Latest Incident Response Jobs

Cyber Threat Intelligence Technical Lead

Own and lead the end-to-end Threat Intelligence Platform, driving strategic design, delivery and development to maximise value across a global cyber defense organisation. Build API integrations and connectors across commercial intelligence sources, govern intelligence standards such as source reliability, confidence scoring and TLP handling, and mentor junior analysts while producing intelligence for technical and executive audiences.

eFinancialCareers London

Falcon Complete Analyst Intern Graduate - Summer 2027 (Reading, GBR)

Six-month graduate internship in the Falcon Complete team, working from the Reading office on security alert triage, incident response and malware analysis. Interns learn the Falcon platform and internal tooling, investigate customer inquiries and handle high-pressure incidents alongside experienced analysts.

CrowdStrike Reading

On-site Internship

Security Advisor II, Falcon Complete

Security Advisor role within the Falcon Complete team, assessing customer Falcon environments against standards and recommending remediation to improve security posture. Involves direct customer contact, documenting and resolving issues within SLAs, producing service reports, and partnering with internal support teams to troubleshoot technical problems.

CrowdStrike United Kingdom

Remote

Head of Business Continuity & Resilience

Leads a global business continuity, crisis management and incident response programme across operations in over 170 countries, owning the BCR framework, business impact analysis, testing and assurance. Partners with senior leaders, IT disaster recovery, Group Security and local continuity leads to embed resilience in a federated, matrixed organisation.

Cambridge University Press & Assessment (CUPA) Cambridge £69,600 – £85,000 pa

Hybrid Permanent

Cloud Security Engineer

Hands-on role securing enterprise cloud environments across Azure and GCP, covering vulnerability remediation, cloud security tooling, Microsoft Defender, Conditional Access and identity controls. Works with infrastructure and engineering teams to embed best practice, support governance and compliance, and contribute to incident response, with remote on-call expected within six months.

Adecco Warwick £65,000 – £75,000 pa

Hybrid Clearance Required

Information Security Assistant Manager

Supports information security, cyber resilience, risk and governance in a banking environment, managing the ISO 27001 ISMS, security risk assessments, audits and regulatory engagements. Engages with Security Operations on incidents, vulnerabilities, threat intelligence and cloud security, and produces management reports while influencing senior stakeholders.

Superb People London £60,000 – £70,000 pa

Information Security Manager

Lead information security, product cybersecurity and cyber risk management for a digital health organisation, owning the ISMS, policies and controls. Day to day covers risk assessments, threat modelling, penetration testing oversight, cloud and application security, incident response and supplier reviews, while embedding security into the software and product development lifecycle. Works closely with Software Development, Quality, Regulatory, Clinical, IT and Operations teams, acting as the organisation's security subject matter expert.

Reed Technology Cambridge £85,000 – £100,000 pa

Hybrid Contract

Cyber Security Engineer

Hands-on security engineering role protecting Windows and Linux environments, endpoint controls, and Azure cloud security for a hedge fund's trading and research systems. Involves application security, DevSecOps in CI/CD, vulnerability management, incident response, and security automation, working closely with engineering and quant teams in a small, high-impact team.

Huxley Associates London £200,000 – £250,000 pa

Senior Solutions Engineer - Enterprise Accounts

Customer-facing pre-sales technical role supporting Key Account Managers to design and manage Darktrace deployments for the UK's largest enterprise customers. Involves building technical relationships, responding to RFIs/RFPs, designing deployment architectures, and evangelising products at events, with roughly 20% travel.

Darktrace London

Hybrid

Transformation Success Engineer (TSE)

Owns the end-to-end migration of enterprise customers from legacy security platforms to Cortex, executing data cutovers, policy mappings, API setups and log ingestion validations. Runs practitioner-focused Day in the Life workshops and Value Realization sessions with customer leadership, using dashboards to demonstrate ROI and secure project sign-off.

Palo Alto Networks Paris, France

Remote

Transformation Success Engineer (TSE)

Owns the end-to-end migration of enterprise customers from legacy security platforms to modern Cortex, Prisma Cloud or Strata deployments within a high-velocity sprint model. Executes data cutovers, policy mappings, API and log ingestion work, and runs Day-in-the-Life workshops and value realization sessions with customer security leadership.

Palo Alto Networks Berlin, Germany

Remote

Senior SOC Detection Engineer

Hands-on contract role owning the end-to-end detection engineering lifecycle, translating threat intelligence, hunting findings and adversary techniques into effective detection rules. Builds behavioural analytics and detection content across endpoint, identity, cloud, network and email telemetry using KQL, SPL, Sigma, Python and PowerShell, with tuning, purple teaming and Detection-as-Code work alongside SOC, IR and Red Team specialists.

DCV Technologies Royal Leamington Spa £550 – £650 pd

Hybrid Contract

OT Security Engineer

Lead and coordinate cybersecurity assessments, risk remediation and control improvements across Operational Technology environments, translating security gaps into practical remediation plans. Work with OT/ICS engineers, IT, technical authorities and third-party suppliers to strengthen critical operational systems, covering asset inventories, privileged access, network segmentation, monitoring and incident response.

CBSbutler Holdings Limited trading as CBSbutler Aberdeen £650 – £720 pd

Hybrid Contract

Cyber Security Engineer

Hands-on cyber role maintaining and improving security controls across identity, endpoint, cloud, SaaS and infrastructure, promoting least-privilege and zero-trust principles. You will run vulnerability and exposure management, investigate alerts and incidents, and produce risk and remediation reporting while supporting audits and compliance. As the first dedicated cyber hire in a 220-person fintech, the position works closely with IT operations, development, platform teams and external security providers.

Proximity Recruitment Northampton £60,000 – £70,000 pa

On-site

Cyber Security Engineer

Hands-on cyber security role maintaining and improving controls across identity, endpoint, cloud, SaaS and business applications, with a least-privilege and zero-trust focus. You will run vulnerability and exposure management, investigate alerts and incidents, and produce risk and remediation reporting while supporting audits and compliance. As the first dedicated cyber hire in a 220-person fintech, the position involves close work with IT operations, development, platform teams and external security providers.

Proximity Recruitment London £70,000 – £75,000 pa

Hybrid