Latest Incident Response Jobs

Cyber Security Engineer

This role involves continuous monitoring, investigation, and response to security alerts using Rapid7 and Microsoft Defender within a 24/7 operational environment. The engineer will conduct threat analysis, identify vulnerabilities, support incident response, and contribute to security improvements and internal awareness initiatives. The position starts fully onsite before transitioning to a hybrid 3-days-per-week office model.

Required IT Br11Aa, United Kingdom £55,000 – £60,000 pa

Cyber Security Engineer

The Cyber Security Engineer will lead the company's cyber security strategy, working closely with technical teams to ensure secure software development practices and oversee security architecture across cloud, on-prem, and hybrid environments. Responsibilities include developing and maintaining security policies, overseeing SOC operations, and ensuring compliance with regulatory standards.

Robert Half Oxford, United Kingdom

Hybrid Permanent

Cyber Security Analyst - Data Loss Prevention

The Cyber Security Analyst – Data Loss Prevention will operate and optimise DLP tools like Microsoft Purview and Zscaler to detect, investigate, and prevent data loss incidents. The role involves defining DLP policies, responding to alerts, collaborating with SOC and business teams, and improving data protection controls. The analyst will also support compliance, governance, and awareness initiatives within Asda’s hybrid working environment.

ASDA Ls115Ad, United Kingdom

Senior SOC Analyst

Senior SOC Analyst – Cloud Security / Detection Engineering Location: Hybrid - Remote with the requirement to attend team meetings in the Reading office once a month Type: Permanent | Full-time Sector: Software / SaaS Salary: £75,000 - £90,000 +...

Ballantyne Technology Associates Ltd Reading, Berkshire

Cyber Security Engineer

This role involves hands-on security engineering within a mature cyber resilience function, focusing on Microsoft security stack (Defender, Sentinel, Entra ID), Azure cloud security, identity protection, and data controls via Purview. The engineer will enhance threat detection, support incident response, manage vulnerabilities, and ensure alignment with standards like NCSC CAF, ISO 27001, and NIST CSF, while acting as a security SME across technical and business teams.

Yolk Recruitment Cardiff, Cymru / Wales, CF10 2AF, United Kingdom £62,000 – £72,000 pa

Threat Detection Engineer

This role involves designing and developing threat-led detections using threat intelligence and hunting outputs, collaborating with an MSP SOC, and building automated reporting dashboards. The focus is on protecting sensitive genomic and AI-driven data, with high autonomy and a mission to advance precision healthcare.

Additional Resources London, United Kingdom £60,000 – £80,000 pa

Hybrid Permanent Flexible

Cyber Security Engineer

This role involves designing and implementing security automation workflows, developing scripts with Python and PowerShell, and managing security tools like SIEM and EDR/XDR platforms. The engineer will secure cloud environments across Azure, AWS, and Microsoft 365, support threat detection and incident response, and contribute to the adoption of AI-driven security technologies. Collaboration with IT, development, and security teams ensures secure-by-design solutions are delivered effectively.

Reed Technology Immingham, Lincolnshire, United Kingdom £65,000 – £70,000 pa

Hybrid Permanent

Cyber and Information Security Manager

Cyber & Information Security ManagerLocation: Peterborough or LondonSalary: £50,000–£60,000VIQU is looking for an experienced Cyber & Information Security Manager for our client to take responsibility for cyber and information security within a large, geographically distributed organisation.You'll own and develop the...

VIQU IT Clerkenwell, London, EC1R 0EA, United Kingdom £50,000 – £60,000 pa

Information Security Manager

This role involves managing and improving the organisation's information security framework, with a focus on ISO 27001 compliance, risk assessment, and incident response. The Information Security Manager will embed security controls across systems and processes, lead audits, and drive a strong security culture through training and awareness. Close collaboration with technology, risk, and compliance teams ensures security aligns with business objectives in a regulated environment.

Adele Carr Recruitment Limited Liverpool, United Kingdom £55,000 – £65,000 pa

On-site Permanent Clearance Required

ICT Security Analyst

ICT Security AnalystDaily rate: £19.32 per hour PAYE inside IR35Location: Milton Keynes Civic OfficesContract: 3 monthsWorking hours: 37 per week, office basedPurpose of the Role:Opus People Solutions are recruiting on behalf of Milton Keynes Council for an ICT Security Analyst...

Opus People Solutions Milton Keynes, Buckinghamshire, United Kingdom

Sr. AI Threat Researcher

A senior individual contributor role focused on researching how threat actors exploit AI across the attack lifecycle, including LLM-powered social engineering, AI-generated malware, and attacks on agentic AI systems. The role involves analyzing telemetry and OSINT to detect adversarial AI use, developing detection strategies, automating research workflows using AI, and producing actionable intelligence for internal and external dissemination. Works cross-functionally with threat researchers, malware analysts, and engineers to integrate findings into protections and operational systems.

Sophos United Kingdom

Remote Permanent

Managed Security Analyst

This role involves monitoring, triaging, and investigating security alerts across customer environments, acting as a bridge between IT support and security operations. The analyst will support incident response, vulnerability management, and customer-facing security projects including MFA and security tooling deployments. It requires hands-on technical expertise in Microsoft 365, Azure, Defender, and Entra ID, along with direct engagement to explain security issues and recommend solutions.

Ultimaze Ltd trading as TSR Select Ss117Aa, United Kingdom £30,000 – £35,000 pa

Threat Detection Engineer

Design and develop threat-led detection capabilities using Microsoft Sentinel, KQL, and threat intelligence to protect sensitive genomic and AI-driven healthcare data. Build automated reporting dashboards, collaborate with an outsourced SOC, and ensure monitoring coverage across cloud, SaaS, and Kubernetes environments. Contribute to security initiatives including ISO 27001 compliance and detection logic documentation.

Additional Resources Wc1A2Sl, United Kingdom £60,000 – £80,000 pa

Hybrid

SOC Shift Lead

Leads a team of SOC analysts during assigned shifts, ensuring high-quality incident triage, investigation, and documentation. Oversees shift operations, conducts quality assurance, mentors junior staff, and drives process improvements in line with SLAs. Works closely with engineering and customer teams to enhance threat detection and response through rule tuning, reporting, and service refinement.

Claranet Leeds, United Kingdom

SecOps Engineer

SecOps Engineer - Central London (hyrbid working)Up to £75,000 PAWell-established and highly profitable construction engineering business is seeking an experienced SecOps Engineer to join them on a permanent basis. This is a critical leadership role within an organisation undergoing significant...

Context Recruitment London, United Kingdom