Latest Incident Response Jobs

Platform Professional Services, Sr. Analyst

Senior analyst role in the Platform Professional Services team, helping clients maximise the CrowdStrike Falcon platform through detection triage, remediation and optimal configuration. Day to day involves incident handling across Windows, Mac and Linux, malware and forensic analysis, and developing security content and automations across EDR/SIEM modules.

CrowdStrike Spain

Remote

Lead DevOps Engineer

Hands-on technical lead role designing, automating and supporting low-latency trading infrastructure and business-critical financial systems across cloud and on-prem. You will build CI/CD pipelines for Java and Python apps, use Terraform, Chef or Ansible for infrastructure as code, run Kubernetes and AWS, and mentor engineers while driving observability, reliability and AI-enabled operational tooling.

eFinancialCareers London

Hybrid Permanent

Solution Architect, Integration Partners GTM

Serves as the technical bridge between CrowdStrike and its European integration partner ecosystem, driving design, delivery and go-to-market of Falcon Platform integrations. Acts as a sales engineer for partner activity, running demos, proof-of-value and RFI/RFP responses while building demo environments and reference architectures. Involves public speaking, partner enablement and applying agentic AI to integration workflows.

CrowdStrike Italy €55,500 – €85,250 pa

Remote

Technical Success Manager - Enterprise Accounts (DACH)

Customer-facing role combining technical depth and commercial awareness to drive adoption of AI cybersecurity products across DACH enterprise accounts. Partners with security and IT stakeholders on technical success plans, use-case activation, health monitoring and renewal readiness, working alongside Account Executives, Solutions Engineering and Renewals. Requires fluency in German and English.

Darktrace London

SOC Analyst

Investigating and responding to security incidents at 2nd Line level, monitoring customer environments and SIEM alerts, and threat hunting across a Microsoft security stack including Sentinel, Defender and Entra. Uses KQL and PowerShell for investigations and automation, acts as an escalation point for junior analysts, and supports vulnerability assessment and remediation. Initially on a 4-on, 4-off night shift pattern before moving to an 8-hour shift model.

Reed Technology Newcastle upon Tyne £35,000 – £45,000 pa

Remote Shift-work

Software Development Engineer - Security Automation, AWS Security Epoxy

Builds and operates automation platforms that onboard threat detection, remediate security risk and accelerate incident response across every AWS account. Day to day involves designing loosely specified features, writing well-tested Python and TypeScript on AWS services, instrumenting systems for operational excellence, and participating in an on-call rotation. The team runs foundational services at very high scale with a strong 'you build it, you run it' culture.

Amazon London

Permanent

Software Development Engineer, AWS Security Epoxy

Builds and operates automation platforms that onboard threat detection, remediate security risk and accelerate incident response across every AWS account. The role spans designing loosely specified features, owning operational health through instrumentation and automation, and participating in an on-call rotation, using AWS services, Python and TypeScript at very high scale.

Amazon London

Permanent

Senior Solution Architect - Email & Collaboration Security

Owns architectural direction for Mimecast's Email & Collaboration Security product line, spanning email threat detection, DMARC, data platforms and response capabilities. Works across product, engineering and the Architecture Leadership Team to define integration contracts, ADRs and NFR targets, with cost-per-outcome reasoning and daily AI tooling use.

Mimecast London £124,000 – £186,000 pa

Clearance Required

Managed XSIAM Service Delivery Lead

Deliver white-glove onboarding and ongoing technical guidance for Managed XSIAM customers, analysing security data to improve detection coverage, alert quality and tenant hygiene. Lead customer touchpoints and security reviews while partnering with Unit 42 SOC engineering, Product and MDR teams to build automation workflows and scalable service frameworks.

Palo Alto Networks United Kingdom

Remote

Cyber Security Engineer

Protects a critical defence IT application and infrastructure by running vulnerability scans, managing endpoint security, responding to incidents and hardening systems. Works with frameworks such as Government Functional Standard 007 and standards like CIS, STIG and NIST, leading security implementation and assurance on a major UK government programme.

Appcast Enterprise Farnborough

Hybrid Permanent Clearance Required

SOC Analyst – Step into Shift Leadership

Hands-on SOC Analyst role sitting between L1 and L2, triaging and investigating security incidents using Microsoft Sentinel, Defender XDR and SentinelOne. Also acts as escalation point for a shift of around three analysts, monitoring SLAs, QA-ing tickets, leading handovers and coaching the team. Works a 4 on / 4 off, 7am-7pm shift with partial office attendance in Leeds.

Fynity Leeds £38,000 pa

Hybrid Shift-work

Service Delivery Manager

Owns end-to-end delivery and performance of critical IT services delivered through a strategic partner and supplier network in a SIAM environment. Acts as service integrator, managing supplier SLAs, KPIs and contracts, leading service reviews, driving continual improvement and ensuring compliance with NIS and CAF standards. Combines technical oversight of Azure, SaaS, SAP and ServiceNow with stakeholder-facing reporting via Power BI.

Reed Newport £62,000 – £71,000 pa

Hybrid Permanent

SOC Analyst – Step into Shift Leadership

Hands-on SOC role sitting between L1 and L2, triaging and investigating security incidents while leading a small shift of around three analysts. Acts as escalation point, monitors SLAs, QA tickets, runs shift handovers and coaches the team, using Microsoft Sentinel, Defender XDR and SentinelOne. Distinct as a stepping stone into shift leadership without full Team Lead responsibility.

Fynity Leeds £38,000 pa

Hybrid Shift-work

Platform Engineering Lead

Lead a dedicated platform engineering function at a scaling fintech, owning cloud foundations, automation and developer tooling for a globally distributed payments platform. The role combines strategy with hands-on work across GCP, GKE, Terraform and GitOps, plus mentoring engineers and acting as a senior escalation point for platform incidents.

HAYS Specialist Recruitment London £90,000 – £100,000 pa

Permanent

Workday Technical Systems Lead

Hands-on technical leadership role maintaining and evolving the Workday integration ecosystem across HR and Finance, reporting to the Digital Transformation Lead. You will design, build and support integrations using Workday Studio, EIB, web services and APIs, govern the Workday security model, and develop reporting and analytics. The role combines technical delivery with architecture, security, compliance and service management responsibilities.

Darktrace London