1 to 25 of 105 Incident Response Jobs in Central London

more. We combine deep technical expertise with outcome-driven services that accelerate secure cloud adoption, modernise threat protection and simplify compliance. Job Title Incident Response Analyst Location Hybrid; 1 day per month reporting in London office Employment Type Full-time Profile Summary CyberOne is seeking an experienced Incident Response Analyst to join our growing Cyber Security team. This is an exciting opportunity to play a critical role in protecting organisations from cyber threats by leading investigations, conducting digital forensics, performing threat hunting activities, and driving continuous improvements in incident detection and response. As an Incident ...

will play a key role in helping organisations strengthen their cyber resilience through the delivery of Solis Security's professional services. Working across Cyber Incident Exercising (CIE), Managed Detection and Response (MDR) and Incident Response (IR), you will partner with clients, delivery teams and commercial stakeholders … offers the opportunity to work on a diverse range of engagements, supporting clients across multiple sectors and geographies. You'll lead and facilitate cyber incident exercises, support client onboarding and service adoption, contribute to incident triage activities and collaborate closely with our Security Operations and Incident Response ...

Incident Response Analyst £650 - £750 GBP Hybrid WORKING Location: Central London, Greater London - United Kingdom Type: Contract Cyber Security Incident Response Analyst London (Hybrid) | 6-Month Contract | Inside IR35 We're looking for an experienced Cyber Security Incident Response Analyst to join a high …/XDR, cloud, identity, endpoint and network security tools. Analyse malicious activity including phishing, ransomware, account compromise, insider threats and unauthorised access. Coordinate incident containment, remediation and recovery with technical teams and key stakeholders. Carry out digital forensic investigations, preserving and analysing evidence from endpoints, servers, cloud platforms ...

build resilience against cyber threats. We're seeking a Senior DFIR Investigator to join our Global Security Services team. Working at the forefront of incident response, you'll lead complex investigations for organisations around the world, helping clients understand what happened, contain threats and recover with confidence. This … actor activity, attack techniques, malware and potential data exposure. Produce high‐quality forensic reports, attack timelines and actionable recommendations for clients. Deploy and utilise incident response tooling to collect, preserve and analyse forensic evidence. Provide trusted technical guidance to clients throughout the incident response lifecycle. Work ...

making a real impact for some of the world’s biggest brands. About the role We have created a new standard in ransomware incident response and need a leader to help us take our client experience to the next level. We are looking for an experienced incident response operator/leader to help us continue to shape our product and service. Your work will help companies from around the world recover from cyber-attacks. We want you to play a major part in raising the bar as we continue our growth. What ...

business goals instead of the underlying infrastructure. Why we need this role Colt is redefining its cyber security strategy and building an industry-leading incident response function that operates across every level of the organisation. This role is central to that purpose and will combine hands-on cyber … investigation with incident leadership and coordination to take incidents from initial detection, business impact review, containment and incident review. You will work with internal teams and external partners to turn complex technical findings into business level findings management to take critical decisions. As an individual contributor, you will ...

Incident Response Analyst £650 - £750 GBP Hybrid WORKING Location: Central London, Greater London - United Kingdom Type: Contract Cyber Security Incident Response Analyst London (Hybrid) 6-Month Contract Inside IR35 We're looking for an experienced Cyber Security Incident Response Analyst to join a high ...

forefront of cyber security, using industry-leading technologies to protect and support our clients. Alongside our SOC capability, we have cutting-edge incident response teams delivering rapid cyber breach investigations for clients through insurance panels and direct engagements, supporting organisations at their most critical moments. We invest heavily … teams. We’re seeking an experienced Network Engineer to join our Cyber Defence Centre. This is a hands‐on technical role that spans live incident response, security assessment and hardening, and the design and delivery of managed security solutions in client environments. You will ...

Senior SOC Analyst/Incident Response Specialist, on-site in Central London, starting ASAP. Start ASAP Duration Initially until end of March 2027 Location 100% on-site at the client's SOC, Central London Shift pattern 4 days x 10-hour shifts About the role The client needs … ground running and help lift the SOC's caseload. The focus is operational: day-to-day threat detection, triage, investigation and incident response, including answering tickets, rather than engineering or project implementation. The SOC runs on Splunk and is implementing an agentic AI SOC platform. As needed ...

with prominent global insurance carriers, leading law firms, and Fortune 1000 businesses. The Engagement Manager oversees complex client engagements related to cybersecurity, digital forensics, incident response, and post-breach remediation. This leadership role focuses on managing the entire client lifecycle, from initial engagement and strategy development to project … suite" executives, legal counsel, and boards of directors. Strategic advisory: Provide expert guidance on cyber resilience, digital risk identification, risk mitigation strategies, and incident response planning. Help clients navigate complex technical, legal, and regulatory landscapes. Project oversight: Supervise digital forensics and incident response teams, ensuring that ...

plans and security reporting. Support supplier and third-party security reviews, client security questionnaires, tenders, requests for proposal and assurance activities. Participate in security incident response activities, including monitoring, triage, investigation support, containment, recovery and post‐incident reviews. Maintain incident response plans, playbooks, escalation routes … Active Directory, including user accounts, permissions, groups and licences. Experience supporting Windows devices, productivity applications, endpoint security tools and workplace technology. Working knowledge of incident response, vulnerability management, identity and access management, security monitoring, patch management, networking, endpoints, enterprise infrastructure and cloud services. Experience maintaining service desk, asset ...

Protect Bloomberg. The Bloomberg Security Incident Management (Sec IM) team provides consistent coordination and management of information security incidents and events across Bloomberg's diverse lines of business and vast global network. What is the team? Sec IM works closely with teams across Bloomberg, coordinating, commanding, and documenting responses … ensuring responses are efficient and comprehensive. The team also plays a key role in identifying methods to improve upon similar scenarios. Key partners include incident responders, threat intelligence, legal, vulnerability analysts, security program leads, and many other teams within the company. What is the role? A successful candidate will ...

acting as the senior technical authority for Security Operations. The role is responsible for ensuring BDO's security monitoring, threat detection, threat hunting and incident response capabilities are effective, resilient and continuously evolving to meet emerging cyber threats. Reporting to the Head of Cyber Security, the successful individual … requirements are embedded across the design, implementation and management of technology services. A significant element of the role centres on cyber threat detection and incident response. The SOC Manager will lead complex cyber investigations, coordinate response activities across technical teams and third-party providers and oversee the full ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

Incident Executive Job Title : IT Incident Executive Location: London City Contract Type: Permanent Annual Salary: Circa £30,000 DOE Working Pattern: Full Time, 40 hours per week (08:30 - 17:30, Mon - Fri). Potential for 1 day working from home after a successful probation period … ready to take your career to the next level? Our client, a dynamic organisation in the technology sector, is seeking an enthusiastic IT Incident Executive to join their team! This is an exciting opportunity for a talented individual who thrives in fast-paced environments and is passionate about delivering ...

join a busy, global security operations team. This is an excellent opportunity for a security professional with experience in monitoring, threat detection, and incident response to work within a fast-paced enterprise environment. Hours of work: Sunday to Wednesday, 8:00am - 5:45pm Day rate … month in the London City office Required Skills & Experience Previous experience in cyber security, IT operations, or a related field. Experience with security monitoring, incident response, or security operations. Familiarity with SIEM platforms such as Splunk or QRadar. Understanding of cyber security frameworks and threat detection methodologies. Knowledge ...

continual development of cybersecurity controls and security architecture. You will develop security policies, identify and mitigate vulnerabilities, investigate security incidents, and lead the response and resolution of major cyber incidents, helping to ensure the technology environment remains secure, resilient, and aligned to business needs. Key areas of focus: Cyber … Engineering: - Identify vulnerabilities in hardware and software to be remediated by Engineering\Operations teams. - Understand current and emerging security threats. - Assist and lead in Incident Response investigations and mitigation Project Delivery: - Be able where relevant to participate in and lead varied IT Infrastructure lifecycle & security projects. Including ...

drive automation efforts to reduce operational toil, and help build resilient systems that deliver exceptional customer experiences. You will leverage your expertise in observability, incident response, and distributed systems to proactively identify and resolve reliability challenges. Working closely with engineering teams, you will design and implement solutions that … deployment rollbacks. AWS Networking & Security: Proficiency in VPCs, networking, ALBs, Route53, ACM/TLS, IAM, OIDC, Secrets Manager, KMS, and cloud security best practices. Incident Response & Observability: Skilled in troubleshooting using logs, metrics, alarms, deployment history, root cause analysis, rollback decisions, and operational runbooks. Linux & Automation: Strong Linux ...

seeking a Senior SOC Manager to lead our Security Operations Centre, overseeing threat monitoring, incident response, and coordination with MSSPs to deliver resilient cyber security services for clients and colleagues. The role combines strategic direction with hands‐on leadership, mentoring analysts, and driving improvements in detection and response ...

take ownership of its day-to-day cyber security operations. This is a hands‐on leadership role where you'll oversee security monitoring, incident response and detection engineering, while driving improvements across the wider security environment. You'll play a key role in developing the team's capabilities … providing technical guidance, mentoring and support. Take ownership of security incidents, coordinating investigations, containment and recovery. Improve security monitoring, SIEM detections, threat hunting and incident response playbooks. Oversee security controls across Azure, Entra ID, endpoint and email security, identity management and vulnerability management. Manage outsourced security providers, ensuring ...

Veeam Software, Inc. is seeking an experienced incident response leader to elevate our client experience in a high-stakes cyber environment. You will own IR cases end-to-end, guide clients through case progression, and collaborate with partners and law enforcement to ensure compliant, efficient operations. The role ...

vulnerabilities and compromises, utilizing advanced tools and techniques to detect anomalies and contribute to the development of strategies for security investigation, threat mitigation, and incident response Collaborate with cross-functional teams to ensure a coordinated approach to blockchain and enterprise security, sharing insights, and promoting best practices across … Degree in Computer Science, Cybersecurity, Data Science, or related disciplines 5+ years of experience in cybersecurity operations, with a focus on threat detection, incident response, and security infrastructure management Demonstrated expertise in multiple security domains, including network security, malware analysis, threat hunting, and security architecture and design, with ...

governance and accountability systems for safe, secure and sustainable AI deployment in their operations (risk assessments, control expectations, documentation/evidence packs, monitoring and incident response, accountability boundaries between vendor and operator). Public sector & regulator engagement: Support dialogue with government and regulators; translate emerging expectations into clear … integrate governance into product delivery systems. Responsible deployment patterns: Define and drive responsible deployment requirements (release criteria, human oversight, rollback plans, monitoring and incident response coordination) so governance is real in production, not theoretical. Regulated-sector readiness: Ensure auditability, traceability, evidence generation, change control and third-party risk ...

vulnerabilities and compromises, utilizing advanced tools and techniques to detect anomalies and contribute to the development of strategies for security investigation, threat mitigation, and incident response Produce actionable threat intelligence products including IOC development, exploit analysis reports, and threat actor tracking to inform detection engineering and security operations … Computer Science, Cybersecurity, Data Science, or related disciplines 5+ years of experience in cybersecurity threat intelligence or operations, with a focus on threat detection, incident response, and security infrastructure management Demonstrated expertise in multiple security domains, including network security, malware analysis, threat hunting, threat intelligence production, and security ...

seeking a Cyber Operations Manager to own day-to-day cyber security operations in a hands-on leadership role. You will lead security monitoring, incident response and detection engineering, strengthening security controls and driving improvements across the security environment in a global law firm. Hybrid working with ...