Lead Threat Response Operations Analyst

Reference: sxbm5soplrbnp2ln2ynn

We are seeking a Lead Threat Response Operations Analyst to provide senior-level expertise in the identification, investigation, and containment of cyber threats. The role will lead day-to-day threat response activities, coordinate the analysis of security events, and ensure incidents are managed efficiently from initial detection through to remediation and post-incident review. You will work closely with security operations, infrastructure, application, risk, and business teams to assess potential impact, prioritise action, and reduce the likelihood of recurrence.

Key responsibilities include directing the investigation of complex and high-severity incidents; validating alerts and correlating intelligence from endpoint, network, identity, cloud, and application sources; developing and refining detection and response procedures; and providing clear updates to technical and senior stakeholders. You will contribute to threat hunting, forensic analysis, vulnerability-driven response, and the continuous improvement of playbooks, monitoring rules, automation, and operational metrics. The role will also involve mentoring analysts, supporting capability development, participating in an on-call or escalation rota where required, and ensuring that incident records, lessons learned, and control improvements are documented to a high standard.

Applicants should have substantial experience in security operations, incident response, threat hunting, or a related discipline, with proven experience leading investigations in a complex technology environment. Strong knowledge of security information and event management, endpoint detection and response, network analysis, identity security, cloud platforms, and common attack techniques is expected. Experience with scripting or automation, threat intelligence frameworks, digital forensics, and recognised incident response methodologies would be advantageous. You will need excellent analytical and communication skills, sound judgement under pressure, and the ability to translate technical findings into practical business risks and recommendations. Relevant professional certifications or equivalent practical experience are desirable.

COMPETITIVE SALARY
Added 14/09/2026
Reference: sxbm5soplrbnp2ln2ynn

Lead Threat Response Operations Analyst

Sandwich, England, United Kingdom Permanent Incident Response

Other similar jobs

Security Operations Engineer, AWS Security Cloud Response, Amazon Security Cloud Security Response

Added 14/10/2026

We are seeking a Security Operations Engineer to support cloud security response activities in a fast-paced, highly distributed environment. In this role, you will help protect cloud infrastructure, services, and customer data by investigating security events, coordinating incident response, and improving detection and response capabilities. You will work closely with security engineering, infrastructure, software development, and operations teams to identify threats, contain incidents, and reduce the likelihood of recurrence. Your responsibilities will include monitoring and analysing security alerts, conducting technical investigations, triaging suspected compromises, and supporting the full incident management lifecycle. You will develop and maintain incident response procedures, playbooks,...

Learn more

Incident Response Manager, Security Operations Group | Worldwide Operations Security

Added 07/10/2026

We are seeking an experienced Incident Response Manager to lead the coordination, investigation, and resolution of security incidents across a complex, globally distributed operational environment. This role will oversee incident response activities from initial detection and triage through containment, eradication, recovery, and post-incident review. You will work closely with security operations, threat intelligence, cyber investigations, technology, legal, risk, and business teams to protect people, facilities, information, and critical services. Key responsibilities include managing high-severity incidents and serving as an escalation point during active events; establishing incident priorities, response plans, communications, and decision-making processes; directing investigations involving cyber threats, insider risk,...

Learn more

Threat Intelligence Response Analyst

Added 05/10/2026

We are seeking a Threat Intelligence Response Analyst to monitor, assess, and respond to emerging cyber threats affecting the organisation, its technology environment, and its wider business operations. In this role, you will analyse intelligence from internal and external sources, identify indicators of compromise, and provide timely, actionable insights to support security operations and informed decision-making. You will work closely with incident response, security engineering, vulnerability management, and other technology teams to strengthen the organisation’s ability to detect and manage threats. Your responsibilities will include researching threat actors, campaigns, vulnerabilities, and attack techniques; assessing the relevance and credibility of intelligence;...

Learn more

Senior Cyber Threat Detection and Response Analyst

Added 14/09/2026

We are seeking a Senior Cyber Threat Detection and Response Analyst to lead the identification, investigation and containment of sophisticated cyber threats across a complex technology environment. You will monitor security events, analyse alerts and intelligence, and coordinate effective responses to incidents affecting networks, endpoints, cloud services, applications and critical data. The role will involve working closely with security engineering, infrastructure, risk and operational teams to strengthen defensive capabilities and reduce organisational exposure. Key responsibilities include developing and tuning detection rules, use cases and correlation logic; conducting advanced threat hunting across security telemetry; investigating indicators of compromise and suspicious activity;...

Learn more

Senior Threat Hunting & Incident Response - EMEA

Added 07/10/2026

We are seeking a Senior Threat Hunting & Incident Response professional to lead advanced cyber defence activities across the EMEA region. This role will be responsible for proactively identifying sophisticated threats, investigating security incidents and coordinating effective containment and recovery actions. You will work closely with security operations, infrastructure, cloud, application and risk teams to strengthen detection capabilities and reduce organisational exposure. Key responsibilities include designing and executing threat-hunting investigations across endpoint, network, identity, cloud and application environments; analysing security telemetry to identify indicators of compromise, attacker behaviour and emerging techniques; and leading incident response activities from initial triage through...

Learn more

Detection & Response Security Engineer, Threat Intelligence

Added 22/09/2026

We are seeking a Detection & Response Security Engineer, Threat Intelligence, to strengthen cyber defence capabilities across a complex and evolving technology environment. In this role, you will monitor the threat landscape, identify emerging risks, and translate intelligence into practical detection and response improvements. You will work closely with security operations, incident response, engineering, and risk teams to investigate suspicious activity, improve visibility, and help protect critical systems, data, and users. Key responsibilities will include collecting, analysing, and validating threat intelligence from open, commercial, and internal sources; developing and maintaining indicators of compromise, detection rules, and threat-hunting hypotheses; and mapping...

Learn more

Security Operations Engineer, AWS Security Cloud Response

Added 21/10/2026

We are seeking a Security Operations Engineer, AWS Security Cloud Response to help protect cloud environments, investigate security events and strengthen operational resilience. This role will suit an experienced security professional who is confident working across AWS services, responding to incidents and collaborating with technical teams in a fast-paced environment. You will monitor and investigate alerts from cloud security, identity, endpoint and network monitoring tools, assessing potential threats and coordinating appropriate responses. Responsibilities will include triaging incidents, conducting root-cause analysis, containing and remediating security issues, and maintaining accurate case records. You will also contribute to threat hunting, vulnerability investigations and...

Learn more

Incident Response Lead

Added 02/11/2026

We are seeking an experienced Incident Response Lead to take ownership of the organisation’s approach to identifying, managing and resolving technology and security incidents. This is a key role in strengthening operational resilience, reducing service disruption and ensuring that incidents are handled consistently, efficiently and with clear accountability. You will lead the response to major and complex incidents, coordinating technical teams, service owners, suppliers and senior stakeholders throughout the incident lifecycle. Responsibilities will include assessing impact and urgency, establishing appropriate response structures, maintaining accurate communications, directing investigation and recovery activities, and ensuring that agreed service levels are met. You will...

Learn more

Disputes & Investigations - Senior Director, Incident Response Lead

Added 26/10/2026

We are seeking an experienced Senior Director to lead incident response activities across a complex, highly regulated environment. This is a senior leadership role responsible for directing the response to significant disputes, investigations, misconduct matters, regulatory concerns and other critical incidents that may affect customers, colleagues, operations or reputation. The successful candidate will establish and oversee a robust incident response framework, ensuring that matters are identified, assessed, escalated and managed consistently. You will lead multidisciplinary response teams, bringing together legal, compliance, risk, security, communications, technology, operations and other relevant specialists. You will provide clear direction during fast-moving and sensitive situations,...

Learn more

Cyber Incident Response Lead

Added 21/10/2026

We are seeking an experienced Cyber Incident Response Lead to direct the investigation, containment and recovery of significant cyber security incidents. This is a hands-on leadership role for an accomplished incident responder who can provide calm, decisive direction during high-pressure situations and strengthen organisational resilience over the long term. You will lead the end-to-end response to security incidents, from initial triage and forensic investigation through to eradication, recovery and post-incident review. You will coordinate technical teams and wider stakeholders, establish response priorities, maintain accurate incident records and provide clear updates to senior leaders. The role will also involve assessing potential...

Learn more

Cybersecurity Incident Response Lead

Added 22/09/2026

We are seeking a Cybersecurity Incident Response Lead to coordinate the identification, containment, investigation and resolution of security incidents across a complex technology environment. You will provide technical leadership during high-impact events, ensuring that response activities are structured, timely and aligned with established security and business continuity objectives. The role will work closely with security operations, infrastructure, application, legal, risk, compliance and communications teams to reduce operational impact and protect sensitive information. Responsibilities will include leading incident response investigations from initial triage through recovery and post-incident review; assessing alerts, indicators of compromise and reported threats; directing containment, eradication and remediation...

Learn more

Cyber Incident Response Lead

Added 09/09/2026

We are seeking an experienced Cyber Incident Response Lead to direct the identification, investigation, containment and recovery of complex cybersecurity incidents. You will provide senior technical leadership throughout the incident lifecycle, coordinating rapid and effective responses to threats affecting systems, networks, applications, cloud environments and sensitive data. The role will involve assessing alerts, validating incidents, determining scope and impact, developing containment strategies, and ensuring that recovery actions are completed safely and efficiently. You will lead incident response activities across multidisciplinary teams, including security operations, infrastructure, engineering, risk, legal, communications and business stakeholders. Responsibilities will include establishing response priorities, allocating resources,...

Learn more

Lead Threat Intelligence Analyst

Added 11/09/2026

We are seeking a Lead Threat Intelligence Analyst to drive the development and delivery of actionable intelligence that strengthens security decision-making and improves organisational resilience. In this role, you will lead the collection, analysis, and dissemination of strategic, operational, and tactical threat intelligence, helping security teams understand emerging risks, adversary behaviours, and potential impacts to critical systems and business operations. You will manage intelligence requirements, establish effective collection strategies, and analyse information from open-source, commercial, internal, and technical sources. Responsibilities include monitoring threat actors, campaigns, vulnerabilities, and geopolitical developments; producing high-quality reports, briefings, and alerts for technical and senior audiences;...

Learn more

Embedded Senior Operations Officer - Global Security Operations Centre

Added 09/09/2026

We are seeking an experienced Embedded Senior Operations Officer to support the effective delivery of a Global Security Operations Centre (GSOC). This role will provide security monitoring, intelligence analysis and operational coordination in a fast-paced, international environment. You will act as a trusted point of contact for security-related matters, helping to protect people, assets, information and business operations across multiple locations. Key responsibilities will include monitoring global security, safety and threat information; assessing incidents and emerging risks; and producing clear, timely notifications, briefings and situation reports. You will manage and escalate incidents in accordance with established procedures, coordinate responses with...

Learn more

Incident Response Analyst

Added 04/11/2026

We are seeking an experienced Incident Response Analyst to help protect critical systems, applications and data from cyber threats. You will join a collaborative security function responsible for detecting, investigating and responding to incidents across a complex technology environment. This is an opportunity to make a direct contribution to cyber resilience while developing your expertise in a fast-paced and continually evolving field. Your responsibilities will include monitoring security alerts, triaging potential incidents and conducting detailed investigations using security information and event management (SIEM), endpoint detection and response (EDR), network and cloud security tools. You will analyse logs and other forensic...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.