Incident Response Consultant

Reference: tfyx2eckwkm2ktpqzlji

We are seeking an experienced Incident Response Consultant to help organisations prepare for, respond to, and recover from complex cybersecurity incidents. In this role, you will work with clients across a range of industries to investigate security events, contain threats, minimise business impact, and support effective recovery. You will contribute to incident response engagements from initial triage through to post-incident review, providing clear technical guidance and practical recommendations throughout.

Your responsibilities will include monitoring and analysing alerts, conducting digital forensics, identifying attack vectors, and assessing the scope and impact of compromises. You will lead or support incident response activities involving malware, ransomware, phishing, unauthorised access, data loss, and insider threats. The role will also involve developing and testing incident response plans, conducting tabletop exercises, creating investigation timelines, preserving evidence, and preparing detailed reports for both technical and non-technical audiences. You will collaborate with internal security teams, legal advisers, risk specialists, and senior stakeholders during high-pressure situations, ensuring that communication remains accurate, timely, and appropriately documented.

Applicants should have professional experience in incident response, security operations, digital forensics, or a closely related discipline. Strong knowledge of common attack techniques, threat intelligence, log analysis, network traffic, endpoint investigation, and security tools is essential. Experience with frameworks such as MITRE ATT&CK, NIST, or ISO 27001 would be advantageous, as would relevant certifications such as GIAC, CISSP, or equivalent qualifications. You should be analytical, calm under pressure, and confident making decisions in rapidly changing circumstances. Excellent written and verbal communication skills are required, along with the ability to explain complex findings clearly and work effectively with diverse stakeholders. A willingness to participate in an on-call rota and travel occasionally to client sites may also be required.

COMPETITIVE SALARY
Added 14/10/2026
Reference: tfyx2eckwkm2ktpqzlji

Other similar jobs

Graduate Consultant, Cyber Incident Response: One Year Fixed Term Contract

Added 01/09/2026

Graduate Consultant, Cyber Incident Response: One Year Fixed Term Contract. An exciting opportunity is available for a recent graduate or early-career professional to begin a career in cyber incident response. Working as part of a specialist security team, you will support the investigation, management and resolution of cyber incidents affecting a range of systems, networks and users. This is a practical, learning-focused role suited to someone with a genuine interest in cybersecurity, strong analytical ability and a willingness to develop technical expertise. Your responsibilities will include assisting with the triage and investigation of suspected security incidents, reviewing alerts and log...

Learn more

Senior Security Consultant (Incident Response)

Added 26/08/2026

We are seeking a Senior Security Consultant (Incident Response) to lead and support the investigation, containment and recovery of complex cybersecurity incidents. This role will work closely with clients and internal stakeholders to provide expert guidance throughout the incident lifecycle, from initial triage and scoping through to remediation, lessons learned and strategic improvement. You will be expected to operate confidently in high-pressure situations, communicate clearly with both technical and non-technical audiences, and help organisations strengthen their resilience against future threats. Key responsibilities include leading or contributing to digital forensics and incident response engagements; analysing endpoint, network, identity, cloud and application...

Learn more

Security Operations Engineer, AWS Security Cloud Response, Amazon Security Cloud Security Response

Added 14/10/2026

We are seeking a Security Operations Engineer to support cloud security response activities in a fast-paced, highly distributed environment. In this role, you will help protect cloud infrastructure, services, and customer data by investigating security events, coordinating incident response, and improving detection and response capabilities. You will work closely with security engineering, infrastructure, software development, and operations teams to identify threats, contain incidents, and reduce the likelihood of recurrence. Your responsibilities will include monitoring and analysing security alerts, conducting technical investigations, triaging suspected compromises, and supporting the full incident management lifecycle. You will develop and maintain incident response procedures, playbooks,...

Learn more

Crisis & Incident Response Manager VP

Added 16/10/2026

We are seeking an experienced Crisis & Incident Response Manager at Vice President level to lead the organisation’s approach to major incidents, business disruption and crisis management. This is a high-profile role responsible for ensuring that critical events are identified, managed and resolved effectively, while protecting customers, colleagues, operations and reputation. You will provide confident leadership during fast-moving situations, coordinate cross-functional response teams and ensure that senior stakeholders receive clear, timely and accurate information. Your responsibilities will include owning and continually improving the incident and crisis management framework; maintaining response plans, playbooks, escalation procedures and contact structures; and leading exercises,...

Learn more

Incident Response Analyst

Added 14/10/2026

We are seeking an Incident Response Analyst to help protect critical systems, applications, and data from cyber threats. In this role, you will monitor, investigate, and respond to security incidents across a diverse technology environment. You will analyse alerts from security monitoring tools, validate potential threats, determine scope and impact, and coordinate timely containment and remediation activities. The position requires sound technical judgement, strong attention to detail, and the ability to remain effective during high-priority incidents. Key responsibilities include triaging and investigating alerts, conducting endpoint, network, identity, and cloud-based analysis, and developing incident timelines using relevant logs and forensic evidence....

Learn more

Incident response investigator

Added 14/10/2026

We are seeking an Incident Response Investigator to identify, assess and manage security incidents across a complex technology environment. The successful candidate will investigate suspected cyber attacks, policy violations, data breaches and other security events, working methodically to establish the facts, determine impact and support timely resolution. You will monitor alerts and intelligence sources, conduct triage, preserve evidence and maintain accurate, auditable incident records from initial detection through closure. Key responsibilities include analysing logs, endpoint activity, network traffic, email artefacts and cloud data to identify indicators of compromise and reconstruct attack timelines. You will coordinate containment, eradication and recovery activities...

Learn more

Security Engineer, Incident Response

Added 08/10/2026

We are seeking a Security Engineer, Incident Response to help protect critical systems, applications, and data from evolving cyber threats. In this role, you will investigate security alerts and incidents, coordinate effective containment and remediation, and help strengthen the organisation’s overall detection and response capabilities. You will work closely with security operations, infrastructure, engineering, application, and business teams to manage incidents from initial triage through recovery and post-incident review. Your responsibilities will include monitoring and analysing alerts from endpoint, network, identity, cloud, and application security tools; conducting forensic investigations; identifying attack techniques, indicators of compromise, and root causes; and maintaining...

Learn more

Incident Response Manager, Security Operations Group | Worldwide Operations Security

Added 07/10/2026

We are seeking an experienced Incident Response Manager to lead the coordination, investigation, and resolution of security incidents across a complex, globally distributed operational environment. This role will oversee incident response activities from initial detection and triage through containment, eradication, recovery, and post-incident review. You will work closely with security operations, threat intelligence, cyber investigations, technology, legal, risk, and business teams to protect people, facilities, information, and critical services. Key responsibilities include managing high-severity incidents and serving as an escalation point during active events; establishing incident priorities, response plans, communications, and decision-making processes; directing investigations involving cyber threats, insider risk,...

Learn more

Senior Threat Hunting & Incident Response - EMEA

Added 07/10/2026

We are seeking a Senior Threat Hunting & Incident Response professional to lead advanced cyber defence activities across the EMEA region. This role will be responsible for proactively identifying sophisticated threats, investigating security incidents and coordinating effective containment and recovery actions. You will work closely with security operations, infrastructure, cloud, application and risk teams to strengthen detection capabilities and reduce organisational exposure. Key responsibilities include designing and executing threat-hunting investigations across endpoint, network, identity, cloud and application environments; analysing security telemetry to identify indicators of compromise, attacker behaviour and emerging techniques; and leading incident response activities from initial triage through...

Learn more

Security Engineering Manager - Incident Response, AWS CloudOps

Added 06/10/2026

We are seeking a Security Engineering Manager to lead incident response and cloud security operations across a complex AWS environment. This role will manage a team of security engineers and coordinate the detection, investigation, containment, and recovery of security incidents affecting cloud infrastructure, applications, and data. You will establish effective response processes, improve operational readiness, and ensure incidents are handled quickly, consistently, and with clear communication to technical and business stakeholders. Responsibilities include developing and maintaining incident response playbooks, leading investigations into suspected compromises, and coordinating forensic analysis, remediation, and post-incident reviews. You will partner with CloudOps, infrastructure, software engineering,...

Learn more

Security Engineering Manager - Incident Response, AWS CloudOps

Added 06/10/2026

We are seeking a Security Engineering Manager to lead incident response and cloud operations security across a complex, highly available environment. This role will manage a team of security engineers and coordinate the organisation’s response to cyber incidents, from initial detection and triage through containment, eradication, recovery, and post-incident improvement. You will establish clear operational processes, strengthen monitoring and detection capabilities, and ensure that security events are handled consistently, rapidly, and with appropriate business communication. You will oversee the development and maintenance of incident response plans, playbooks, escalation procedures, and crisis exercises. Working closely with infrastructure, platform engineering, application development,...

Learn more

Associate Manager - Cyber Security Incident Response

Added 23/09/2026

We are seeking an experienced Associate Manager – Cyber Security Incident Response to help protect critical systems, data and services from evolving cyber threats. In this role, you will support the management of security incidents from initial detection through to containment, eradication and recovery, ensuring that response activities are coordinated, timely and well documented. You will work closely with security operations, infrastructure, applications, risk, legal, privacy and business stakeholders to assess impact, determine priorities and guide effective remediation. Your responsibilities will include overseeing the triage and investigation of suspected security incidents, validating alerts and coordinating appropriate escalation. You will help...

Learn more

Security Incident Response Manager

Added 23/09/2026

We are seeking an experienced Security Incident Response Manager to lead the detection, investigation, containment, and recovery of cybersecurity incidents across a complex technology environment. In this role, you will manage the incident response function, coordinate activity across security operations, infrastructure, engineering, legal, privacy, communications, and business teams, and ensure that incidents are handled efficiently and consistently. You will establish clear escalation procedures, define incident severity criteria, and provide calm, decisive leadership during high-impact events. Key responsibilities include overseeing the full incident lifecycle, from initial triage and forensic investigation through remediation, recovery, and post-incident review. You will maintain and improve...

Learn more

Senior Security Incident Response Analyst

Added 23/09/2026

We are seeking a Senior Security Incident Response Analyst to lead the investigation, containment, and resolution of complex cybersecurity incidents across a diverse technology environment. In this role, you will monitor and analyse security alerts, coordinate rapid responses to suspected breaches, and provide expert guidance throughout the incident lifecycle. You will work closely with security operations, infrastructure, engineering, legal, risk, and business teams to assess impact, minimise disruption, and restore secure operations. Your responsibilities will include developing and refining incident response procedures, conducting detailed analysis of endpoint, network, identity, cloud, and application data, and performing forensic investigations to determine attack...

Learn more

Cybersecurity Incident Response Lead

Added 22/09/2026

We are seeking a Cybersecurity Incident Response Lead to coordinate the identification, containment, investigation and resolution of security incidents across a complex technology environment. You will provide technical leadership during high-impact events, ensuring that response activities are structured, timely and aligned with established security and business continuity objectives. The role will work closely with security operations, infrastructure, application, legal, risk, compliance and communications teams to reduce operational impact and protect sensitive information. Responsibilities will include leading incident response investigations from initial triage through recovery and post-incident review; assessing alerts, indicators of compromise and reported threats; directing containment, eradication and remediation...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.