217 jobs for “Incident Response Analyst”
CrowdStrike United Kingdom
Lead incident response engagements for a global cybersecurity firm, conducting intrusion investigations under outside counsel direction. Perform host and network forensics across Windows, Mac and Linux, basic malware analysis, and threat hunting across large data sets, while producing reports for customers, regulators and legal counsel.
CrowdStrike Reading
A customer-facing technical role supporting the Value Selling sales play through TDDs, POVs, RFIs and RFPs, architecting and demonstrating complex security solutions. The position also involves competitive research, internal enablement sessions, technical documentation, and mentoring junior Sales Engineers, with a focus on the Falcon platform and incident response, forensics or security analytics.
Sellick Partnership Newcastle upon Tyne £57,000 pa
Protect business systems, infrastructure and data by monitoring, investigating and responding to cyber threats and incidents. Manage vulnerability remediation, patching and endpoint security while securing cloud, network and endpoint environments. Support governance, audits and compliance with standards such as ISO 27001 and Cyber Essentials Plus, working with internal teams and third-party suppliers.
Robert Walters London £60,000 – £65,000 pa
Day-to-day management of cloud and on-premises infrastructure, covering Azure, Microsoft 365, Active Directory, Intune, SCCM and VMware, alongside security monitoring with SIEM, EDR and Microsoft Defender. The role also involves PowerShell automation, vulnerability and patch management, disaster recovery planning and supplier oversight, with scope to deputise for the IT Operations & Security Manager.
Darktrace London
Customer-facing pre-sales technical role supporting Key Account Managers to design and manage Darktrace deployments for the UK's largest enterprise customers. Involves building technical relationships, responding to RFIs/RFPs, designing deployment architectures, and evangelising products at events, with roughly 20% travel.
Guidant Global Cheltenham £550 – £750 pd
An IdAM Architect role within a Security Architecture team, shaping enterprise identity and access capabilities across cloud transformation and service management convergence programmes. Day to day involves security architecture reviews, risk and vulnerability assessments, threat modelling, and designing identity solutions using SSO, MFA, IGA, PAM and federation standards. Works closely with solution architects, engineers and risk advisors to embed security by design.
Guidant Global London £500 ph
A contract IdAM Architect role within a Security Architecture team, shaping enterprise identity and access capabilities across cloud transformation and service management convergence programmes. Day to day involves security architecture reviews, risk and vulnerability assessments, threat modelling, and designing identity solutions covering SSO, MFA, IGA, PAM and federation standards. Works closely with solution architects, engineering, risk advisors and business stakeholders to embed security by design.
Twinstream Limited Bristol £50,000 – £60,000 pa
Hands-on senior role taking operational ownership of a corporate IT estate, managing cloud services, Microsoft 365, Entra ID, networking, endpoint security and automation. Involves leading complex incident resolution, patching, backups and business continuity while mentoring colleagues and working with suppliers alongside the IT Technical Lead.
CPS Group Cardiff £40,000 – £45,000 pa
Client-facing technical role in a Microsoft-focused security partner's Cyber Security Delivery Team, acting as a trusted point of contact for customers. Day to day involves tuning Defender and Entra controls, building KQL detections in Microsoft Sentinel, running phishing simulations and vulnerability scans, and supporting incident response and reporting.
Alexander Mae HR Ltd Malmesbury £130,000 – £140,000 pa
A senior leadership role reporting to the CFO, owning the strategic and operational direction of the IT function across a diverse private group. The remit spans technology strategy, AI and emerging tech adoption, data governance, cybersecurity, cloud, infrastructure and service delivery, plus budget, supplier and team leadership. It is distinct for its board-level influence and mandate to define a new technology roadmap rather than inherit one.
Vivo Talent Cardiff £50,000 – £55,000 pa
Hands-on role contributing to the design, build and support of an Azure cloud-native platform during a period of modernisation and replatforming. Involves platform automation, Infrastructure as Code, DevOps tooling, incident response and root-cause analysis, working alongside senior engineers and architects. Suits someone with solid cloud engineering understanding who wants to deepen their expertise and take on increasing technical ownership.
Fawkes & Reece London London £50,000 – £55,000 pa
Owns information security policies, risk management, data protection and business continuity within a global Group IT function, working alongside senior security managers. Hands-on role embedding security into business processes, maintaining ISO 27001 documentation, running audits and DPIAs, and supporting incident response and awareness training.
Darktrace Cambridge
Join a global team developing and improving threat detection capabilities across key product areas. You'll respond to customer incidents, analyse cyber threat intelligence, and build detection schemes aligned to adversary techniques, collaborating with Development, Security Research and SOC teams.
Framatome Bristol £63,120 – £94,680 pa
Combines deep technical cybersecurity expertise with commercial skills to build a local cybersecurity practice and drive client relationships within the UK nuclear sector. Leads market-entry strategy, develops pipelines for consulting and field services, and acts as senior subject matter expert on OT/ICS and critical infrastructure security. Also recruits and develops a local team while aligning with global business lines.
Amazon London
Hands-on security engineering role securing production AI systems deployed inside enterprise customer environments. You conduct design and code reviews, threat modeling and penetration testing for agentic workflows and RAG pipelines, and build security automation such as scanning tools, CI/CD gates and guardrail testing scripts. Work alongside FDE delivery pods, with up to 25% travel.
