Senior Manager, Global Cyber Security Incident Response (Global CSIRT)

Added 18/09/2026

We are seeking a Senior Manager, Global Cyber Security Incident Response to lead and evolve a global incident response capability. This role will be responsible for directing the identification, containment, investigation and recovery of significant cyber security incidents across a complex, international environment. You will provide calm, decisive leadership during high-impact events, coordinate technical and business stakeholders, and ensure that response activities protect critical services, data and customer trust. The role will also contribute to the development of a mature, intelligence-led and continuously improving Global CSIRT function. Key responsibilities include leading incident response teams and third-party partners through suspected and...

Security Incident Response Manager

Added 23/09/2026

We are seeking an experienced Security Incident Response Manager to lead the detection, investigation, containment, and recovery of cybersecurity incidents across a complex technology environment. In this role, you will manage the incident response function, coordinate activity across security operations, infrastructure, engineering, legal, privacy, communications, and business teams, and ensure that incidents are handled efficiently and consistently. You will establish clear escalation procedures, define incident severity criteria, and provide calm, decisive leadership during high-impact events. Key responsibilities include overseeing the full incident lifecycle, from initial triage and forensic investigation through remediation, recovery, and post-incident review. You will maintain and improve...

Cyber Response & Recovery Assistant Manager (Reactive DFIR)

Added 02/09/2026

We are seeking a Cyber Response & Recovery Assistant Manager specialising in Reactive Digital Forensics and Incident Response (DFIR). This role will support the delivery of high-quality technical investigations and coordinated response activities following cyber incidents, helping clients understand what happened, contain threats, recover securely and strengthen their resilience. You will work across a varied caseload, including malware outbreaks, ransomware, data breaches, insider activity, business email compromise and other suspected security events. Key responsibilities will include leading or supporting end-to-end incident response engagements; collecting, preserving and analysing digital evidence from endpoints, servers, cloud environments, networks and mobile devices; developing investigative...

Cyber Response & Recovery Manager (Remediation)

Added 02/09/2026

We are seeking an experienced Cyber Response & Recovery Manager (Remediation) to lead the coordination, delivery and assurance of remediation activities following cyber incidents, security assessments and control failures. The successful candidate will work across technology, risk, operations and business teams to ensure identified weaknesses are addressed promptly, sustainably and in line with regulatory, risk and security requirements. This role will help strengthen organisational resilience by turning incident findings and lessons learned into measurable improvements. Key responsibilities include owning and maintaining remediation plans, coordinating actions across multiple stakeholders, and tracking progress against agreed milestones, risk tolerances and deadlines. You will...

Cyber Response Assistant Manager (Proactive Consulting)

Added 02/09/2026

We are seeking a Cyber Response Assistant Manager to support the delivery of proactive cyber security consulting services across a diverse range of clients and environments. This role will help organisations identify, assess and reduce cyber risk before incidents occur, while also contributing to their readiness to respond effectively when threats emerge. You will work closely with senior consultants, technical specialists and client stakeholders to deliver practical, risk-based advice aligned with business objectives, regulatory expectations and recognised security frameworks. Your responsibilities will include supporting cyber maturity assessments, incident response readiness reviews, threat and vulnerability assessments, tabletop exercises, security control evaluations...

Cyber Response & Recovery Manager (Reactive DFIR) - German Speaking

Added 02/09/2026

We are seeking a Cyber Response & Recovery Manager specialising in reactive digital forensics and incident response (DFIR) to lead the investigation and containment of complex cyber incidents. This role will manage response activities from initial triage through eradication, recovery and post-incident review, helping organisations restore secure operations while preserving critical evidence. The successful candidate will be fluent in German and English and confident working with stakeholders across technical, operational and executive levels in high-pressure situations. You will coordinate incident response engagements, establish priorities, allocate technical resources and maintain clear communication throughout each phase of an investigation. Responsibilities will include...

Cyber Response and Recovery - Assistant Manager (Proactive)

Added 26/08/2026

We are seeking a Cyber Response and Recovery – Assistant Manager (Proactive) to strengthen organisational resilience against cyber threats. This role will focus on preparing for, preventing and reducing the impact of cyber incidents through effective planning, testing and continuous improvement. You will work closely with cybersecurity, technology, risk, compliance, business continuity and operational teams to ensure the organisation is ready to respond to disruption and recover critical services safely and efficiently. Key responsibilities will include developing and maintaining cyber incident response, recovery and crisis management plans; coordinating tabletop exercises, simulations and technical recovery tests; documenting lessons learned and tracking...

Cyber Response and Recovery - Assistant Manager (Reactive)

Added 18/08/2026

We are seeking an enthusiastic and skilled Cyber Response and Recovery - Assistant Manager (Reactive) to join our dynamic team. In this role, you will be responsible for leading incident response efforts during cyber incidents, ensuring that all incidents are efficiently managed and that recovery processes are executed effectively. You will collaborate with cross-functional teams to analyze and respond to cyber threats, while also developing and implementing incident response plans that align with industry best practices. Your proactive approach will help minimize impact and restore services swiftly during security breaches. The ideal candidate will possess strong analytical and problem-solving skills,...

Cyber Security Engineer, (Cloud Security Specialist)

Added 07/10/2026

We are seeking a Cyber Security Engineer, (Cloud Security Specialist) to help protect cloud environments, applications, infrastructure and data against evolving cyber threats. This role will contribute to the design, implementation and continuous improvement of secure cloud services across platforms such as Microsoft Azure, Amazon Web Services or Google Cloud. You will work closely with infrastructure, engineering, architecture, development and risk teams to embed security into the full technology lifecycle. Key responsibilities include developing and maintaining cloud security controls, policies, standards and technical patterns; reviewing cloud architectures and identifying security weaknesses; configuring identity and access management, privileged access, encryption, network...

GSOC Security Engineering Lead

Added 28/09/2026

We are seeking a GSOC Security Engineering Lead to provide technical leadership within a global security operations environment. This role will guide the design, implementation, and continuous improvement of security monitoring, detection, and response capabilities. You will lead a team of security engineers, work closely with analysts and technology stakeholders, and help establish effective processes for identifying, investigating, and mitigating cyber threats across a complex enterprise environment. Your responsibilities will include developing and maintaining security engineering strategies, improving SIEM, SOAR, EDR, vulnerability management, and threat intelligence integrations, and ensuring that detection content and response playbooks remain effective against evolving threats....

Director - Healthcare - Cyber Security

Added 01/09/2026

We are seeking an experienced Director of Cyber Security to lead the development and delivery of a comprehensive security strategy within a complex healthcare environment. This senior leadership role will protect sensitive clinical, operational and personal information while enabling safe, reliable and digitally driven care. You will provide strategic direction across cyber security, information assurance, risk management, resilience and regulatory compliance, ensuring that security remains aligned with organisational priorities and patient safety. Key responsibilities will include establishing and maintaining the cyber security roadmap; overseeing security operations, threat monitoring, vulnerability management, incident response and identity and access controls; and strengthening governance,...

Senior Associate, Cyber Security Analyst – Incident Response

Added 02/09/2026

We are seeking a Senior Associate, Cyber Security Analyst – Incident Response to join a dedicated security operations function. In this role, you will help protect critical systems, data and services by leading the investigation and response to cyber security incidents. You will work closely with technology, risk, infrastructure and business teams to identify threats, contain activity, recover affected environments and strengthen the organisation’s overall security posture. Key responsibilities include monitoring and analysing security alerts, endpoint activity, network traffic, identity events and other indicators of compromise. You will triage incidents, determine scope and severity, coordinate containment and eradication activities, and...

Senior SOC Analyst - Incident Response

Added 02/09/2026

We are seeking a Senior SOC Analyst – Incident Response to lead the investigation, containment, and resolution of complex cybersecurity incidents. You will operate as a senior member of a security operations team, providing expert guidance during active incidents and helping protect critical systems, applications, and data. The role requires strong analytical thinking, sound technical judgement, and the ability to remain calm and decisive in a fast-moving environment. Responsibilities include monitoring and triaging security alerts, investigating suspected compromises, conducting threat hunting, and coordinating end-to-end incident response activities. You will analyse events from SIEM, EDR, network, identity, cloud, and other security...

Senior SOC Analyst - Incident Response

Added 02/09/2026

We are seeking a Senior SOC Analyst – Incident Response to lead the investigation, containment, and resolution of complex cybersecurity incidents. You will act as a senior point of escalation within the Security Operations Centre, providing expert guidance during high-impact events and helping strengthen the organisation’s overall incident response capability. The role involves working closely with security engineering, infrastructure, application, risk, and compliance teams to protect critical systems, data, and services. Your responsibilities will include monitoring and analysing alerts from SIEM, EDR, network, cloud, identity, and threat intelligence platforms; validating suspected incidents; performing detailed investigation and forensic analysis; and coordinating...

Senior SOC Analyst - Incident Response

Added 02/09/2026

We are seeking a Senior SOC Analyst – Incident Response to lead the investigation, containment and resolution of complex cybersecurity incidents across a diverse technology environment. You will act as a senior escalation point within the Security Operations Centre, providing expert analysis during high-impact events and helping to protect critical systems, data and services. The role will involve working closely with infrastructure, cloud, engineering, risk and business teams to coordinate effective responses and minimise operational disruption. Your responsibilities will include monitoring and triaging alerts from SIEM, EDR, network, identity and cloud security platforms; conducting in-depth analysis of logs, endpoint activity,...