26 to 50 of 56 Incident Response Lead Jobs in the UK

Methods is seeking a Senior Cyber Analyst to lead complex investigations and incident response, providing strategic direction to maintain a robust security posture for clients. You will own detection rules and playbooks for Microsoft Sentinel, Defender XDR, SIEM, SOAR, EDR and XDR, while mentoring the Cyber Services ...

hybrid working (2 days in the office/3 from home) with travel across the UK and reports to the security leadership. You will lead a team covering vulnerability management, EDR, incident response, phishing monitoring and broader security operations activity, partnering with senior stakeholders globally to translate ...

Methods is seeking a SOC Team Lead to drive performance and operational excellence across Cyber Services. You will act as a technical escalation point and line manager, mentoring Cyber Analysts, coordinating incident response, and shaping security playbooks to strengthen the organisation’s security posture. You will foster ...

Jobtailor in Farnborough, United Kingdom, is seeking an experienced SOC Lead to oversee 24/7 security operations. You will direct shifts, mentor junior analysts and coordinate incident response using established playbooks to protect critical systems. The role emphasizes vulnerability management, security controls development, and ongoing threat ...

Vitality in Stockport is seeking a strategic Information Security leader to mature cyber security capabilities. You will lead a team of security analysts and a service delivery manager, guiding risk management, threat monitoring, incident response, resilience planning, and training. The role supports long-term security goals, including ...

Manager to drive performance across Shared Service's Cyber Services. You will act as a technical escalation point and line manager, guiding teams through incident response, threat analysis, and security assurance activities. You will foster a proactive culture of cyber hygiene, collaborate across departments, and oversee reporting … security metrics, incident trends, and risk controls. #J-18808-Ljbffr ...

Supervisor, Cybersecurity at Hollister Incorporated in Winnersh leads a team of Cybersecurity Analysts to safeguard the organisation. You will direct incident response, monitoring, IAM, GRC and vulnerability management, setting measurable goals and driving continuous improvement across security operations. You will collaborate with cross-functional teams, mentor staff ...

Shearman, based in Belfast, seeks a Senior Cyber Defence Analyst to join its Information Security team. The role focuses on in-depth analysis, incident response, and guiding junior colleagues within a global firm. Weekend working is a requirement with premium pay for weekend hours; you will be part … follow-the-sun model, supporting threat detection, response, and continuous improvement of cyber defence processes. #J-18808-Ljbffr ...

慨正橡扯 is seeking a SOC Shift Lead to oversee incident investigation and analysis in London. This role involves leading teams in responding to high-severity incidents and mentoring analysts. The ideal candidate will possess 7–10 years of experience in SOC or Incident Response and hold ...

Ceres Power is seeking an experienced Cyber Security Lead to own and advance our security programme. You will implement and govern security controls, lead vulnerability management and coordinate incident response with stakeholders across the organisation. You will collaborate with procurement, legal, and operations to manage third ...

Searchability NS&D is seeking an experienced SOC Shift Lead for an onsite role in Hemel Hempstead. You will oversee daily SOC operations, mentor analysts, and lead major incident responses while collaborating with engineering teams to enhance detection capabilities. A strong background in MITRE ...

CYPFER, a leading ransomware post-breach remediation and cyber-attack first responder, seeks an Engagement Manager to lead complex cybersecurity client engagements—from strategy to delivery and ongoing relationship management. You will translate technical risk into business insights for C-suite executives, oversee digital forensics and incident response ...

Harvey Nash Group in London is seeking an experienced Cyber Security Manager to lead and enhance cyber security capabilities for a large, critical-service organisation. The role blends strategic leadership with hands-on delivery to shape security strategy, manage risks, respond to incidents, and drive continuous improvement across … security landscape. The position requires governance, risk management and incident response expertise, with a focus on leading SOC capabilities and collaborating #J-18808-Ljbffr ...

慨正橡扯 is seeking a DFIR Lead Cyber Operations Analyst at VP level in Knutsford. In this key role, you will deliver advanced digital forensics and incident response while leading complex investigations. You will collaborate with internal teams and law enforcement, and produce clear reports under pressure. Ideal ...

Northrop Grumman UK is seeking an EMEA CSOC Lead to oversee cyber defense operations from Cheltenham, leading analysts and coordinating across UK, Europe and the US. The role blends technical threat hunting with leadership responsibility to protect critical operations. The successful candidate will drive incident response, digital ...

Ontinue is seeking a Senior Cyber Defender (Senior SOC Analyst) to lead threat detection and response across identity, endpoint, network and cloud. You will investigate incidents end-to-end, mentor junior defenders, and contribute to process improvements while working in a global, follow-the-sun SOC. Join ...

JPMorganChase is seeking a Lead Software Engineer focused on Site Reliability and Operations Excellence to own incident management, define reliability standards, and drive durable improvements across a complex production environment. You will lead cross-functional collaboration with Engineering, Product, Infrastructure, and Security to prevent incidents and strengthen ...

Engineering Authority based in the United Kingdom to join our 3rd line Network Operations Team. You will manage DNS and RADIUS infrastructures, lead incident resolutions, and collaborate with international teams to enhance network services. The ideal candidate has a strong background in operational management within large ISPs, particularly ...

Made Tech Limited is seeking a Senior Security Analyst to enhance security capabilities in the UK public sector. In this role, you will lead threat hunts and incident responses, while mentoring junior analysts and contributing to service improvement. Your hands-on technical experience will make a significant impact ...

Energy Networks is seeking a Security Operations Lead for an initial 12-month contract, based in Glasgow with a hybrid work pattern (3 days in the office). The role covers security incident detection, response, and improvements across both OT and IT environments, aligned with SPEN … cyber security transformation programme. You will coordinate across in-house and outsourced SOC teams, configure SIEM tools, oversee post-incident reviews, and ensure compliance with policy and SLAs while driving #J-18808-Ljbffr ...

Quadient seeks a strategic Head of Cyber Defence & Incident Response to own the organisation’s cyber defence across hybrid environments, ensuring robust monitoring, detection and recovery. Reporting to the CISO, you will lead cyber defence operations (including the MSSP) and drive vulnerability and threat management with threat ...

Methods is a UK-based consultancy partnering with central government to transform public sector services. We lead cyber and information security initiatives, delivering risk-informed security playbooks and proactive threat management. The SOC Team Lead role drives performance and operational excellence within Shared Service’s Cyber Services, acting ...

Vitality is seeking a Senior Security Operations Engineer to lead cyber defence within Information Security. You’ll enhance security operations, respond to incidents, and help protect member data while collaborating with IT and Architecture teams. This hybrid role involves managing core tools, monitoring alerts, and driving improvements across ...

/7, requiring shift work, and provides a competitive salary based on applicant experience. Essential skills include knowledge of SIEM/EDR tools and incident handling methodologies. Suitable applicants will be notified prior to the closing date of 01/06/2026. #J-18808-Ljbffr ...

Level 3 Analyst/SSOC Team Leader to become a technical leader within a growing MSSP's SOC. The role focuses on leading major incident investigations, threat hunting, detection engineering, and automation to shape the SOC's future direction. You will mentor junior analysts, coordinate incidents from detection ...