Latest Incident Response Jobs

Spotlight

Senior Security Consultant (Delivery & Growth)

This role involves leading technical security consulting engagements, working closely with client stakeholders to solve complex security challenges and deliver high-quality consulting outputs. The consultant will also identify and develop opportunities for follow-on work, contributing to account growth and client value.

RiverSafe London, United Kingdom

Hybrid Permanent

Incident Response Engineer 2

As an Incident Response Engineer 2, you will perform advanced investigative, forensic, and containment activities during active cyber incidents. You will work with moderate autonomy, support Incident Advisors, and mentor junior analysts to ensure consistent execution and documentation quality.

Sophos United Kingdom

Remote

Senior Incident Response Investigator

This role involves leading incident response investigations for UK defence industry clients, delivering high-quality reports, and mentoring junior team members. You will also support incident readiness activities and contribute to the growth of the incident response practice.

Forward Role Cheltenham, United Kingdom £80,000 – £100,000 pa

Senior Incident Response Consultant, Rapid Response

Leads high-pressure incident response engagements for organizations affected by cyberattacks, directing forensic investigations and coordinating with customer teams. Produces detailed reports mapped to MITRE ATT&CK, focusing on ransomware and business email compromise (BEC) incidents. Operates in a rapid-response environment with a rotating weekend-heavy schedule to support global customers.

Sophos United Kingdom

Remote Permanent

Principal Consultant, Incident Response (Unit 42)

Leads high-stakes incident response engagements for clients, conducting forensic investigations across Windows, Linux, and macOS systems to identify breaches and attack vectors. Uses advanced tools like EnCase, FTK, and Splunk to analyze logs and memory artifacts, delivering actionable remediation strategies. Mentors junior consultants and collaborates with internal teams to strengthen client security postures.

Palo Alto Networks London, United Kingdom

Hybrid Permanent

Senior Incident Responder

The Senior Incident Responder will investigate and respond to security incidents, support incident preparation and recovery, and help clients strengthen their security posture. The role involves working across endpoint, network, and cloud environments, collaborating with colleagues and clients to deliver effective investigations and improve response processes.

Bridewell London, United Kingdom

Hybrid Permanent

SOC Analyst

This role involves monitoring and investigating security alerts from various sources, triaging incidents, and coordinating containment and recovery efforts. The analyst will also develop threat hunting strategies, improve detection rules, and maintain incident response documentation.

Tank Recruitment London, United Kingdom

SOC Lead

This role involves overseeing SOC activities, leading incident response, and mentoring a team of analysts. The focus is on cyber threat detection, incident investigation, and using the Splunk Enterprise Security platform.

NCC Group Remote, United Kingdom

Hybrid

SOAR Engineer (SPLUNK)

The role involves designing, building, and maintaining security automations using Splunk to detect, investigate, and respond to cyber threats. Responsibilities include advanced analytics, scripting, creating new use cases, validating automation, and mentoring junior engineers.

NCC Group Remote, United Kingdom

Remote Permanent

Cyber Security Engineer - MS Sentinel, Defender, SSO, PKI, SC-100/200, CISSP

This role involves strengthening cybersecurity across a global IT environment through hands-on engineering, incident response, and vulnerability management. You'll work with tools like MS Sentinel and MS Defender to monitor threats, remediate risks in Windows Server and Azure environments, and support major incidents. The position also includes designing secure infrastructure solutions and improving security posture through proactive risk assessment and technical leadership.

Comtecs London, United Kingdom £90,000 – £100,000 pa

3rd Line Security Analyst - Reading Sentinel Defender XDR CrowdStrike

This role involves leading serious security incidents, conducting forensic investigations, and developing detections and automation using tools like Sentinel, Defender XDR, and CrowdStrike. The analyst will also support the wider team by mentoring colleagues and maintaining documentation.

Global Technology Solutions Ltd Rg15Bs, United Kingdom £50,000 – £60,000 pa

Hybrid

Cyber Defence Manager

The Cyber Defence Manager will lead the organization's cyber defence and information security capabilities, manage a team of security professionals, and drive security initiatives and compliance. The role involves partnering with technology and business teams to embed security into projects and maintaining awareness of emerging threats.

HAYS Specialist Recruitment Birmingham, United Kingdom £70,000 – £85,000 pa

Senior Platform Engineer – AWS & Terraform

This role involves designing and operating AWS infrastructure, building CI/CD pipelines, and establishing monitoring and security practices. You'll lead incident response, develop disaster recovery plans, and support PCI-DSS and FCA compliance, with significant influence over the platform's architecture and cloud strategy.

Adria Solutions Manchester, United Kingdom £70,000 – £85,000 pa

Junior SOC Analyst

As a Junior SOC Analyst, you will support the monitoring and protection of business systems, helping to identify and escalate security threats. You will gain hands-on experience with security monitoring tools, threat detection, and incident management processes, contributing to the overall security posture of a growing financial services organization.

Back TO Work Nottingham, Nottinghamshire, United Kingdom £26,100 pa

Enterprise Security Risk Manager

This role involves assessing cyber risks, leading security investigations, and ensuring effective security controls across various domains. You'll work closely with senior stakeholders to shape the organization's security posture and advise on strategic actions.

Head Resourcing Edinburgh, Alba / Scotland, United Kingdom £70,000 pa

Junior SOC Analyst

As a Junior SOC Analyst, you will support the monitoring and protection of business systems, identify security threats, and assist with incident management. You will gain hands-on experience with security monitoring tools, threat detection, and compliance activities, while working in a growing financial services organization.

Back TO Work Derby, Derbyshire, DE1 3AE, United Kingdom £26,100 pa