26 to 50 of 309 Incident Response Jobs in the UK

minimizes organizational risk and reduces the impact of security breaches, by utilizing the latest industry standards and combining experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, you will be able to help clients contain security events, harden their environments, and transform their security … role, you will be responsible for driving remediation efforts by developing, coordinating, and executing the eradication, recovery, and remediation plan in parallel with active incident response. You will partner with key stakeholders, including the Incident Response (IR) team, IT operations, business units, and legal, to ensure that ...

Role: Cyber Incident Manager Duration: 5 Months Location: UK Remote Day Rate: £500 Inside IR35 Active SC clearance required due to project restrictions Overview We are seeking an experienced Cyber Incident Manager to join a high-profile programme supporting a secure government environment. The successful candidate will lead … coordination, management, and resolution of cyber security incidents, ensuring rapid response, stakeholder engagement, and continuous service improvement. This role requires a proactive individual with strong communication skills, experience managing complex cyber incidents, and the ability to operate effectively within secure and highly regulated environments. Key Responsibilities Lead ...

empower creators to own their own destiny. Klaviyo is looking for a Senior Security Engineer to add to our growing Detection & Response Team. This is an engineering role that spans the full detection and response lifecycle - leveraging software development practices to build detections, triaging alerts, lead investigations, respond … Detect and respond to cyber threats using security data lake, SIEM, and cloud platforms Respond to alerts, cyber threats, and drive end-to-end incident response investigations Perform digital forensic investigations to include collection and analysis of evidence Automate and codify detection and response workflows and processes ...

opportunity to rapidly accelerate your skills? Do you crave new and innovative work that actually matters to your customer? Do you have an Incident Response or Information Security background that you’re not fully utilizing? Are you capable of leading teams and interacting well with customers … learn from and mentor on a daily basis? What You'll Do: Conduct monitoring and perform in-depth analysis of security alerts. Exercise incident handling processes across Windows, Mac, and Linux platforms. Perform malware analysis. Perform remote remediation of malware or malicious activity. Develop and improve processes for incident ...

monitoring, detecting, analysing, and responding to security threats and incidents. You will help drive continuous improvements across security operations while ensuring robust monitoring and incident response capabilities are maintained. Key Responsibilities Manage the day-to-day operation of the SIEM platform, including monitoring, administration, and optimisation. Develop, fine … tune, and maintain detection rules and use cases to improve threat visibility. Investigate security alerts and incidents through to resolution. Provide effective monitoring and incident response capability across the organisation. Analyse security events to identify trends, attack patterns, and emerging threats. Escalate and track security issues through ...

Duration: 2 months Rate: £440 - £490 per day INSIDE IR35 Overview We are seeking an experienced Sentinel Defender to support the monitoring, investigation and response to cyber security incidents within a Microsoft security environment. The successful candidate will play a key role in protecting business-critical systems through proactive … threat detection, security monitoring and incident response activities. Working as part of a wider Security Operations or Cyber Defence team, you will leverage Microsoft Sentinel and the Microsoft Defender suite to identify, investigate and remediate security threats across complex enterprise environments. Key Responsibilities Monitor and investigate security alerts ...

respond to, recover from and learn from cyber incidents. This is a varied position combining hands-on technical recovery testing with Business Continuity, Incident Response and Cyber Recovery planning. You could be testing the recovery of a critical system in the morning and working with stakeholders on Business … plans across the organisation, working closely with teams throughout IT and the wider business. Key responsibilities will include: Analysing business systems to understand cyber-incident impact, dependencies and recovery paths Maintaining and testing Business Continuity, Incident Response and Cyber Recovery plans Conducting practical system recovery and resilience ...

learn from cyber incidents. This is a varied position combining hands-on technical recovery, analysing, planning and testing and coordinating between Business Continuity, Incident Response and Cyber Recovery. You could be testing the recovery of a critical system in the morning and working with stakeholders on Business Continuity … plans across the organisation, working closely with teams throughout IT and the wider business. Key responsibilities will include: Analysing business systems to understand cyber-incident impact, dependencies and recovery paths Maintaining and testing Business Continuity, Incident Response and Cyber Recovery plans Conducting practical system recovery and resilience ...

stays hands-on. You'll manage a team of Information Security professionals and a group of security vendor partners. You'll drive improvements in incident response, cyber resilience, governance, risk management and security awareness. The role is highly visible, and you'll work closely with senior stakeholders … capability Managing, coaching and developing a team of Information Security professionals Managing security vendor partners and making sure they deliver Owning and improving security incident response, including communications and recovery Leading security investigations and overseeing remediation after incidents or identified risks Driving compliance with security policies, standards ...

control systems remain secure, compliant and operationally robust. You'll work closely with engineers, cybersecurity specialists, and external partners to monitor OT environments, support incident response, maintain asset and patch records, and contribute to risk, compliance and audit activities. The role also supports the ongoing improvement … safe, secure and continuous delivery of energy to millions. Location: UK-based hybrid role, Occasional travel to site. Day to day Support OT cybersecurity incident response, including investigation, evidence gathering, containment, remediation, and technical actions such as system isolation and patching, under CSIRT and GSOC guidance. Operate ...

role is the single point of ownership when incidents occur. You will directly oversee the offshore Production Support team, run on-call and incident response, and ensure fast detection, triage and restoration of services. This is not a passive monitoring role. You are expected to understand … offshore Production Support team and be the single point person when incidents occur, escalating only to Head Of when required. Run on-call and incident response; ensure fast detection, triage, and restoration. Maintain observability standards (logs, metrics, traces) and alert quality (low noise, high signal). Understand ...

Cleared Major Incident & Problem Manager 6 Months initially 2 Days per week in Reading £Market Rate (Inside IR35) My client, a large defence based organisation are looking for a Major Incident & Problem Manager to take ownership of critical incident response and problem management within a complex … central point of coordination during major service disruptions, leading technical teams, suppliers and business stakeholders to restore services as quickly as possible. Alongside incident management, you will drive structured root-cause investigations, identify recurring issues and ensure lessons learned translate into meaningful service improvements. This role requires a confident ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

Technical Consultant - Threat Detection, Response & Intelligence Location: Hursley - On-site Security clearance: UK national with a minimum of 5 years' UK residency required Certification: Microsoft Certified: Security Operations Analyst Associate We are seeking a technically strong and proactive Technical Consultant - Threat Detection, Response & Intelligence to join our security … investigate security alerts and events across SIEM and wider security tooling. Identify suspicious activity, indicators of compromise and potential security incidents. Conduct initial incident investigations, assess severity and impact, and escalate appropriately with clear supporting evidence. Support the full incident response lifecycle, including containment, remediation and post ...

looking for a Cyber Security Lead to provide day-to-day leadership across its cyber security function. You'll lead the team, oversee incident response and vulnerability management, support the organisation's cloud security journey and act as a senior security contact across the wider IT department. This … vulnerability remediation and system hardening. Act as the escalation point for security incidents both in and outside normal working hours. Own the cyber security incident process and lead incident simulations and war-game exercises. Manage post-incident forensic investigations and reporting, engaging third-party specialists where appropriate. ...

join this global B2B SaaS organisation looking for a Senior Cloud Detection Engineer to take ownership of cloud-native security threat detection and response capability. If you thrive in high-scale cloud environments and love building smart detections and automated response workflows, this role gives you real technical … optimise Threat Detection capabilities in Elastic and Azure Sentinel Develop Threat Models for AWS & Azure and our global SaaS products Create and maintain incident response playbooks Automate response actions with the Security Team Partner with our external SOC to refine detection strategies Perform threat hunting and analysis ...

join this global B2B SaaS organisation looking for a Senior Cloud Detection Engineer to take ownership of cloud-native security threat detection and response capability. If you thrive in high-scale cloud environments and love building smart detections and automated response workflows, this role gives you real technical … optimise Threat Detection capabilities in Elastic and Azure Sentinel Develop Threat Models for AWS & Azure and our global SaaS products Create and maintain incident response playbooks Automate response actions with the Security Team Partner with our external SOC to refine detection strategies Perform threat hunting and analysis ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. This … analysis and identifying potential threats or areas requiring further investigation. Working closely with external security service providers to ensure effective monitoring, alert management, and incident handling. Supporting cyber incident response activities as a technical security specialist. Analysing security metrics and trends, providing recommendations to improve security controls ...

Security Analyst to strengthen their security operations and enhance their cyber security posture. This is a hands-on technical role focused on threat detection, incident response, security controls, and continuous improvement. The successful candidate will act as a Subject Matter Expert (SME), providing technical guidance, mentoring junior analysts … collaborating with global teams to ensure effective security operations. Key Responsibilities of the Senior Cyber Security Analyst: Lead the monitoring, investigation, and response to security alerts and incidents using SIEM and other security technologies Analyse security logs, network traffic, and threat intelligence to identify potential threats and vulnerabilities Manage ...

Information Security to define and deliver an integrated security strategy across IT, OT and Digital environments, covering security architecture, risk and assurance, cyber defence, incident response and supply chain security. You will build a modern, outcome-driven function that improves resilience, enables safe transformation and gives the executive … Architecture and engineering: Establish a strong central security architecture capability, embedding standardised patterns and reusable controls into programmes, design and procurement. Security operations and incident management: Strengthen detection, response and recovery across IT and OT, aligned to regulatory reporting and crisis management processes. Supply chain and segmentation: Lead ...