built on innovation, protection and connection. If you would like to learn more about this opportunity, feel free to reach out and apply today! Responsibilities: Lead end-to-end incident response investigations and containment efforts Communicate directly with clients during live cyber incidents, offering reassurance and expert guidance Produce detailed incident reports with root cause analysis and actionable … across teams to enhance response playbooks and internal processes Stay informed on emerging threats and tactics to strengthen response strategies Skills/Must have: Proven experience leading full-cycle incident response operations Comfortable handling breached customer communications under high-pressure situations Expertise with industry tools such as Microsoft Sentinel, CrowdStrike, Defender, or equivalent Strong technical writing skills for producing … post-incident reports Understanding of security frameworks like MITRE ATT&CK, NIST, or similar Eligibility for UK Security Clearance Benefits: Remote role Monday to Friday schedule High-impact position with autonomy and visibility Salary More ❯
London, England, United Kingdom Hybrid / WFH Options
Hamilton Barnes Associates Limited
built on innovation, protection and connection. If you would like to learn more about this opportunity, feel free to reach out and apply today! Responsibilities: Lead end-to-end incident response investigations and containment efforts Communicate directly with clients during live cyber incidents, offering reassurance and expert guidance Produce detailed incident reports with root cause analysis and actionable … across teams to enhance response playbooks and internal processes Stay informed on emerging threats and tactics to strengthen response strategies Skills/Must have: Proven experience leading full-cycle incident response operations Comfortable handling breached customer communications under high-pressure situations Expertise with industry tools such as Microsoft Sentinel, CrowdStrike, Defender, or equivalent Strong technical writing skills for producing … post-incident reports Understanding of security frameworks like MITRE ATT&CK, NIST, or similar Eligibility for UK Security Clearance Benefits: Remote role Monday to Friday schedule High-impact position with autonomy and visibility Salary: £65,000 -£75,000 #J-18808-Ljbffr More ❯
Welwyn Garden City, England, United Kingdom Hybrid / WFH Options
Tesco
Join or sign in to find your next job Join to apply for the Senior IncidentResponder (DFIR) role at Tesco 1 week ago Be among the first 25 applicants Join to apply for the Senior IncidentResponder (DFIR) role at Tesco Our Digital Forensics and Incident Response (DFIR) team lead the technical investigation and … automate the team’s technical workflows, working alongside other teams to [RR1] [RR2] help drive innovation across our prevention, automation, detection, and response capabilities. Your status as a senior incidentresponder means you’ll serve as a role model for engineers and analysts across Security Operations. About the role Our Digital Forensics and Incident Response (DFIR) team … automate the team’s technical workflows, working alongside other teams to [RR1] [RR2] help drive innovation across our prevention, automation, detection, and response capabilities. Your status as a senior incidentresponder means you’ll serve as a role model for engineers and analysts across Security Operations. You will be responsible for Investigation and Response: Perform host, network, and More ❯
Welwyn Garden City, England, United Kingdom Hybrid / WFH Options
Tesco UK
Our Digital Forensics and Incident Response (DFIR) team leads the technical investigation and response to security incidents at Tesco. As part of this team, you’ll work alongside our security operations, threat intelligence, and security engineering teams to protect, detect, and respond to security threats across Tesco’s diverse and evolving estate. You’ll apply your deep technical knowledge … and experience to improve and automate the team’s workflows, collaborating with other teams to drive innovation in prevention, automation, detection, and response capabilities. Your role as a senior incidentresponder also involves serving as a role model for engineers and analysts across Security Operations. Responsibilities include: Investigation and Response: Conduct host, network, and cloud forensic analysis to … understand security incidents and take appropriate actions to contain, remediate, and recover. Incident Handling: Support incident managers and decision makers with root cause analysis and recommendations for detection and prevention controls. Technical Projects: Enhance existing processes and develop new methods to deliver DFIR services aligned with evolving technology needs. Threat Hunting & Detection Engineering: Lead threat hunts to identify More ❯
London, England, United Kingdom Hybrid / WFH Options
Admiral
We are looking for a highly skilled Cyber Security IncidentResponder to coordinate our response efforts on cyber security incidents, from detection to resolution. It’s an exciting time to join Admiral’s Security Operations as we are a fast growing, dynamic function with a wide range of tooling and expertise available to support the role. You will … communication and stakeholder management skills will play an important part of the role, an understanding of Digital Forensic principles and the curiosity to learn from the Digital Forensics and Incident Response (DFIR) analysts in the team is highly desired. You’ll be reporting directly to the Head of DFIR but as an expert in your field, are encouraged to … such as cyber security, privacy, legal, fraud and risk management Bring expertise to ensure all lines of inquiry are exhausted and effective root cause analysis is performed Conduct post incident reviews to improve our security posture and mitigate risk for the business Guide and support the DFIR analysts conducting technical analysis during incidents and investigations Develop and maintain incidentMore ❯
London, England, United Kingdom Hybrid / WFH Options
TikTok
Responsibilities Team Intro The US Security and Privacy Operations - Data Protection IncidentResponder will report to the USDS Resiliency Operations Center Lead. This position is responsible for managing incidents that are escalated from business units to investigate, coordinate cross-functional triage and mitigation activities, remediation coordination and tracking, reporting and communication, and escalate to the Enterprise Incident Response Lead if the incident reaches a crisis threshold. This position requires the ability to work well under pressure, act quickly, bring the right people to the table, and understand processes to analyze situations accurately. USDS Resiliency Operations Center is responsible for Incident Management, Crisis Management, Business Continuity, Disaster Recovery alignment, and proactive Readiness and Preparedness programming … for US Operations for Tiktok. Responsibilities - Ensure incident response processes are executed to support incident remediation activities, communications, and connection to crisis management if necessary. - Communicate incident response concepts and protocols in a digestible manner to non-technical audiences. - Supports tracking/maintenance/advancement/executiton of USDS Incident Response projects. - Participation in incidentMore ❯