Latest Incident Response Jobs

Security Advisor II, Falcon Complete

Security Advisor within the Falcon Complete team, guiding customers toward a secure experience with CrowdStrike's platform. Day to day involves assessing customer Falcon environments, recommending remediation, contacting customers on misalignments, and documenting issues against SLAs. Requires Windows, Linux and macOS familiarity plus threat detection and incident response knowledge.

CrowdStrike Ireland

Remote

Analyst I, Falcon Complete , GBR)

Monitor and analyse security alerts on the CrowdStrike platform, handling incidents across Windows, Mac and Linux, performing malware analysis and remote remediation. The role sits in a virtual security operations centre, producing written findings for customer management and improving detection and triage processes.

CrowdStrike United Kingdom

Remote

Cyber Security Engineer

Hands-on role taking technical ownership of cyber security across a predominantly Microsoft environment, working with an infrastructure team and external SOC partners. Day to day involves assessing the estate for security gaps, hardening systems, operating Defender/XDR, EDR and Sentinel, managing Entra ID access controls, and responding to incidents and vulnerabilities.

Identify Solutions Swansea £45,000 – £55,000 pa

Hybrid

Head of Information Security

Own the information and cyber security agenda for an international organisation, defining strategy, policies and technical baselines across networks, cloud, identity and endpoints. A senior individual-contributor role without line management, working with infrastructure, technology and external providers to drive vulnerability management, monitoring, incident response and security architecture. Requires hands-on technical depth plus the ability to influence senior stakeholders.

Endeavour Recruitment London £115,000 – £125,000 pa

Hybrid

IdAM Architect

An IdAM Architect role within a Security Architecture team, shaping enterprise identity and access capabilities across cloud transformation and service management convergence programmes. Day to day involves security architecture reviews, risk and vulnerability assessments, threat modelling, and designing identity solutions using SSO, MFA, IGA, PAM and federation standards. Works closely with solution architects, engineers and risk advisors to embed security by design.

Guidant Global Cheltenham £550 – £750 pd

On-site Contract

Cyber Security Specialist

Acts as the cyber security subject matter expert within an IT Governance & Security function, leading governance, risk, compliance and resilience across business-critical applications, cloud services and operational railway systems. Owns the ISMS and NIS/GDPR compliance while managing security operations, threat monitoring, incident response and vulnerability management. Develops Microsoft Sentinel and Defender XDR capabilities and provides governance across Azure, AWS, Microsoft 365, Entra ID and Intune, including support for ERTMS/ETCS transformation.

DB Cargo (UK) Limited Doncaster £70,000 – £75,000 pa

On-site Contract Clearance Required

ICT Security Analyst

Hands-on first point of contact for ICT security issues, monitoring systems, investigating threats and responding to incidents while maintaining documentation and response procedures. The role also covers firewall, IDS, anti-virus and log management controls, security awareness training, and wider ICT support including Microsoft 365 administration and network monitoring within ITIL frameworks.

BRAINTREE DISTRICT COUNCIL Braintree £37,896 – £41,541 pa

Hybrid Permanent

IdAM Architect

A contract IdAM Architect role within a Security Architecture team, shaping enterprise identity and access capabilities across cloud transformation and service management convergence programmes. Day to day involves security architecture reviews, risk and vulnerability assessments, threat modelling, and designing identity solutions covering SSO, MFA, IGA, PAM and federation standards. Works closely with solution architects, engineering, risk advisors and business stakeholders to embed security by design.

Guidant Global London £500 ph

On-site Contract

Data Protection Manager

Owns data protection and information governance across a healthcare organisation, handling SARs, DPIAs, privacy notices, information sharing agreements, breach management and IG audits. Works with senior leadership and an external DPO, partnering with IT and security teams on cyber security, ISO 27001 and DSPT compliance while delivering training and legislative guidance.

Diamond Search Recruitment Ashford £50,000 – £55,000 pa

Hybrid Permanent

Senior IT Systems Administrator

Hands-on senior role taking operational ownership of a corporate IT estate, managing cloud services, Microsoft 365, Entra ID, networking, endpoint security and automation. Involves leading complex incident resolution, patching, backups and business continuity while mentoring colleagues and working with suppliers alongside the IT Technical Lead.

Twinstream Limited Bristol £50,000 – £60,000 pa

Hybrid Clearance Required

Security Engineer

Client-facing technical role in a Microsoft-focused security partner's Cyber Security Delivery Team, acting as a trusted point of contact for customers. Day to day involves tuning Defender and Entra controls, building KQL detections in Microsoft Sentinel, running phishing simulations and vulnerability scans, and supporting incident response and reporting.

CPS Group Cardiff £40,000 – £45,000 pa

Hybrid

Head of Technology

A senior leadership role reporting to the CFO, owning the strategic and operational direction of the IT function across a diverse private group. The remit spans technology strategy, AI and emerging tech adoption, data governance, cybersecurity, cloud, infrastructure and service delivery, plus budget, supplier and team leadership. It is distinct for its board-level influence and mandate to define a new technology roadmap rather than inherit one.

Alexander Mae HR Ltd Malmesbury £130,000 – £140,000 pa

On-site

Senior Infrastructure Lead

Owns the Group's infrastructure estate across Microsoft 365, Azure, networks, security and end-user services, defining the technology roadmap and leading modernisation and transformation initiatives. Acts as primary technical owner of the MSP and key suppliers, driving resilience, identity and endpoint security, and multi-site networking. Hybrid role in Manchester within a growing property investment business.

Michael Page Manchester £60,000 – £70,000 pa

Hybrid

Cloud Engineer

Hands-on role contributing to the design, build and support of an Azure cloud-native platform during a period of modernisation and replatforming. Involves platform automation, Infrastructure as Code, DevOps tooling, incident response and root-cause analysis, working alongside senior engineers and architects. Suits someone with solid cloud engineering understanding who wants to deepen their expertise and take on increasing technical ownership.

Vivo Talent Cardiff £50,000 – £55,000 pa

Hybrid Permanent

Information Security Manager

Owns information security policies, risk management, data protection and business continuity within a global Group IT function, working alongside senior security managers. Hands-on role embedding security into business processes, maintaining ISO 27001 documentation, running audits and DPIAs, and supporting incident response and awareness training.

Fawkes & Reece London London £50,000 – £55,000 pa