26 to 50 of 1,467 Incident Response Jobs in England

Lead Threat Response Operations Analyst

Hiring Organisation
Pfizer
Location
South East, United Kingdom
Employment Type
Permanent
ROLE SUMMARY Our Global Cyber Defense team is responsible for safeguarding Pfizer's digital assets and infrastructure through proactive threat detection, incident response, and risk mitigation across on-premises, cloud, and hybrid environments. As a Lead Threat Response Operations Analyst within Pfizers Global Cyber Defense organization … will serve as a senior individual contributor, providing technical leadership for the investigation and response to sophisticated cyber threats. While this is not a people-management role, you will lead complex investigations, coordinate the response to security incidents on a global scale, and provide technical guidance to analysts ...

Head of Security Incident and Response

Location
Newcastle upon Tyne, England, United Kingdom
green and healthy future for all. Find out more about DDTS: Defra digital, data and technology blog LinkedIn Defra Jobs The Head of Security Incident and Response provides operational leadership of the Defra Group Security Incident Response Management (SIRM) capability, ensuring the organisation is prepared … able to respond effectively to, security incidents ranging from routine events to significant security incidents. As the senior lead for security incident management, the role oversees incident response policy, governance and operational coordination, directs the response to complex and high-impact incidents, and provides authoritative advice ...

Operational Security Manager

Location
Farnborough, England, United Kingdom
will join a growing team of security professionals to protect and maintain the effectiveness of managed service capabilities. The Operational Security Manager supports cybersecurity incident response, investigation, escalation, and regulatory reporting, with a focus on the EU Cyber Resilience Act. Working across Cybersecurity, Product Security, Legal, Compliance, Privacy … Security Manager also provides technical leadership and continuously improves security processes, controls, and supporting technologies. What You'll Be Doing : Support the full cybersecurity incident response lifecycle, including triage, investigation, containment, escalation, remediation, recovery, and post-incident review across enterprise and product environments. Coordinate incident response ...

Senior Incident Response Investigator

Hiring Organisation
Forward Role
Location
Cheltenham, Gloucestershire, South West, United Kingdom
Employment Type
Permanent
client is a leading cyber security services provider. They are hiring a Senior Incident Response Investigator to lead investigations into targeted attacks for UK defence industry clients and to help shape the growth of their incident response practice. Senior Incident Response Investigator Location - Remote … attackers got in, then explaining what it means for the business in language senior leaders can act on. What you'll do Lead incident response investigations for client organisations and deliver high-quality reports with clear findings and guidance Maintain target utilisation on chargeable client projects Produce technical ...

Incident Response Analyst

Location
Oxford, England, United Kingdom
# Incident Response AnalystSophos · sophos.comCategory: Incident Response/DFIRLocation: RemoteAbout UsSophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. … human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection ...

Security Incident Management Analyst

Location
Preston, England, United Kingdom
Security Incident Management Analyst Location: Inverness or Preston | 5 days onsite Duration: 5 months possible extension Pay rate: up to £575 per day umbrella Clearance: Active SC clearance/UK sole national Role Description: The Security Incident Management Analyst operates within the Operational Integrator (OI) function … multi-supplier (SIAM) environment, supporting the governance and coordination of security incident management activities across suppliers. The role assists in ensuring security incidents are identified, tracked, escalated, and reported in accordance with client policies and agreed service levels. Working closely with suppliers, service management teams, and security stakeholders ...

Principal Consultant, Digital Forensics & Incident Response

Location
Reading, England, United Kingdom
trust in how we show up, everywhere & always. Want in? Join the #VTeamLife. What you'll be doing... As a Principal Digital Forensics and Incident Response (DFIR) Consultant in EMEA, you will operate as a lead technical investigator and crisis commander across high‐stakes enterprise cyber investigations. … will partner cross‐functionally across IT engineering, legal counsel, risk governance, and executive leadership (delivering Gold Command and Board‐level briefings) to translate incident findings into actionable defense transformations and continuous posture uplift. Further, you will support commercial practice growth across EMEA. Leveraging your deep technical expertise and executive ...

Senior DFIR Investigator

Location
City Of London, England, United Kingdom
build resilience against cyber threats. We're seeking a Senior DFIR Investigator to join our Global Security Services team. Working at the forefront of incident response, you'll lead complex investigations for organisations around the world, helping clients understand what happened, contain threats and recover with confidence. This … actor activity, attack techniques, malware and potential data exposure. Produce high‐quality forensic reports, attack timelines and actionable recommendations for clients. Deploy and utilise incident response tooling to collect, preserve and analyse forensic evidence. Provide trusted technical guidance to clients throughout the incident response lifecycle. Work ...

DFIR Analyst

Hiring Organisation
GCS
Location
Gloucester, Gloucestershire, United Kingdom
Employment Type
Permanent
Salary
GBP 40,000 - 60,000 Annual
Digital Forensics Investigator Digital Forensics | Cyber Investigations | Incident Response Are you passionate about uncovering digital evidence, investigating cyber incidents, and helping organisations understand what really happened during a security event? We're looking for a Digital Forensics Investigator to support complex cyber investigations, incident response activities … handling procedures. What You'll Be Doing Conduct digital forensic investigations, collecting and analysing electronic evidence to support internal investigations, legal proceedings, and cybersecurity incident response. Identify, acquire, preserve, and analyse digital evidence across laptops, Servers, mobile devices, cloud platforms, and enterprise environments. Investigate suspicious activity, unauthorised access, compromised ...

Cyber Security Engineer - MS Sentinel, Defender, PKI, SSO

Hiring Organisation
Comtecs Ltd
Location
London, United Kingdom
Employment Type
Permanent
Salary
GBP 90,000 - 100,000 Annual
Cyber Security Specialist/Cyber Security Engineer - CISSP, CEH, CCNA Security, Incident Response, Threat Monitoring, Vulnerability Management, Security Architecture, Azure, Windows Server Infrastructure. Permanent. London Hybrid. c.£90k - £100k + Bons +Benefits Global Law Firm seeks an experienced IT Cyber Security Specialist to join its Infrastructure Engineering team … identify vulnerabilities, respond to incidents and strengthen the firm's overall security posture. This is a hands-on technical role covering Cyber Security Engineering, Incident Response, Threat Monitoring, Vulnerability Management and Security Architecture (Infrastructure focussed) using tools such as MS Defender and MS Sentinel. You'll work across ...

Security Operations Lead - Threat Detection and Response

Hiring Organisation
Keystream Group Limited
Location
Central London, London, United Kingdom
Employment Type
Permanent
Salary
£80,000
Security Operations Lead Threat Detection & Response London | Hybrid | Up to £80k + excellent benefits Im working with a leading London university to appoint a Security Operations Lead to lead its Threat Detection & Response (TDR) function within the wider Security Operations team. This is a senior cyber security leadership … role with responsibility for continuous monitoring, alert triage, security investigations and incident response , alongside leading a team of security specialists and junior staff. Youll also play a key role in developing the universitys security operations capability improving people, processes, tooling, metrics and incident response playbooks , while ...

Security Operations Lead - Threat Detection and Response

Location
Islington, North London, United Kingdom
Security Operations Lead Threat Detection & Response London Hybrid Up to £80k + excellent benefits I'm working with a leading London university to appoint a Security Operations Lead to lead its Threat Detection & Response (TDR) function within the wider Security Operations team. This is a senior cyber security … leadership role with responsibility for continuous monitoring, alert triage, security investigations and incident response , alongside leading a team of security specialists and junior staff. You'll also play a key role in developing the university's security operations capability improving people, processes, tooling, metrics and incident response ...

Security Operations Lead - Threat Detection and Response

Hiring Organisation
Keystream Group Limited
Location
Islington, Norfolk, UK
Security Operations Lead – Threat Detection & Response Submit your CV and any additional required information after you have read this description by clicking on the application button. London | Hybrid | Up to £80k + excellent benefits I'm working with a leading London university to appoint a Security Operations Lead … lead its Threat Detection & Response (TDR) function within the wider Security Operations team. This is a senior cyber security leadership role with responsibility for continuous monitoring, alert triage, security investigations and incident response , alongside leading a team of security specialists and junior staff. You'll also play ...

Incident Response Specialist

Location
England, United Kingdom
# Incident Response Specialist*Marcus Donald People***England**Hybrid · Mid · Contract### The RoleThe specialist responds to sophisticated cyber security incidents within a large banking-sector enterprise, conducting live-response investigations, building host activity timelines, and producing clear incident reports. The role sits within a mature security … operations function alongside threat intelligence, detection engineering, and incident management teams, following a Wednesday–Saturday shift pattern.### Skills & ExperienceCandidates need hands-on experience in incident response, digital forensics, and EDR tooling, plus a track record of creating operational procedures and communicating findings to stakeholders. Relevant certifications ...

SOC Analyst

Hiring Organisation
Tank Recruitment
Location
London, United Kingdom
Employment Type
Contract
Incident Response Analyst We are seeking an experienced Incident Response Analyst to support the detection, triage, investigation, containment and resolution of cyber security incidents across a complex enterprise environment. Key Responsibilities Monitor and investigate alerts from SIEM, EDR/XDR, identity, email, cloud and network security … findings to MITRE ATT&CK where appropriate. Develop and execute threat hunts and contribute to detection rule, monitoring and logging improvements. Maintain incident records, investigation timelines, evidence and post-incident reports. Develop and maintain incident response playbooks, procedures and communication processes. Conduct post-incident reviews ...

Cyber Incident Responder

Hiring Organisation
Marcus Donald People Ltd
Location
City of London, London, United Kingdom
Employment Type
Contract, Work From Home
Contract Rate
From £500 to £600 per day
Incident Response Specialist Working Hours: Wednesday to Saturday, 08:00 to 17:45 (UK Time) Rate: £500 - £600 per day inside IR35 - 12 month contract Remote - 2 days per month in the London office About the Role We are seeking an experienced Incident Response Specialist … opportunity to work in the Banking sector. This is an excellent opportunity for a cyber security professional looking to further develop their expertise in incident response, digital forensics, threat containment, and enterprise-scale cyber operations . You will work alongside experienced professionals across Threat Intelligence, Detection Engineering, Security ...

Lead SOC Manager

Hiring Organisation
NATIONAL HIGHWAYS LIMITED
Location
Leeds, West Yorkshire, Yorkshire, United Kingdom
Employment Type
Permanent, Work From Home
Salary
£65,000
transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

Lead SOC Manager

Hiring Organisation
NATIONAL HIGHWAYS LIMITED
Location
Manchester, North West, United Kingdom
Employment Type
Permanent, Work From Home
Salary
£65,000
transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

Lead SOC Manager

Hiring Organisation
NATIONAL HIGHWAYS LIMITED
Location
Birmingham, West Midlands, United Kingdom
Employment Type
Permanent, Work From Home
Salary
£65,000
transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

Lead SOC Manager

Hiring Organisation
NATIONAL HIGHWAYS LIMITED
Location
Bedford, Bedfordshire, South East, United Kingdom
Employment Type
Permanent, Work From Home
Salary
£65,000
transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

Lead SOC Manager

Hiring Organisation
NATIONAL HIGHWAYS LIMITED
Location
Guildford, Surrey, South East, United Kingdom
Employment Type
Permanent, Work From Home
Salary
£65,000
transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

Lead SOC Manager

Hiring Organisation
NATIONAL HIGHWAYS LIMITED
Location
Bristol, Avon, South West, United Kingdom
Employment Type
Permanent, Work From Home
Salary
£65,000
transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

Principal Consultant, Digital Forensics & Incident Response

Location
Reading, England, United Kingdom
# Principal Consultant, Digital Forensics & Incident Response*Verizon***Reading, England**Hybrid · Lead/Principal · Full-time### The RoleThis position involves leading complex forensic investigations into major cyber incidents, including nation-state attacks and ransomware, ensuring evidence integrity for legal proceedings. The consultant also builds incident response … trusted advisor to enterprise clients throughout investigation lifecycles.### Skills & ExperienceCandidates need strong expertise in forensic investigation across Windows, Linux, Unix or macOS, incident response methodologies, industrial control systems, IoT, and eDiscovery. Familiarity with NIST and SANS frameworks, client-facing consulting experience, and executive communication skills are essential.### ...

Senior Consultant, Digital Forensics and Incident Response

Location
Greater London, England, United Kingdom
wider EMEA practice, and in turn part of a global practice offering and influencing the direction of our forensic investigation and cyber incident response capability. The Discovery & Data Insights is the hub of all technical consulting. As part of the team you will be able to assist … Consultant you will be expected to work closely with teams across regions and to develop positive and constructive relationships with Control Risks’ dedicated Cyber Response practice as well as the wider Discovery & Data Insights team. Your behaviour and positive decision making will inspire confidence and maintain integrity ...

Senior Cyber Threat Intelligence (CTI) Analyst

Location
Greater London, England, United Kingdom
Cyber Threat Intelligence (CTI) Analyst to drive hands‐on intelligence analysis and research across our global environment. This role sits within the Detection and Response Engineering, CTI, and Threat Hunting team. The team focuses on identifying emerging threats, conducting in-depth analysis of malicious activity, and enhancing the organization … security posture, detection, and incident response capabilities. THE ROLE This is a hands‐on senior individual contributor role for an analyst who wants to stay technical: researching threat actors and their infrastructure, digging into malware and phishing campaigns, tracking ransomware and the cybercrime ecosystems targeting live entertainment, ticketing ...