1 to 25 of 32 Incident Response Jobs in Central London

Cyber Response & Recovery Manager (Remediation) This role requires current SC or DV clearance, or eligibility and willingness to obtain clearance. About the role The Cyber Response & Recovery Manager role will sit within the Cyber Response Services team in KPMG’s Cyber Advisory practice. Your specific focus will … compromise, Active Directory compromise, cloud compromise and advanced network intrusions. In these situations, clients look to KPMG not only to investigate and contain the incident, but also to help them recover securely, rebuild critical services, reduce the risk of reinfection and improve their long-term resilience. This ...

join a high-performing cyber security operations team supporting critical, secure infrastructure in a 24/7 environment. This is an opportunity to lead incident response activities, mentor analysts, and play a key role in protecting complex enterprise environments from evolving cyber threats. What You'll Be Doing … Lead the investigation and response to medium and high-severity security incidents. Act as the escalation point for complex cyber security events and threat activity. Conduct root cause analysis and produce detailed incident reports. Coordinate containment, eradication and recovery activities with technical teams. Correlate data across SIEM ...

protecting a large-scale, international technology environment. This is an excellent opportunity for a security professional with experience in SOC operations, threat detection, incident response, and threat hunting to join a mature security function that is investing heavily in its cyber capabilities. You'll work within a hybrid … cyber security alerts, incidents and threats Act as the key operational contact for the Managed Security Service Provider (MSSP), ensuring effective monitoring and incident response Prioritise and manage security incidents based on business risk and impact Conduct proactive threat hunting across endpoint, network, identity and cloud environments Develop ...

eligible for UK Security Clearance This is an exciting opportunity to work within a 24/7 SOC, investigating sophisticated cyber threats, leading incident response activities, and helping protect critical infrastructure powering next-generation AI and high-performance computing platforms. What You'll Be Doing Investigate and analyse … escalated security incidents, identifying attack vectors, root causes and potential business impact. Correlate events across multiple security tools and data sources to build comprehensive incident timelines. Lead response activities for medium and high-severity security incidents. Support containment, eradication and recovery efforts in partnership with technical stakeholders. Produce ...

tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security event reporting, and content maintenance (tuning). What we are looking for Key Responsibilities: Serves as a senior member … optimization of enterprise security platforms, overseeing lifecycle management including break-fix, patching, version upgrades, and integration with broader security ecosystems. Directs complex security incident response efforts across multiple vectorsendpoint protection, EDR, malware analysis, network and computer forensicsensuring rapid containment and root cause analysis. Designs and executes advanced vulnerability ...

partnering closely with legal, compliance, risk, technology and information security stakeholders across the business. Key Responsibilities Advising on cybersecurity and information security incidents, including incident prevention, preparedness and response activities. Providing legal support on cybersecurity regulatory compliance requirements across multiple jurisdictions. Monitoring and interpreting developments in the cybersecurity … Agentic AI solutions Post-quantum cryptography About You Applicants should be qualified lawyers with demonstrable experience advising on cybersecurity, information security and cyber incident response matters. Key requirements include: Experience supporting cyber and information security incident response activities. Strong understanding of cybersecurity regulatory and legal frameworks. ...

leadership position-not a hands-on technical analyst role. You will take full ownership of the Cyber Security Operations Centre (CSOC), driving strategy, managing incident response, and directing internal teams and external vendors. Key Responsibilities Define and lead the CSOC strategy, operations, and governance. Take command of major … incident response, managing remediation and stakeholder communication. Oversee threat intelligence, vulnerability management, and security monitoring capabilities. Manage relationships with external agencies, Managed Security Service Providers (MSSPs), and technology partners. What We Need From You Proven experience as a SOC Manager (previous leadership experience is essential; this ...

with technical awareness , placing you at the centre of a live Security Operations Centre where you'll maintain situational awareness across multiple domains, coordinate incident response, and ensure effective operational decision-making. You'll act as the operational lead within a fast-paced control room environment, working closely … domains. Monitor live environments and assess alerts and incidents in real time. Perform initial triage and validation of alerts, reducing noise and ensuring accurate incident classification. Manage incident prioritisation and escalation in accordance with operational procedures. Coordinate response activities across SOC, NOC, Infrastructure and Security teams. Support ...

Cyber Security Consultant - Incident and Vulnerability Management Duration: 30/11/2026 Pay: up to £610 per day (umbrella) Location: Preston, London or Birmingham UK, Hybrid - 30% office 70% home CONTRACTOR MUST BE MOD SC CLEARED AND BE A SOLE UK NATIONAL Role Summary The Security Incident … transition to a multi-supplier (SIAM) model within a Defence environment. The role focuses on understanding, aligning and governing existing high-severity security incident management (S3/S4) and vulnerability management processes across suppliers. Ensuring a consistent, risk-based approach in line with client policy and regulatory requirements, supported ...

testing capabilities. The successful candidate will play a critical role in maintaining operational readiness across the organisation by coordinating crisis management activities, supporting major incident response efforts, managing scenario testing programmes, and driving remediation and continuous improvement initiatives. The role will work closely with business, technology, cyber security … operation of the crisis management framework and act as a key coordinator during significant disruption events, helping ensure effective response, communication, governance and recovery activities across the enterprise. What you'll bring: Proven experience within operational resilience, crisis management, business continuity, incident management, operational risk or a related ...

This is a unique hybrid position that combines operational leadership with technical awareness . You'll take ownership of the live operational picture, coordinating incident response across cyber, network, infrastructure and physical security teams while ensuring informed, timely decision-making. This role is ideal for someone who thrives … fast-paced control room environment and can confidently lead operational response without needing to be a deep technical specialist. Key Responsibilities Maintain a single operational view across cyber, network, service and physical security domains. Monitor live operational environments and assess alerts and incidents in real time. Perform initial triage ...

Cloud Hardening: Design secure baselines for Kubernetes and cloud-native resources. Vulnerability Management: Prioritize and remediate software supply chain risks from development to production. Incident Response: Scale detection and response solutions to triage alerts and stop malicious activity. Experience: 5 to 7+ years in cloud security engineering ...

practice implementation Work closely with development teams to identify and remediate security vulnerabilities Develop monitoring, logging and compliance controls across cloud platforms Support security incident response and vulnerability remediation activities Promote DevSecOps best practices and contribute to a strong security culture Skills & Experience Commercial experience in a DevSecOps ...

Relationships: CTTO - Direct line manager. Governance, infrastructure risk, and FinOps accountability. CISO (Head of Security) - Close working relationship. Security operations implementation, IAM policy, and incident escalation. Director of Platform Engineering - Coordinates on DevSecOps integration and CI/CD infrastructure requirements. • Head of Infrastructure & Cloud - Direct report. Hosting strategy, cloud … internal IT operations across a distributed estate - multiple sites or subsidiaries Commercial awareness: has owned cloud cost management and FinOps outcomes with measurable results Incident management and on-call leadership - has run major incident response at group level Strong vendor management: MSP relationships, colocation contracts, cloud provider ...

while contributing to our modern infrastructure strategy. What youll be doing As an Infrastructure Engineer, you will: Participate in a 24/7 major-incident on-call rota Develop, support, and enhance infrastructure across multiple office locations and cloud environments Design and implement standardised templates, configuration baselines, and self … third-party vendors to ensure the health and availability of hosted or outsourced services Collaborate with the Security Operations Centre on threat detection and incident response activities Take ownership of incidents and problems through to resolution or formal handover Conduct root-cause analysis to identify and address underlying ...

that supports precision medicine Key Responsibilities Design and develop threat-led detections using threat intelligence and threat-hunting outputs Create novel analytic techniques for incident detection Collaborate with an MSP SOC to maintain and tune the detection catalogue Build automated reporting dashboards using Microsoft Sentinel workbooks Support security initiatives … Employment Business and an Employment Agency as defined within The Conduct of Employment Agencies & Employment Businesses Regulations 2003. Keywords: Cyber Threat Engineer, Detection & Response Engineer, SIEM Engineer, Security Detection Engineer,T hreat Hunting Engineer, Security Automation Engineer, SOC Engineer, Incident Response Engineer, Cloud Security Engineer, Network Security ...

enable efficient and reliable software delivery. Work closely with development teams to improve platform resilience, scalability, and operational performance. Implement monitoring, alerting, and incident response processes to support production systems. Drive automation initiatives to reduce operational overhead and improve system reliability. We're Looking For: Proven experience … using FastAPI . Strong knowledge of Terraform and Infrastructure as Code principles. Experience designing highly available, resilient, and secure cloud environments. Strong troubleshooting and incident management skills within production environments. Experience with CI/CD pipelines, Git, GitHub, and DevOps best practices . Strong understanding of cloud networking concepts ...

cloud spend efficient as usage and provisioning scale. Managing secrets, IAM and infrastructure security in line with the expectations of enterprise customers. Participating in incident response and helping drive blameless post-incident improvements. Working alongside the Lead DevOps Engineer to shape infrastructure standards and mentor engineers ...

around 25 through a period of genuine transformation. What you'll be doing: Own and execute the Technology Resilience and Production Operations strategy, including Incident, Problem, Event and Change Management, driving automation and an agile approach to improve stability, security and speed at scale Build and govern an internationalised … manage the Technology Resilience framework, including business impact analysis, Disaster Recovery exercises (cyber-attack, ransomware, infrastructure failure scenarios) and Business Continuity Plans Lead major incident response and postmortem/root cause processes, driving a culture that reduces repeat incidents and strengthens proactive problem management Own the Change Advisory ...

cyber governance, risk and assurance experience. Knowledge of ISO 27001, NIST, CIS Controls and/or Cyber Essentials. Experience with security audits, certifications and incident response. Experience working within a complex, multi-site organisation. Strong stakeholder management and communication skills. Good knowledge of UK GDPR and the Data Protection ...

controls, elimination of shared/admin accounts), backup and restore strategy, retention and archival, replication, monitoring (Redgate Monitor and equivalents), licensing, performance triage, and incident response. Acting as design authority for the wider data team coaching the SQL Developers on Power BI authorship, dimensional modelling, query optimisation and report ...

small group, one person's better workflow becomes everyone's within a week. Platform resilience Help keep the platform healthy in region: availability, incident response and engineering health, alongside the Senior Full-Stack Engineer. Join the on-call rotation once you're up to speed. Debug production across … partner boundary you don't control, then write the honest post-incident note. Write code others can change without fear: tested where it counts, observable in production, and documented where the reasoning isn't obvious. Make sound design calls within your remit, and know which ones to bring ...

environments. Desirable Existing DV Clearance or eligibility to obtain it. Background in cyber security, defence, technology, financial services or national security environments. Experience with incident response, vulnerability management or secure systems engineering. This is a fantastic opportunity to work on impactful cyber programmes while developing your career within ...

code (AWS CDK) Strong understanding of networking fundamentals (DNS, HTTP/TLS, load balancing) Experience operating and maintaining production software, including monitoring, alarming, and incident response Linux/UNIX proficiency (command-line tools, shell scripting) Preferred Qualifications Experience with high-throughput, low-latency systems at scale Advanced coding ...

requires a SRE rockstar, build and defend the next gen reliability frameworks, observability platforms, and performance engineering systemes that traders rely on daily. Lead incident response like a battlefied commander Dive deep into Java Kotlin, Python, Microservices, Kafka, Grafana, Splunk, Dynatrace and full modern SRE arsenal Work shoulder ...