Latest Incident Response Jobs

Spotlight
Appvia logo

AWS Senior Platform Engineer - UK Security Clearance eligibility required

This role involves designing, building, and operating secure, scalable AWS platforms. You will work hands-on with multi-disciplinary teams, support application and platform workloads, and contribute to continuous improvement of cloud platforms and delivery pipelines.

Appvia London, Eng, United Kingdom £75,000 pa
Hybrid Permanent
Spotlight
RiverSafe logo

Senior Security Consultant (Delivery & Growth)

This role involves leading technical security consulting engagements, working closely with client stakeholders to solve complex security challenges and deliver high-quality consulting outputs. The consultant will also identify and develop opportunities for follow-on work, contributing to account growth and client value.

RiverSafe London, United Kingdom
Hybrid Permanent
CrowdStrike logo

Incident Response Sr. Consultant

Conduct high-profile incident response investigations for major organizations, performing host and network forensics across Windows, Mac, and Linux environments. Develop advanced threat-hunting techniques and deliver actionable findings to executives, legal teams, and regulators. Work within a global cybersecurity leader using AI-native platforms to combat nation-state and e-crime threats.

CrowdStrike United Kingdom
Remote Permanent Clearance Required
CrowdStrike logo

Incident Response - Professional Services - Summer 2027 , UK)

This 12-week summer internship focuses on incident response, covering forensic analysis, cloud forensics, log analysis, and consulting skills. Interns will work on a mock engagement, receive training from experts, and gain hands-on experience with the CrowdStrike Falcon platform.

CrowdStrike London, United Kingdom
Remote Internship

Incident Response Engineer 2

As an Incident Response Engineer 2, you will perform advanced investigative, forensic, and containment activities during active cyber incidents. You will work with moderate autonomy, support Incident Advisors, and mentor junior analysts to ensure consistent execution and documentation quality.

Sophos United Kingdom
Remote

Senior Incident Response Consultant, Rapid Response

Leads high-pressure incident response engagements for organizations affected by cyberattacks, directing forensic investigations and coordinating with customer teams. Produces detailed reports mapped to MITRE ATT&CK, focusing on ransomware and business email compromise (BEC) incidents. Operates in a rapid-response environment with a rotating weekend-heavy schedule to support global customers.

Sophos United Kingdom
Remote Permanent

Principal Consultant, Incident Response (Unit 42)

Leads high-stakes incident response engagements for clients, conducting forensic investigations across Windows, Linux, and macOS systems to identify breaches and attack vectors. Uses advanced tools like EnCase, FTK, and Splunk to analyze logs and memory artifacts, delivering actionable remediation strategies. Mentors junior consultants and collaborates with internal teams to strengthen client security postures.

Palo Alto Networks London, United Kingdom
Hybrid Permanent
Bridewell logo

Senior Incident Responder

The Senior Incident Responder will investigate and respond to security incidents, support incident preparation and recovery, and help clients strengthen their security posture. The role involves working across endpoint, network, and cloud environments, collaborating with colleagues and clients to deliver effective investigations and improve response processes.

Bridewell London, United Kingdom
Hybrid Permanent

SOC Analyst

This role involves monitoring and investigating security alerts from various sources, triaging incidents, and coordinating containment and recovery efforts. The analyst will also develop threat hunting strategies, improve detection rules, and maintain incident response documentation.

Tank Recruitment London, United Kingdom

SOC Lead

This role involves overseeing SOC activities, leading incident response, and mentoring a team of analysts. The focus is on cyber threat detection, incident investigation, and using the Splunk Enterprise Security platform.

NCC Group Remote, United Kingdom
Hybrid

SOAR Engineer (SPLUNK)

The role involves designing, building, and maintaining security automations using Splunk to detect, investigate, and respond to cyber threats. Responsibilities include advanced analytics, scripting, creating new use cases, validating automation, and mentoring junior engineers.

NCC Group Remote, United Kingdom
Remote Permanent

IT Security Manager - UK - Competitive Salary/Rate

This role involves leading vulnerability management, security testing, incident response, and governance. You'll work with internal and external teams to strengthen security controls and ensure compliance with corporate and regulatory requirements.

Nigel Frank International London, United Kingdom £50,000 – £70,000 pa

Senior Security & Cyber Operations Manager (Financial Services)

This role involves leading and optimizing the end-to-end security operations and cyber defense ecosystem, including incident response, threat detection, and AI integration. The manager will drive the practical application of AI and SOAR to enhance the SOC's capabilities and ensure rapid detection and response to security incidents.

LMA Recruitment London, United Kingdom
Hybrid Permanent

Cyber Security Assurance Manager

This role involves leading a large-scale cyber technical assurance programme, managing a team of analysts, and providing independent oversight of security controls across various domains. The successful candidate will engage with senior stakeholders, deliver actionable reporting, and drive continuous improvement in the control environment.

GCS London, United Kingdom £600 – £700 pd

Senior Platform Engineer – AWS & Terraform

This role involves designing and operating AWS infrastructure, building CI/CD pipelines, and establishing monitoring and security practices. You'll lead incident response, develop disaster recovery plans, and support PCI-DSS and FCA compliance, with significant influence over the platform's architecture and cloud strategy.

Adria Solutions Manchester, United Kingdom £70,000 – £85,000 pa

Head of Security Information Security

This role involves leading and evolving the information security strategy, ensuring compliance with major standards, and embedding security practices across the product lifecycle. The Head of Information Security will work closely with the CTO and engineering teams to drive security improvements through AI, automation, and technical controls, while also managing risk, threat modelling, and incident response.

Opus Recruitment Solutions London, United Kingdom £600 – £800 pd

Enterprise Security Risk Manager

This role involves assessing cyber risks, leading security investigations, and ensuring effective security controls across various domains. You'll work closely with senior stakeholders to shape the organization's security posture and advise on strategic actions.

Head Resourcing Edinburgh, Alba / Scotland, United Kingdom £70,000 pa