25 of 25 Remote/Hybrid Incident Response Lead Jobs in the UK

Incident Response Lead Scottish Power HQ, Glasgow Flexible & Hybrid working pattern Negotiable rate, Inside IR35, PAYE and UMB options available Help us create a better future, quicker SP Energy Networks (SPEN) has kicked off an ambitious security transformation programme to transparently reduce risk, achieve compliance with … regulations and deliver a cyber resilient business and the Incident Response Lead is essential in achieving our goals. This role will be integrated into an active and ambitious global cyber security function, contributing to SPEN's cyber security purpose of delivering cyber resilient ...

join a mission that matters? The future of cybersecurity starts with you.About the Role:CrowdStrike is looking for a highly motivated, self-driven Engagement Lead to oversee forensic investigations performed by CrowdStrike’s trusted partners. This Engagement Lead will be dedicated to making a difference in global security … protecting organizations against a wide range of attackers. This person will coordinate directly with both CrowdStrike’s incident response leadership and the leadership of our partners and customers, representing CrowdStrike and helping deliver high-quality results during high-stakes incident response investigations.Am I a Partner Services ...

CYBER AT S-RM Our Cyber Security division is the fastest-growing part of S-RM. Demand for our Advisory, Ethical Hacking and Incident Response practices has never been higher, and the threat landscape keeps changing. We are building a team to keep pace, one that responds quickly … grow. If that sounds like your kind of team, we would like to hear from you. THE ROLE We are looking for a Engagement Lead to join our Cyber Incident Response team as an Engagement Lead . Role responsibilities include: Project scoping : you will ...

business goals instead of the underlying infrastructure. Why we need this role Colt is redefining its cyber security strategy and building an industry-leading incident response function that operates across every level of the organisation. This role is central to that purpose and will combin e hands … cyber investigation with incident leadership and coordination to take incidents from initial detection , business impact review , containment and incident review. You will work with internal teams and external partners to turn complex technical findings into business level findings management to take critical decisions. As an individual contributor ...

allowing them to focus on delivering their business goals instead of the underlying infrastructure. Why we need this role We are seeking a Tech Lead - SOC Responder. This is an opportunity to meaningfully contribute to a highly visible security operations function with global impact upon our client, business units … partners, and customers. While working as part of this team, the successful individual will provide world class incident response functions to detect, protect, respond, and sustain operations within cyberspace. This role operates at a Tier 3 level , with the expectation that the individual has undeniable experience handling major ...

Incident Response Lead Scottish Power HQ, Glasgow Flexible & Hybrid working pattern Negotiable rate, Inside IR35, PAYE and UMB options available Help us create a better future, quicker SP Energy Networks (SPEN) has kicked off an ambitious security transformation programme to transparently reduce risk, achieve compliance with … regulations and deliver a cyber resilient business and the Incident click apply for full job details ...

seeking an Engagement Lead for its Cyber Incident Response team. You will coordinate incident response efforts, lead triage calls, and manage client engagements from initial scoping through to resolution. Ideal candidates bring strong DFIR experience, excellent consulting skills, and a collaborative, client-focused approach. ...

Energy Networks (SPEN) in Glasgow is seeking an Incident Response Lead to strengthen our cyber security capabilities by developing, maintaining, and improving incident playbooks, runbooks, and procedures across OT and IT environments. You will collaborate with incident responders, detection engineers, and wider cyber teams … ensure playbooks are clear, repeatable, and aligned with best practice. The role covers the full incident lifecycle, including post-incident reviews and exercises to #J-18808-Ljbffr ...

seeking a Senior Cloud Incident Response Consultant in London to lead client-facing investigations across AWS, Azure and GCP. You will guide incident response engagements, analyze cloud identities, logs and telemetry, and coordinate remediation with cross-functional teams. The role requires deep cloud expertise, strong ...

Control Risks in London is seeking a Cyber Incident Response Consultant to join the team and deliver cyber incident response projects for clients. You will work on high-profile incidents, including compromise assessments and ransomware investigations, applying expertise across infrastructure, web servers and cloud environments. This … role emphasizes developing tooling and automation, contributing to the Cyber Response practice, and coordinating with Threat Intelligence and Cyber Crisis #J-18808-Ljbffr ...

CrowdStrike Holdings, Inc. is seeking a senior Incident Response Consultant to operate as part of our services team on remote engagements across the UK, Spain, and Ireland. You will lead investigations, hunt for adversaries, and contribute to client reports, working with executive stakeholders and legal counsel where … required. Ideal candidates bring IR, forensic analysis, and cloud incident response experience, with strong communication skills and the ability to mentor others. #J-18808-Ljbffr ...

Hays is seeking an Incident Response Manager/DFIR Manager for a remote-first role based in London. The position combines hands-on technical delivery (≈70%) with team leadership (≈30%), handling high-profile investigations and coordinating with clients, legal advisers and insurers. The role requires experience across full … lifecycle incident response, evidence preservation, and advanced forensic tooling, with Magnet AXIOM being advantageous. Weekend on-call and some travel may be required. #J-18808-Ljbffr ...

Hamilton Barnes is seeking an experienced Incident Response Consultant for a fully remote role based in the United Kingdom. You will lead end-to-end cyber incident investigations across host, network, and cloud environments, advising client stakeholders throughout. The ideal candidate has 4+ years of incident response, SOC, or security consulting experience, with strong networking, endpoint security, and forensic skills. #J-18808-Ljbffr ...

Beazley Security, a global cybersecurity firm and subsidiary of Beazley Group, seeks an Incident Response Consultant to help clients detect, respond to, and recover from cybersecurity incidents while advising on improving security posture. The role requires expertise in incident response and digital forensics, with strong analytical ...

Inc. is seeking a Principal Security Engineer to lead the Security Incident Response Team (SIRT). You will provide expert leadership on incident handling, threat analysis, and vulnerability responses, while mentoring junior engineers and driving security content creation. In this role you will coordinate across product ...

Bridewell is seeking an experienced incident responder to support the delivery and improvement of incident response services across endpoint, network, and cloud environments. You will follow triage processes, investigate incidents with senior responders, and perform forensic activities on devices and mobile platforms. Travel to client locations ...

Control Risks Group in London is seeking a Cyber Incident Response Consultant to join our hybrid team. You will lead host, network, web server and cloud investigations, including ransomware, for clients across sectors, developing tooling and automation, and contributing to threat intelligence. Fluent English, strong forensics ...

Arctic Wolf is seeking a Senior Incident Response Forensics Analyst to join our remote UK-based team. You will conduct forensic investigations of network intrusions and email compromises, performing host, network, and cloud forensics across Windows, Linux, and macOS environments. You will mentor junior analysts, lead case ...

London is seeking a Cyber Operations Manager to own day-to-day cyber security operations in a hands-on leadership role. You will lead security monitoring, incident response and detection engineering, strengthening security controls and driving improvements across the security environment in a global law firm. Hybrid ...

LRQA is seeking a Principal Security Consultant to lead complex cyber incidents across the LRQA client base, guiding junior analysts and shaping incident response strategy in line with industry best practices. The role combines on-site and remote work across the UK, requires robust English communication, CREST ...

Proactive Appointments Limited is seeking an experienced hands-on Cyber Security Analyst for a remote role inside IR35. You will own incident response, phishing management, SOC/MDR oversight and security tooling configuration. The ideal candidate has practical security engineering experience across endpoints, cloud and identity, with strong … analytical and communication skills and the ability to lead and collaborate across technical and non-technical teams. #J-18808-Ljbffr ...

Maersk's Cyber team invites an experienced security professional to join a modern incident management and response function, combining digital forensics, threat hunting, detection engineering, and cyber security improvement. You will investigate complex incidents across endpoints, cloud, and OT, deliver root cause analyses, support uplift projects, and mentor ...

CrowdStrike Holdings, Inc. is seeking an experienced Incident Response Consultant to lead engagement teams, hunt for threats across large data sets, and conduct intrusions investigations using Windows, Mac, and Linux hosts. The role requires deep forensics, malware analysis, and the ability to communicate findings to executives ...

Forensic Focus seeks a UK Cyber Manager to lead DFIR engagements end-to-end, from evidence collection and forensic analysis to root-cause determination and client reporting. The role includes coordinating containment and recovery, mentoring junior staff, and liaising with executives and legal counsel during investigations. The ideal candidate ...

Maersk is a global leader in logistics and shipper operations seeking a Cyber Incident Manager to lead and coordinate high-priority cyber incidents. You will drive decisions, coordinate cross-functional teams, and report on risks and business impact within a multinational environment. The role offers flexible remote working … opportunities to develop cyber capabilities, incident playbooks, and readiness through simulations and training while maintaining work-life balance. #J-18808-Ljbffr ...