design and delivery of managed security solutions in client environments. You will ...

with prominent global insurance carriers, leading law firms, and Fortune 1000 businesses. The Engagement Manager oversees complex client engagements related to cybersecurity, digital forensics, incident response, and post-breach remediation. This leadership role focuses on managing the entire client lifecycle, from initial engagement and strategy development to project … suite" executives, legal counsel, and boards of directors. Strategic advisory: Provide expert guidance on cyber resilience, digital risk identification, risk mitigation strategies, and incident response planning. Help clients navigate complex technical, legal, and regulatory landscapes. Project oversight: Supervise digital forensics and incident response teams, ensuring that ...

scale. Job Description Epiq is seeking an experienced operational and client-service leader based in the United Kingdom or Europe to join our Cyber Incident Response business as Manager, International Data Mining. This role will lead the delivery of data mining and document review services for cyber incident response matters across Europe and Asia-Pacific, while supporting global projects as needed. The Manager will oversee an international team, maintain consistent delivery and quality standards, serve as a senior escalation point, and help expand Epiq's technology-enabled data mining capabilities. This is a hands‐on leadership ...

play a key role in transitioning SOC operations from an outsourced service to an internally managed capability, building a high-performing security monitoring and incident response function. This role combines operational leadership, technical expertise and the ability to develop efficient and effective cybersecurity processes. Key Responsibilities SOC Leadership … operating in a 24/7 shift environment. Establish operational processes, shift schedules, escalation procedures and performance standards. Oversee daily SOC operations, alert monitoring, incident triage and initial response. Ensure consistent operational coverage, effective shift handovers and incident documentation. Act as the primary operational escalation point ...

plans and security reporting. Support supplier and third-party security reviews, client security questionnaires, tenders, requests for proposal and assurance activities. Participate in security incident response activities, including monitoring, triage, investigation support, containment, recovery and post‐incident reviews. Maintain incident response plans, playbooks, escalation routes … Active Directory, including user accounts, permissions, groups and licences. Experience supporting Windows devices, productivity applications, endpoint security tools and workplace technology. Working knowledge of incident response, vulnerability management, identity and access management, security monitoring, patch management, networking, endpoints, enterprise infrastructure and cloud services. Experience maintaining service desk, asset ...

Protect Bloomberg. The Bloomberg Security Incident Management (Sec IM) team provides consistent coordination and management of information security incidents and events across Bloomberg's diverse lines of business and vast global network. What is the team? Sec IM works closely with teams across Bloomberg, coordinating, commanding, and documenting responses … ensuring responses are efficient and comprehensive. The team also plays a key role in identifying methods to improve upon similar scenarios. Key partners include incident responders, threat intelligence, legal, vulnerability analysts, security program leads, and many other teams within the company. What is the role? A successful candidate will ...

managed services environment. As part of a leading cybersecurity services provider, you will manage the delivery of critical security solutions, including monitoring, threat detection, incident response, and compliance management. You will collaborate with internal teams, clients, and third-party vendors to ensure projects are completed on time, within … security. Key Responsibilities Manage the full project lifecycle for multiple client engagements, including security monitoring, vulnerability management, SOC Onboarding, professional services engagements, and incident response service deployments. Act as the primary point of contact for clients, ensuring clear communication and expectations throughout the project. Develop detailed project plans ...

supporting secure AI adoption, reviewing LLM‐based applications, advising on SOC automation, developing AI security guardrails, and helping organisations use AI to enhance detection, response, reporting and risk management. The right candidate will combine strong cyber security fundamentals with curiosity and practical knowledge of AI security. You should … business risk. Support the design and implementation of security controls across areas such as access management, data protection, logging and monitoring, vulnerability management, incident response and third‐party risk. Help clients interpret security requirements, assess control maturity and develop actionable improvement roadmaps. Translate technical findings into clear, business ...

Security Operations Centre Manager, SOC Manager, Cyber Security, Incident Response, Threat Detection, Microsoft Security, Central London, Hybrid SOC Manager, Security Operations Centre Manager required to work for a Law Firm business based in Central London. This is a hybrid role requiring circa 3 days per week … delivered. It is also a hands-on leadership role combining people management with genuine Security Operations expertise. You will oversee threat detection, monitoring, incident response and continuous improvement while helping shape the wider Cyber Security strategy. Key responsibilities: Lead and develop the Security Operations Centre and its analysts ...

Security Operations Centre Manager, SOC Manager, Cyber Security, Incident Response, Threat Detection, Microsoft Security, Central London, Hybrid SOC Manager, Security Operations Centre Manager required to work for a Law Firm business based in Central London. This is a hybrid role requiring circa 3 days per week … delivered. It is also a hands-on leadership role combining people management with genuine Security Operations expertise. You will oversee threat detection, monitoring, incident response and continuous improvement while helping shape the wider Cyber Security strategy. Key responsibilities: Lead and develop the Security Operations Centre and its analysts ...

acting as the senior technical authority for Security Operations. The role is responsible for ensuring BDO's security monitoring, threat detection, threat hunting and incident response capabilities are effective, resilient and continuously evolving to meet emerging cyber threats. Reporting to the Head of Cyber Security, the successful individual … requirements are embedded across the design, implementation and management of technology services. A significant element of the role centres on cyber threat detection and incident response. The SOC Manager will lead complex cyber investigations, coordinate response activities across technical teams and third-party providers and oversee the full ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

join this global B2B SaaS organisation looking for a Senior Cloud Detection Engineer to take ownership of cloud-native security threat detection and response capability. If you thrive in high-scale cloud environments and love building smart detections and automated response workflows, this role gives you real technical … Threat Detection capabilities in Elastic and Azure Sentinel Develop Threat Models for AWS & Azure across a suite of global SaaS products Create and maintain incident response playbooks Automate response playbooks Partner with our external SOC to refine detection strategies Perform threat hunting and analysis across large-scale ...

Incident Executive Job Title : IT Incident Executive Location: London City Contract Type: Permanent Annual Salary: Circa £30,000 DOE Working Pattern: Full Time, 40 hours per week (08:30 - 17:30, Mon - Fri). Potential for 1 day working from home after a successful probation period … ready to take your career to the next level? Our client, a dynamic organisation in the technology sector, is seeking an enthusiastic IT Incident Executive to join their team! This is an exciting opportunity for a talented individual who thrives in fast-paced environments and is passionate about delivering ...

Security Engineer to join a high-performing Security Operations team. This is a hands-on role focused on detection engineering, threat hunting, automation, incident response, and security tooling optimisation within a modern cloud-first environment. Key Skills & Experience: Strong background in Security Engineering, SOC, Detection Engineering, or Incident Response Hands-on experience with SIEM/XDR platforms and KQL, SPL, or LogScale Microsoft 365 security experience Threat hunting and detection engineering aligned to MITRE ATT&CK Python and/or PowerShell scripting EDR experience across Windows and macOS environments Security automation and orchestration Experience using ...

CyberOne, a pure-play Microsoft security partner in the UK, seeks an experienced Incident Response Lead to drive investigations, containment and recovery for complex cyber incidents. You will coordinate cyber response teams, manage client communications and deliver post-incident reviews with clear, actionable recommendations. The role ...

join a busy, global security operations team. This is an excellent opportunity for a security professional with experience in monitoring, threat detection, and incident response to work within a fast-paced enterprise environment. Hours of work: Sunday to Wednesday, 8:00am - 5:45pm Day rate … month in the London City office Required Skills & Experience Previous experience in cyber security, IT operations, or a related field. Experience with security monitoring, incident response, or security operations. Familiarity with SIEM platforms such as Splunk or QRadar. Understanding of cyber security frameworks and threat detection methodologies. Knowledge ...