217 jobs for “Incident Response Analyst”
Amazon London
Lead and grow a team of security engineers and incident managers, owning incident response processes, SLAs and metrics at AWS scale. Partner with service teams on prioritisation and remediation, drive automation and process improvements, and guide architectural and technical strategy across organisations.
CrowdStrike United Kingdom
Leads and supports cloud incident response engagements and security assessments for clients, analysing cloud and hybrid architectures and providing remediation guidance. Also develops internal and open-source tooling, researches emerging cloud security techniques, and mentors junior consultants within the services team.
Amazon Manchester
Monitors networks and systems for threats, triages security alerts and documents suspicious activity, working with partner teams on daily threat detection and incident response across AWS technologies at scale. Involves security automation, tracking detective controls like GuardDuty, CrowdStrike Falcon and Wiz Defend, and periodic on-call including weekends.
Bridewell London
Investigate and respond to security incidents for critical national infrastructure and other clients, covering endpoint, network and cloud environments. The role spans both managed SOC services and consulting engagements, contributing to incident preparation, recovery and improving clients' security posture.
ARM Reading £500 – £600 pd
Owns the end-to-end major incident lifecycle in a complex, multi-supplier enterprise IT environment, coordinating technical teams, suppliers and business stakeholders to restore services quickly. Drives root-cause investigations, post-incident reviews and continual service improvement, using ITIL 4 and ServiceNow. Requires active SC clearance and sole British, Italian or Japanese citizenship.
Adecco Dublin, Ireland £431 – £604 pd
Contract role ensuring reliability and operational excellence for Azure platform services under a product operating model. Day to day involves observability, incident response, automation, resilience testing and runbook development for Azure landing zones, ingress/egress DMZs, service integration layers and AI infrastructure supporting Microsoft Foundry and private OpenAI access. Works closely with platform engineering, networking, security and AI infrastructure teams to embed reliability into Azure-native solutions.
Adria Solutions Manchester £70,000 – £85,000 pa
Own AWS infrastructure, CI/CD pipelines and observability for a new fintech platform, reporting to the CTO. Hands-on work spans Terraform IaC, Kubernetes, security controls, incident response and PCI-DSS/FCA compliance, with significant influence over tooling and scaling decisions in an early-stage team.
Opus Recruitment Solutions London £600 – £800 pd
Lead and strengthen a modern information security function, working hands-on with the CTO and engineering teams to embed security across the product lifecycle. Own the security strategy and drive ISO 27001, SOC 2, NIST, GDPR and PCI DSS compliance, while improving detection and response through AI, automation and technical controls.
Yolk Recruitment Cardiff £62,000 – £72,000 pa
Hands-on security engineering role focused on building and improving controls across a Microsoft-centric estate, including Defender, Sentinel, Azure and Entra ID. Involves vulnerability management, data protection with Purview, incident response support and embedding security into projects, with influence over strategy rather than pure SOC operations.
83zero London £110,000 – £125,000 pa
Lead DevSecOps adoption across complex technology transformation programmes, combining hands-on engineering with technical leadership. Build secure CI/CD and GitOps pipelines, embed security scanning and secrets management, and drive IaC, observability and compliance practices. Requires UK GDS public sector experience and SC clearance eligibility.
Matchtech Stevenage £67 – £74 ph
Operational support, administration and configuration management across Infrastructure and Workplace Windows environments for a defence client, including patching, change management and asset/inventory auditing. Acts as Tier 2/Tier 3 escalation for Windows incidents, performing incident response, root-cause analysis and remediation within highly restricted, fully on-site environments.
ARCHER RESOURCING LTD Aberdeen £55,000 – £80,000 pa
Lead cyber security, information assurance and governance across a Group covering corporate IT, OT, cloud and commercial software products. Own the security roadmap with the CIO, maintain policies and the cyber risk register, run incident response with an external SOC, and drive ISO 27001, Cyber Essentials Plus, SOC 2, NIST CSF and IEC 62443 compliance. Also embeds security into the SDLC and reviews customer-facing product architecture.
Fort Recruitment Birkenhead £50,000 – £55,000 pa
Hands-on senior role owning a marine energy company's IT infrastructure, covering network architecture, security, Linux and AWS administration, DNS, email systems, monitoring, backup and automation. The administrator maintains and improves office, production, lab and remote-access networks, plus disaster recovery and access control, with full training provided.
MJA (London) Ltd London
Lead and develop the organisation's cyber security strategy, owning the information security framework including ISO 27001 and Cyber Essentials Plus. Reporting to the CIO, you will run security operations, manage an outsourced SOC, oversee incident response and vulnerability management, and mentor the security team. Legal-sector experience is mandatory, and the role spans Microsoft/Azure cloud security and SaaS assurance.
Seetec Hockley £70,000 – £75,000 pa
Lead the organisation's cyber security strategy, governance, assurance and operational security, owning the roadmap, vulnerability management and compliance. Provide hands-on technical leadership across Microsoft Sentinel, Defender, Huntress, Tenable, identity and cloud security, and incident response, while line-managing a Cyber Security Engineer and advising senior stakeholders.
