Associate Manager - Cyber Security Incident Response

Reference: p2jm1ul2axz302bxedeo

We are seeking an experienced Associate Manager – Cyber Security Incident Response to help protect critical systems, data and services from evolving cyber threats. In this role, you will support the management of security incidents from initial detection through to containment, eradication and recovery, ensuring that response activities are coordinated, timely and well documented. You will work closely with security operations, infrastructure, applications, risk, legal, privacy and business stakeholders to assess impact, determine priorities and guide effective remediation.

Your responsibilities will include overseeing the triage and investigation of suspected security incidents, validating alerts and coordinating appropriate escalation. You will help lead incident response activities involving malware, phishing, ransomware, unauthorised access, data loss and other cyber events. The role will involve maintaining response playbooks, improving procedures, supporting threat hunting and forensic investigations, and ensuring that lessons learned are translated into practical control improvements. You will also contribute to incident reporting, metrics, post-incident reviews, readiness exercises and communications for technical and non-technical audiences. Where required, you may coordinate external partners, specialist investigators and relevant authorities.

Applicants should have professional experience in cyber security incident response, security operations, digital forensics or a closely related discipline, together with experience coordinating investigations or leading incident activities. Strong knowledge of security monitoring, SIEM platforms, endpoint detection and response, network analysis, vulnerability management and common attack techniques is expected. Familiarity with recognised frameworks such as NIST or SANS, as well as cloud security and identity-related incidents, would be advantageous. You should be analytical, calm under pressure and confident making decisions in time-sensitive situations. Excellent written and verbal communication skills, sound judgement and the ability to collaborate across technical and business teams are essential. Relevant industry certifications in incident response, security operations, forensics or cloud security are desirable.

COMPETITIVE SALARY
Added 23/09/2026
Reference: p2jm1ul2axz302bxedeo

Associate Manager - Cyber Security Incident Response

London, England, United Kingdom Permanent Incident Response

Other similar jobs

Associate Manager - Cyber Security Incident Response

Added 18/08/2026

We are seeking a proactive and skilled Associate Manager - Cyber Security Incident Response to join our dynamic team. In this role, you will be responsible for leading incident response efforts, managing the investigation and resolution of security incidents, and ensuring that timely and effective responses are executed. Your expertise will be crucial in identifying vulnerabilities, assessing risks, and implementing strategies to mitigate potential threats. You will work closely with cross-functional teams to develop and refine incident response plans, ensuring alignment with industry best practices and compliance requirements. Your duties will include monitoring security alerts, performing in-depth analysis of incidents,...

Learn more

Senior Microsoft Security Engineer (XDR, IRM, Deception Engineering)

Added 28/09/2026

We are seeking a Senior Security Engineer to design, implement and continuously improve enterprise security capabilities across extended detection and response (XDR), incident response management (IRM) and deception engineering. This role will help strengthen the organisation’s ability to identify, contain and recover from sophisticated cyber threats, while improving the quality, speed and consistency of security operations. You will work closely with security operations, infrastructure, identity, cloud, application and risk teams to translate threat intelligence and business requirements into practical defensive controls. Responsibilities will include developing and tuning detection rules, analytics, automation and response playbooks across endpoint, identity, email, cloud and...

Learn more

Defence Security Virtual Practice Leader

Added 08/09/2026

We are seeking an experienced Defence Security Virtual Practice Leader to shape and lead a specialist security practice supporting complex defence and national security programmes. This senior role will provide strategic direction, technical leadership and operational oversight across virtualised environments, cloud platforms, secure networks and mission-critical systems. You will work with senior stakeholders, delivery teams and technical specialists to ensure security practices align with regulatory obligations, organisational priorities and the evolving threat landscape. Key responsibilities will include defining and maintaining the practice strategy, governance framework, standards and delivery roadmap; leading the design and assurance of secure virtualisation and cloud solutions;...

Learn more

Senior Associate, Cyber Security Analyst – Incident Response

Added 02/09/2026

We are seeking a Senior Associate, Cyber Security Analyst – Incident Response to join a dedicated security operations function. In this role, you will help protect critical systems, data and services by leading the investigation and response to cyber security incidents. You will work closely with technology, risk, infrastructure and business teams to identify threats, contain activity, recover affected environments and strengthen the organisation’s overall security posture. Key responsibilities include monitoring and analysing security alerts, endpoint activity, network traffic, identity events and other indicators of compromise. You will triage incidents, determine scope and severity, coordinate containment and eradication activities, and...

Learn more

Senior Manager, Global Cyber Security Incident Response (Global CSIRT)

Added 18/09/2026

We are seeking a Senior Manager, Global Cyber Security Incident Response to lead and evolve a global incident response capability. This role will be responsible for directing the identification, containment, investigation and recovery of significant cyber security incidents across a complex, international environment. You will provide calm, decisive leadership during high-impact events, coordinate technical and business stakeholders, and ensure that response activities protect critical services, data and customer trust. The role will also contribute to the development of a mature, intelligence-led and continuously improving Global CSIRT function. Key responsibilities include leading incident response teams and third-party partners through suspected and...

Learn more

Cyber Incident Response Manager

Added 25/08/2026

We are seeking an experienced Cyber Incident Response Manager to lead the identification, investigation and resolution of cyber security incidents across a complex technology environment. This role will manage the full incident response lifecycle, from preparation and detection through containment, eradication, recovery and post-incident review. You will provide calm, decisive leadership during high-impact events and help strengthen the organisation’s resilience against evolving cyber threats. Key responsibilities will include managing and developing incident response processes, playbooks and escalation procedures; coordinating technical response activities across security, infrastructure, applications, legal, compliance and communications teams; and ensuring incidents are accurately assessed, documented and reported....

Learn more

Cyber Incident Response Manager

Added 18/08/2026

We are seeking a highly skilled Cyber Incident Response Manager to lead our organization's efforts in identifying, responding to, and mitigating cybersecurity incidents. In this pivotal role, you will be responsible for developing and implementing incident response plans and protocols to ensure effective management of security breaches. You will work closely with cross-functional teams to enhance overall security posture, conduct risk assessments, and coordinate incident response exercises. Your expertise in threat intelligence and forensic analysis will be crucial in investigating security incidents and providing actionable recommendations to prevent future occurrences. The ideal candidate will possess a strong background in cybersecurity,...

Learn more

Associate/Senior Associate - Data & Cyber

Added 04/09/2026

We are seeking an Associate/Senior Associate – Data & Cyber to support clients on a range of data, technology, privacy and cyber-related matters. The role will involve contributing to engagements that help organisations understand and manage technology risks, strengthen data governance, respond to regulatory requirements and improve their cyber resilience. You will work with experienced professionals and client stakeholders to analyse complex issues, develop practical recommendations and deliver high-quality outputs. Key responsibilities will include supporting assessments of data protection, information security and cyber risk; reviewing policies, controls, processes and operating models; assisting with data governance and privacy programmes; and contributing...

Learn more

Associate/Senior Associate - Data & Cyber

Added 04/09/2026

We are seeking an Associate or Senior Associate to join a specialist Data & Cyber team, advising clients on a broad range of privacy, cybersecurity, technology and data-related matters. This is an opportunity to work on complex and high-profile assignments across multiple sectors, supporting organisations as they manage evolving regulatory requirements, digital transformation and cyber risk. Your responsibilities will include advising on data protection and privacy compliance, data sharing arrangements, international data transfers, technology contracts, incident response and regulatory investigations. You will support clients through cyber incidents, including preparedness planning, breach assessment, notification strategies and engagement with relevant authorities. You...

Learn more

Incident Response Manager, Security Operations Group | Worldwide Operations Security

Added 07/10/2026

We are seeking an experienced Incident Response Manager to lead the coordination, investigation, and resolution of security incidents across a complex, globally distributed operational environment. This role will oversee incident response activities from initial detection and triage through containment, eradication, recovery, and post-incident review. You will work closely with security operations, threat intelligence, cyber investigations, technology, legal, risk, and business teams to protect people, facilities, information, and critical services. Key responsibilities include managing high-severity incidents and serving as an escalation point during active events; establishing incident priorities, response plans, communications, and decision-making processes; directing investigations involving cyber threats, insider risk,...

Learn more

Security Engineering Manager - Incident Response, AWS CloudOps

Added 06/10/2026

We are seeking a Security Engineering Manager to lead incident response and cloud security operations across a complex AWS environment. This role will manage a team of security engineers and coordinate the detection, investigation, containment, and recovery of security incidents affecting cloud infrastructure, applications, and data. You will establish effective response processes, improve operational readiness, and ensure incidents are handled quickly, consistently, and with clear communication to technical and business stakeholders. Responsibilities include developing and maintaining incident response playbooks, leading investigations into suspected compromises, and coordinating forensic analysis, remediation, and post-incident reviews. You will partner with CloudOps, infrastructure, software engineering,...

Learn more

Security Engineering Manager - Incident Response, AWS CloudOps

Added 06/10/2026

We are seeking a Security Engineering Manager to lead incident response and cloud operations security across a complex, highly available environment. This role will manage a team of security engineers and coordinate the organisation’s response to cyber incidents, from initial detection and triage through containment, eradication, recovery, and post-incident improvement. You will establish clear operational processes, strengthen monitoring and detection capabilities, and ensure that security events are handled consistently, rapidly, and with appropriate business communication. You will oversee the development and maintenance of incident response plans, playbooks, escalation procedures, and crisis exercises. Working closely with infrastructure, platform engineering, application development,...

Learn more

Security Incident Response Manager

Added 23/09/2026

We are seeking an experienced Security Incident Response Manager to lead the detection, investigation, containment, and recovery of cybersecurity incidents across a complex technology environment. In this role, you will manage the incident response function, coordinate activity across security operations, infrastructure, engineering, legal, privacy, communications, and business teams, and ensure that incidents are handled efficiently and consistently. You will establish clear escalation procedures, define incident severity criteria, and provide calm, decisive leadership during high-impact events. Key responsibilities include overseeing the full incident lifecycle, from initial triage and forensic investigation through remediation, recovery, and post-incident review. You will maintain and improve...

Learn more

Product Security Incident Response Manager (m/f/d)

Added 25/08/2026

We are seeking a Product Security Incident Response Manager (m/f/d) to lead the coordination and continuous improvement of security incident response for products, platforms, and supporting services. In this role, you will manage the response to vulnerabilities, suspected compromises, and product security incidents from initial assessment through containment, remediation, recovery, and post-incident review. You will work closely with engineering, product management, cloud operations, legal, privacy, communications, and customer-facing teams to ensure that incidents are handled efficiently, consistently, and with clear ownership. Your responsibilities will include establishing and maintaining incident response processes, playbooks, severity models, escalation paths, and communication procedures. You...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.