Latest Incident Response Jobs

Sr. Analyst, Falcon Complete , GBR)

Monitors and performs in-depth analysis of security alerts in a virtual security operations centre, handling incidents across Windows, Mac and Linux, including malware analysis and remote remediation. Acts as technical escalation point and mentor for junior analysts, and helps advance detection and response processes.

CrowdStrike United Kingdom

Remote

Corporate Sales Engineer, Nordics

A customer-facing technical role supporting the Value Selling sales play through TDDs, POVs, RFIs and RFPs, architecting and demonstrating complex security solutions. The position also involves competitive research, internal enablement sessions, technical documentation, and mentoring junior Sales Engineers, with a focus on the Falcon platform and incident response, forensics or security analytics.

CrowdStrike Reading

Remote

Detection Engineer

Join a global team developing and improving threat detection capabilities across key product areas. You'll respond to customer incidents, analyse cyber threat intelligence, and build detection schemes aligned to adversary techniques, collaborating with Development, Security Research and SOC teams.

Darktrace Cambridge

DevOps Engineer

Design, build and maintain CI/CD pipelines in Azure DevOps, automating build, test, deployment and infrastructure provisioning. Manage Azure resources with Terraform, Bicep or ARM templates, support App Services and Function Apps, and integrate testing, code quality and security tooling. Work closely with developers in a collaborative, flexible team.

Adria Solutions Manchester £55,000 – £65,000 pa

Hybrid Permanent

Security Manager

Lead the day-to-day security operation for a major international logistics organisation near Heathrow, managing a team and overseeing physical security, access control, CCTV and incident investigations. The role is as much about collaborative leadership and building relationships across departments as technical security expertise, with genuine influence over how security is delivered.

Right Now Group Feltham £60,000 – £90,000 pa

On-site Permanent

Transformation Success Engineer (TSE)

Owns the end-to-end migration and security operations transformation for enterprise customers moving from legacy platforms to Cortex XDR/XSIAM, Prisma Cloud or Strata. Runs data cutovers, policy mapping, API and log ingestion work, plus Day-in-the-Life workshops and executive value realization sessions. Combines hands-on Python, CLI and REST API automation with customer-facing delivery in a global, remote-first team.

Palo Alto Networks London

Remote

Naimuri - Information Security Officer

Bridges compliance and hands-on technical security, managing ISO 27001 and Cyber Essentials Plus frameworks, running internal audits and third-party risk assessments. Also hardens AWS/Azure cloud environments, runs vulnerability scans and remediation, and supports incident response and identity/access management. Reports to the Head of Security in a Salford-based team.

QinetiQ Manchester

Hybrid Permanent

Data Protection Manager

Lead operational data protection and information governance for a healthcare organisation, reporting to the Director of Clinical Governance and working with an external DPO. Day to day you manage SARs, FOI requests and DPIAs, maintain IG policies, support DSPT compliance and cyber security incident response, and deliver training and audits across the business.

Pearson Whiffin Recruitment Group Ashford £50,000 – £55,000 pa

Contract

Security Engineer, Forward Deployed Engineering, AWS Forward Deployed Engineering

Hands-on security engineering role securing production AI systems deployed inside enterprise customer environments. You conduct design and code reviews, threat modeling and penetration testing for agentic workflows and RAG pipelines, and build security automation such as scanning tools, CI/CD gates and guardrail testing scripts. Work alongside FDE delivery pods, with up to 25% travel.

Amazon London

Permanent

Engineering Manager, Platform (Enablement)

Lead the Enablement platform group, owning infrastructure, CI/CD pipelines and reliability practices across engineering. Set platform strategy and roadmap, manage SLOs, incident response and AWS cloud spend, while partnering with the Expansion product group to balance platform capacity against feature delivery. Also coach engineers and lead hiring for platform and SRE roles.

Risk Ledger London £110,000 – £135,000 pa

Hybrid

Cryptographic HSM and Key Management Engineer

Hands-on engineering role safeguarding encryption keys and cryptographic services across 300+ enterprise platforms, working extensively with Thales and Entrust HSMs. Involves key management, certificate management, production support, and on-call rotation, with occasional off-site data centre work.

Barclays Knutsford

Cyber Security Lead

Owns security end to end for a confidential investment-data platform and its AI agents, split roughly 60% hands-on product and cloud security and 40% assurance and client-facing work. Sets AWS IAM, encryption and detection patterns, defines agent authorisation and prompt-injection defences, and drives SOC 2, ISO 27001 and AI Act readiness with penetration testing and client due diligence.

Maxwell Bond London £115,000 – £135,000 pa

On-site

Systems Integration Engineer

Maintains and secures enterprise ArcGIS Enterprise geospatial platforms for Defence and National Security programmes, covering deployment, configuration, monitoring, patching, backup and disaster recovery. Provides 2nd/3rd line support, PowerShell automation, security accreditation input and technical leadership across infrastructure, cybersecurity and application teams.

Opus Recruitment Solutions West Midlands (Region) £50,000 pa

Clearance Required

IT Systems and Automation Specialist/Manager

Hands-on owner of a UK firm's IT environment and business systems, covering Microsoft 365 administration, device and network support, security, backup and recovery. Leads the transition to Dynamics 365 Business Central, working with departmental owners and implementation partners on migration, testing and adoption, and builds automation with Power Automate, Logic Apps and practical AI. Reports to the Operations Director with no direct reports.

Summit Systems Ltd Tamworth £40,000 – £50,000 pa

Cyber Security Operations Manager, CISSP, CISM, SOC, City of London

Leads a security operations function within a professional services firm, providing technical leadership across incident response, detection engineering and vulnerability management. Works with infrastructure, risk and third-party SOC providers, managing outsourced security suppliers and embedding security into technology projects. Hybrid role, three days a week in the City of London office.

Carrington Recruitment Solutions London £100,000 – £110,000 pa

Hybrid