Security Engineer, Incident Response

Reference: utjf3qaju252obhcn9r1

We are seeking a Security Engineer, Incident Response to help protect critical systems, applications, and data from evolving cyber threats. In this role, you will investigate security alerts and incidents, coordinate effective containment and remediation, and help strengthen the organisation’s overall detection and response capabilities. You will work closely with security operations, infrastructure, engineering, application, and business teams to manage incidents from initial triage through recovery and post-incident review.

Your responsibilities will include monitoring and analysing alerts from endpoint, network, identity, cloud, and application security tools; conducting forensic investigations; identifying attack techniques, indicators of compromise, and root causes; and maintaining clear, timely incident documentation. You will develop and improve playbooks, procedures, and automation to increase response speed and consistency. The role will also involve supporting threat hunting, vulnerability remediation, security control validation, tabletop exercises, and lessons-learned activities. You may participate in an on-call rotation and provide clear updates to technical and non-technical stakeholders during high-impact events.

The successful candidate will have professional experience in incident response, security operations, digital forensics, or a closely related discipline, along with a strong understanding of common attack methods, intrusion analysis, and incident lifecycle management. Experience with SIEM, EDR, cloud security, identity platforms, network analysis, scripting, and security automation is highly desirable. You should be comfortable analysing complex technical information, making sound decisions under pressure, and communicating clearly in writing and verbally. Familiarity with frameworks such as MITRE ATT&CK, NIST, or CIS is beneficial. Relevant certifications in security, incident response, cloud, or digital forensics are welcomed, but practical capability, curiosity, and a commitment to continuous learning are equally valued.

£275,000.00 - £344,000.00
Per annum
Added 08/10/2026
Reference: utjf3qaju252obhcn9r1

Security Engineer, Incident Response

London, England, United Kingdom Permanent Security Engineer

Other similar jobs

Security Operations Engineer, AWS Security Cloud Response, Amazon Security Cloud Security Response

Added 14/10/2026

We are seeking a Security Operations Engineer to support cloud security response activities in a fast-paced, highly distributed environment. In this role, you will help protect cloud infrastructure, services, and customer data by investigating security events, coordinating incident response, and improving detection and response capabilities. You will work closely with security engineering, infrastructure, software development, and operations teams to identify threats, contain incidents, and reduce the likelihood of recurrence. Your responsibilities will include monitoring and analysing security alerts, conducting technical investigations, triaging suspected compromises, and supporting the full incident management lifecycle. You will develop and maintain incident response procedures, playbooks,...

Learn more

Security Engineer I, AWS Security Incident Response

Added 02/09/2026

We are seeking a Security Engineer I, AWS Security Incident Response to help protect cloud environments, investigate security events, and strengthen incident response capabilities. In this role, you will work with security operations, engineering, and infrastructure teams to identify, contain, and remediate threats affecting AWS accounts, services, and workloads. You will contribute to the development of repeatable processes that improve detection, response times, and overall cloud security resilience. Key responsibilities include monitoring and triaging security alerts, investigating suspicious activity across AWS services, and supporting incident response from initial analysis through containment, recovery, and post-incident review. You will assist with log...

Learn more

Security Engineer I, AWS Security Incident Response

Added 02/09/2026

We are seeking a Security Engineer I to support cloud security incident response and help protect critical systems, applications, and data. In this entry-level role, you will monitor, investigate, and respond to suspected security events across cloud environments, working closely with experienced security professionals and technical teams. You will contribute to the full incident lifecycle, including alert triage, evidence collection, containment, eradication, recovery, and post-incident review. Key responsibilities include analysing logs, alerts, and network or endpoint telemetry; investigating potential unauthorised access, malware, data exposure, and account compromise; documenting findings and maintaining accurate case records; and escalating incidents according to established...

Learn more

Advisory Engineer, Enterprise Product Security Incident Response Team (E-PSIRT)

Added 11/09/2026

We are seeking an Advisory Engineer to join an Enterprise Product Security Incident Response Team (E-PSIRT). In this role, you will help identify, assess, coordinate, and resolve security vulnerabilities affecting enterprise products, platforms, and services. You will act as a trusted technical adviser to engineering, product, infrastructure, and customer-facing teams, helping to ensure that security issues are managed consistently, efficiently, and in line with established response processes. Your responsibilities will include investigating reported vulnerabilities and security incidents, validating technical findings, assessing severity and potential business impact, and coordinating remediation activities across multiple stakeholders. You will contribute to vulnerability response plans,...

Learn more

Security Engineer – SecOps / Incident Response & Automation (GBP 350 per day outside IR35)

Added 03/09/2026

We are seeking an experienced Security Engineer to support Security Operations, Incident Response and security automation within a fast-paced technology environment. This contract opportunity offers a rate of GBP 350 per day, outside IR35, and is suited to a hands-on practitioner who can investigate security events, coordinate effective responses and improve the efficiency of operational security processes. The successful candidate will monitor, triage and investigate alerts from SIEM, endpoint detection and response, identity, cloud and network security platforms. You will lead or support the response to security incidents, including scoping impact, analysing logs and indicators of compromise, containing threats, coordinating...

Learn more

Incident Response Engineer, UK Security Operations, Hampshire

Added 26/08/2026

We are seeking an Incident Response Engineer to join a UK-based Security Operations function in Hampshire. This role will help protect critical systems, services and information by identifying, investigating and responding to cyber security incidents. You will work as part of a collaborative team responsible for monitoring threats, assessing their impact and coordinating effective containment and recovery activities across a complex technical environment. Your responsibilities will include triaging alerts and reported security events, conducting investigations using security information and event management, endpoint detection and response, network monitoring and vulnerability management tools, and analysing logs, malware and other forensic evidence. You...

Learn more

Senior Security Incident Response Engineer

Added 20/08/2026

We are seeking a highly skilled Senior Security Incident Response Engineer to join our dynamic cybersecurity team. In this role, you will be at the forefront of our incident response efforts, tasked with identifying, managing, and mitigating security incidents across our organization. You will collaborate closely with cross-functional teams to develop and implement incident response plans, ensuring rapid recovery and minimal impact on business operations. Your expertise will be critical in conducting thorough investigations, analyzing security breaches, and producing detailed reports that outline the findings, recommendations, and lessons learned. The ideal candidate will have a strong background in cybersecurity, with...

Learn more

Incident Response Manager, Security Operations Group | Worldwide Operations Security

Added 07/10/2026

We are seeking an experienced Incident Response Manager to lead the coordination, investigation, and resolution of security incidents across a complex, globally distributed operational environment. This role will oversee incident response activities from initial detection and triage through containment, eradication, recovery, and post-incident review. You will work closely with security operations, threat intelligence, cyber investigations, technology, legal, risk, and business teams to protect people, facilities, information, and critical services. Key responsibilities include managing high-severity incidents and serving as an escalation point during active events; establishing incident priorities, response plans, communications, and decision-making processes; directing investigations involving cyber threats, insider risk,...

Learn more

Security Engineering Manager - Incident Response, AWS CloudOps

Added 06/10/2026

We are seeking a Security Engineering Manager to lead incident response and cloud security operations across a complex AWS environment. This role will manage a team of security engineers and coordinate the detection, investigation, containment, and recovery of security incidents affecting cloud infrastructure, applications, and data. You will establish effective response processes, improve operational readiness, and ensure incidents are handled quickly, consistently, and with clear communication to technical and business stakeholders. Responsibilities include developing and maintaining incident response playbooks, leading investigations into suspected compromises, and coordinating forensic analysis, remediation, and post-incident reviews. You will partner with CloudOps, infrastructure, software engineering,...

Learn more

Security Engineering Manager - Incident Response, AWS CloudOps

Added 06/10/2026

We are seeking a Security Engineering Manager to lead incident response and cloud operations security across a complex, highly available environment. This role will manage a team of security engineers and coordinate the organisation’s response to cyber incidents, from initial detection and triage through containment, eradication, recovery, and post-incident improvement. You will establish clear operational processes, strengthen monitoring and detection capabilities, and ensure that security events are handled consistently, rapidly, and with appropriate business communication. You will oversee the development and maintenance of incident response plans, playbooks, escalation procedures, and crisis exercises. Working closely with infrastructure, platform engineering, application development,...

Learn more

Associate Manager - Cyber Security Incident Response

Added 23/09/2026

We are seeking an experienced Associate Manager – Cyber Security Incident Response to help protect critical systems, data and services from evolving cyber threats. In this role, you will support the management of security incidents from initial detection through to containment, eradication and recovery, ensuring that response activities are coordinated, timely and well documented. You will work closely with security operations, infrastructure, applications, risk, legal, privacy and business stakeholders to assess impact, determine priorities and guide effective remediation. Your responsibilities will include overseeing the triage and investigation of suspected security incidents, validating alerts and coordinating appropriate escalation. You will help...

Learn more

Security Incident Response Manager

Added 23/09/2026

We are seeking an experienced Security Incident Response Manager to lead the detection, investigation, containment, and recovery of cybersecurity incidents across a complex technology environment. In this role, you will manage the incident response function, coordinate activity across security operations, infrastructure, engineering, legal, privacy, communications, and business teams, and ensure that incidents are handled efficiently and consistently. You will establish clear escalation procedures, define incident severity criteria, and provide calm, decisive leadership during high-impact events. Key responsibilities include overseeing the full incident lifecycle, from initial triage and forensic investigation through remediation, recovery, and post-incident review. You will maintain and improve...

Learn more

Senior Security Incident Response Analyst

Added 23/09/2026

We are seeking a Senior Security Incident Response Analyst to lead the investigation, containment, and resolution of complex cybersecurity incidents across a diverse technology environment. In this role, you will monitor and analyse security alerts, coordinate rapid responses to suspected breaches, and provide expert guidance throughout the incident lifecycle. You will work closely with security operations, infrastructure, engineering, legal, risk, and business teams to assess impact, minimise disruption, and restore secure operations. Your responsibilities will include developing and refining incident response procedures, conducting detailed analysis of endpoint, network, identity, cloud, and application data, and performing forensic investigations to determine attack...

Learn more

Senior Manager, Global Cyber Security Incident Response (Global CSIRT)

Added 18/09/2026

We are seeking a Senior Manager, Global Cyber Security Incident Response to lead and evolve a global incident response capability. This role will be responsible for directing the identification, containment, investigation and recovery of significant cyber security incidents across a complex, international environment. You will provide calm, decisive leadership during high-impact events, coordinate technical and business stakeholders, and ensure that response activities protect critical services, data and customer trust. The role will also contribute to the development of a mature, intelligence-led and continuously improving Global CSIRT function. Key responsibilities include leading incident response teams and third-party partners through suspected and...

Learn more

Senior Associate, Cyber Security Analyst – Incident Response

Added 02/09/2026

We are seeking a Senior Associate, Cyber Security Analyst – Incident Response to join a dedicated security operations function. In this role, you will help protect critical systems, data and services by leading the investigation and response to cyber security incidents. You will work closely with technology, risk, infrastructure and business teams to identify threats, contain activity, recover affected environments and strengthen the organisation’s overall security posture. Key responsibilities include monitoring and analysing security alerts, endpoint activity, network traffic, identity events and other indicators of compromise. You will triage incidents, determine scope and severity, coordinate containment and eradication activities, and...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.