Incident Response Analyst

Reference: 6qgsgn2cve1x1hmah990

We are seeking an Incident Response Analyst to help protect critical systems, applications, and data from cyber threats. In this role, you will monitor, investigate, and respond to security incidents across a diverse technology environment. You will analyse alerts from security monitoring tools, validate potential threats, determine scope and impact, and coordinate timely containment and remediation activities. The position requires sound technical judgement, strong attention to detail, and the ability to remain effective during high-priority incidents.

Key responsibilities include triaging and investigating alerts, conducting endpoint, network, identity, and cloud-based analysis, and developing incident timelines using relevant logs and forensic evidence. You will support malware and phishing investigations, identify indicators of compromise, recommend and implement containment actions, and assist with eradication and recovery efforts. You will also create clear incident reports, maintain accurate case documentation, contribute to post-incident reviews, and recommend improvements to security controls and response procedures. The role may involve participation in an on-call rota and collaboration with infrastructure, application, risk, privacy, and business teams.

The successful candidate will have experience in cybersecurity operations, incident response, security monitoring, or a related technical discipline. You should be familiar with SIEM, endpoint detection and response, network security, threat intelligence, vulnerability management, and common forensic techniques. Working knowledge of attack frameworks such as MITRE ATT&CK, incident handling methodologies, and relevant security standards is desirable. Professional certifications in incident response, digital forensics, or information security are advantageous. Strong analytical, written, and verbal communication skills are essential, along with the ability to prioritise competing demands, explain technical issues to non-specialist audiences, and continuously improve response capabilities.

COMPETITIVE SALARY
Added 14/10/2026
Reference: 6qgsgn2cve1x1hmah990

Other similar jobs

Senior Security Incident Response Analyst

Added 23/09/2026

We are seeking a Senior Security Incident Response Analyst to lead the investigation, containment, and resolution of complex cybersecurity incidents across a diverse technology environment. In this role, you will monitor and analyse security alerts, coordinate rapid responses to suspected breaches, and provide expert guidance throughout the incident lifecycle. You will work closely with security operations, infrastructure, engineering, legal, risk, and business teams to assess impact, minimise disruption, and restore secure operations. Your responsibilities will include developing and refining incident response procedures, conducting detailed analysis of endpoint, network, identity, cloud, and application data, and performing forensic investigations to determine attack...

Learn more

Senior SOC Analyst - Incident Response

Added 02/09/2026

We are seeking a Senior SOC Analyst – Incident Response to lead the investigation, containment, and resolution of complex cybersecurity incidents. In this role, you will act as a senior point of escalation within the Security Operations Centre, providing expert analysis and guidance during high-impact events. You will monitor and investigate alerts across endpoint, network, cloud, identity, and application environments, using SIEM, EDR, threat intelligence, and other security technologies to identify malicious activity and assess business risk. You will coordinate incident response activities from initial triage through eradication, recovery, and post-incident review. Responsibilities include developing and refining detection rules, conducting...

Learn more

Senior SOC Analyst - Incident Response

Added 02/09/2026

We are seeking a Senior SOC Analyst – Incident Response to lead the investigation, containment, and resolution of complex cybersecurity incidents. You will act as a senior point of escalation within the Security Operations Centre, providing expert guidance during high-impact events and helping strengthen the organisation’s overall incident response capability. The role involves working closely with security engineering, infrastructure, application, risk, and compliance teams to protect critical systems, data, and services. Your responsibilities will include monitoring and analysing alerts from SIEM, EDR, network, cloud, identity, and threat intelligence platforms; validating suspected incidents; performing detailed investigation and forensic analysis; and coordinating...

Learn more

Senior Associate, Cyber Security Analyst – Incident Response

Added 02/09/2026

We are seeking a Senior Associate, Cyber Security Analyst – Incident Response to join a dedicated security operations function. In this role, you will help protect critical systems, data and services by leading the investigation and response to cyber security incidents. You will work closely with technology, risk, infrastructure and business teams to identify threats, contain activity, recover affected environments and strengthen the organisation’s overall security posture. Key responsibilities include monitoring and analysing security alerts, endpoint activity, network traffic, identity events and other indicators of compromise. You will triage incidents, determine scope and severity, coordinate containment and eradication activities, and...

Learn more

Senior SOC Analyst - Incident Response

Added 02/09/2026

We are seeking a Senior SOC Analyst – Incident Response to lead the investigation, containment, and resolution of complex cybersecurity incidents. You will operate as a senior member of a security operations team, providing expert guidance during active incidents and helping protect critical systems, applications, and data. The role requires strong analytical thinking, sound technical judgement, and the ability to remain calm and decisive in a fast-moving environment. Responsibilities include monitoring and triaging security alerts, investigating suspected compromises, conducting threat hunting, and coordinating end-to-end incident response activities. You will analyse events from SIEM, EDR, network, identity, cloud, and other security...

Learn more

Senior SOC Analyst - Incident Response

Added 02/09/2026

We are seeking a Senior SOC Analyst – Incident Response to lead the investigation, containment and resolution of complex cybersecurity incidents. In this role, you will act as a senior escalation point within the security operations function, coordinating response activities across technical teams and providing clear, timely updates to relevant stakeholders. You will analyse alerts and events from SIEM, EDR, network security and cloud platforms, identify indicators of compromise, determine root cause and assess the scope and impact of incidents. Your responsibilities will include developing and executing incident response procedures, conducting forensic investigations, performing threat hunting and supporting malware and...

Learn more

Senior SOC Analyst - Incident Response

Added 02/09/2026

We are seeking a Senior SOC Analyst – Incident Response to lead the investigation, containment and resolution of complex cybersecurity incidents across a diverse technology environment. You will act as a senior escalation point within the Security Operations Centre, providing expert analysis during high-impact events and helping to protect critical systems, data and services. The role will involve working closely with infrastructure, cloud, engineering, risk and business teams to coordinate effective responses and minimise operational disruption. Your responsibilities will include monitoring and triaging alerts from SIEM, EDR, network, identity and cloud security platforms; conducting in-depth analysis of logs, endpoint activity,...

Learn more

Security Operations Engineer, AWS Security Cloud Response, Amazon Security Cloud Security Response

Added 14/10/2026

We are seeking a Security Operations Engineer to support cloud security response activities in a fast-paced, highly distributed environment. In this role, you will help protect cloud infrastructure, services, and customer data by investigating security events, coordinating incident response, and improving detection and response capabilities. You will work closely with security engineering, infrastructure, software development, and operations teams to identify threats, contain incidents, and reduce the likelihood of recurrence. Your responsibilities will include monitoring and analysing security alerts, conducting technical investigations, triaging suspected compromises, and supporting the full incident management lifecycle. You will develop and maintain incident response procedures, playbooks,...

Learn more

Crisis & Incident Response Manager VP

Added 16/10/2026

We are seeking an experienced Crisis & Incident Response Manager at Vice President level to lead the organisation’s approach to major incidents, business disruption and crisis management. This is a high-profile role responsible for ensuring that critical events are identified, managed and resolved effectively, while protecting customers, colleagues, operations and reputation. You will provide confident leadership during fast-moving situations, coordinate cross-functional response teams and ensure that senior stakeholders receive clear, timely and accurate information. Your responsibilities will include owning and continually improving the incident and crisis management framework; maintaining response plans, playbooks, escalation procedures and contact structures; and leading exercises,...

Learn more

Incident Response Consultant

Added 14/10/2026

We are seeking an experienced Incident Response Consultant to help organisations prepare for, respond to, and recover from complex cybersecurity incidents. In this role, you will work with clients across a range of industries to investigate security events, contain threats, minimise business impact, and support effective recovery. You will contribute to incident response engagements from initial triage through to post-incident review, providing clear technical guidance and practical recommendations throughout. Your responsibilities will include monitoring and analysing alerts, conducting digital forensics, identifying attack vectors, and assessing the scope and impact of compromises. You will lead or support incident response activities involving...

Learn more

Incident response investigator

Added 14/10/2026

We are seeking an Incident Response Investigator to identify, assess and manage security incidents across a complex technology environment. The successful candidate will investigate suspected cyber attacks, policy violations, data breaches and other security events, working methodically to establish the facts, determine impact and support timely resolution. You will monitor alerts and intelligence sources, conduct triage, preserve evidence and maintain accurate, auditable incident records from initial detection through closure. Key responsibilities include analysing logs, endpoint activity, network traffic, email artefacts and cloud data to identify indicators of compromise and reconstruct attack timelines. You will coordinate containment, eradication and recovery activities...

Learn more

Security Engineer, Incident Response

Added 08/10/2026

We are seeking a Security Engineer, Incident Response to help protect critical systems, applications, and data from evolving cyber threats. In this role, you will investigate security alerts and incidents, coordinate effective containment and remediation, and help strengthen the organisation’s overall detection and response capabilities. You will work closely with security operations, infrastructure, engineering, application, and business teams to manage incidents from initial triage through recovery and post-incident review. Your responsibilities will include monitoring and analysing alerts from endpoint, network, identity, cloud, and application security tools; conducting forensic investigations; identifying attack techniques, indicators of compromise, and root causes; and maintaining...

Learn more

Senior Threat Hunting & Incident Response - EMEA

Added 07/10/2026

We are seeking a Senior Threat Hunting & Incident Response professional to lead advanced cyber defence activities across the EMEA region. This role will be responsible for proactively identifying sophisticated threats, investigating security incidents and coordinating effective containment and recovery actions. You will work closely with security operations, infrastructure, cloud, application and risk teams to strengthen detection capabilities and reduce organisational exposure. Key responsibilities include designing and executing threat-hunting investigations across endpoint, network, identity, cloud and application environments; analysing security telemetry to identify indicators of compromise, attacker behaviour and emerging techniques; and leading incident response activities from initial triage through...

Learn more

Incident Response Manager, Security Operations Group | Worldwide Operations Security

Added 07/10/2026

We are seeking an experienced Incident Response Manager to lead the coordination, investigation, and resolution of security incidents across a complex, globally distributed operational environment. This role will oversee incident response activities from initial detection and triage through containment, eradication, recovery, and post-incident review. You will work closely with security operations, threat intelligence, cyber investigations, technology, legal, risk, and business teams to protect people, facilities, information, and critical services. Key responsibilities include managing high-severity incidents and serving as an escalation point during active events; establishing incident priorities, response plans, communications, and decision-making processes; directing investigations involving cyber threats, insider risk,...

Learn more

Security Engineering Manager - Incident Response, AWS CloudOps

Added 06/10/2026

We are seeking a Security Engineering Manager to lead incident response and cloud operations security across a complex, highly available environment. This role will manage a team of security engineers and coordinate the organisation’s response to cyber incidents, from initial detection and triage through containment, eradication, recovery, and post-incident improvement. You will establish clear operational processes, strengthen monitoring and detection capabilities, and ensure that security events are handled consistently, rapidly, and with appropriate business communication. You will oversee the development and maintenance of incident response plans, playbooks, escalation procedures, and crisis exercises. Working closely with infrastructure, platform engineering, application development,...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.