Cyber Incident Response Lead

Reference: dgy2zu3nhgynht8k30aq

We are seeking an experienced Cyber Incident Response Lead to direct the investigation, containment and recovery of significant cyber security incidents. This is a hands-on leadership role for an accomplished incident responder who can provide calm, decisive direction during high-pressure situations and strengthen organisational resilience over the long term.

You will lead the end-to-end response to security incidents, from initial triage and forensic investigation through to eradication, recovery and post-incident review. You will coordinate technical teams and wider stakeholders, establish response priorities, maintain accurate incident records and provide clear updates to senior leaders. The role will also involve assessing potential business impact, advising on risk-based decisions and supporting communications where incidents affect customers, colleagues or critical services.

As the subject matter expert, you will develop and maintain incident response plans, playbooks and escalation procedures. You will help improve detection and response capabilities by working with security operations, threat intelligence, vulnerability management, infrastructure and application teams. You will also lead exercises, simulations and lessons-learned reviews, ensuring that findings are translated into practical improvements to controls, processes and team readiness.

Applicants should have substantial experience in cyber incident response, digital forensics or a closely related discipline, together with a strong understanding of attack techniques, malware, identity compromise, cloud environments and network security. Experience using SIEM, EDR, forensic and threat intelligence tooling is essential. Relevant professional qualifications, such as CISSP, CISM, GIAC or equivalent practical experience, would be advantageous.

You will be an excellent communicator with proven experience leading investigations and influencing stakeholders at all levels. The ability to explain complex technical issues clearly, manage competing priorities and make sound decisions using incomplete information is essential. A collaborative approach, strong analytical skills and a commitment to continuous improvement will be highly valued. The role may require participation in an on-call rota and occasional out-of-hours incident response.

COMPETITIVE SALARY
Added 21/10/2026
Reference: dgy2zu3nhgynht8k30aq

Other similar jobs

Cyber Incident Response Lead

Added 09/09/2026

We are seeking an experienced Cyber Incident Response Lead to direct the identification, investigation, containment and recovery of complex cybersecurity incidents. You will provide senior technical leadership throughout the incident lifecycle, coordinating rapid and effective responses to threats affecting systems, networks, applications, cloud environments and sensitive data. The role will involve assessing alerts, validating incidents, determining scope and impact, developing containment strategies, and ensuring that recovery actions are completed safely and efficiently. You will lead incident response activities across multidisciplinary teams, including security operations, infrastructure, engineering, risk, legal, communications and business stakeholders. Responsibilities will include establishing response priorities, allocating resources,...

Learn more

Cybersecurity Incident Response Lead

Added 22/09/2026

We are seeking a Cybersecurity Incident Response Lead to coordinate the identification, containment, investigation and resolution of security incidents across a complex technology environment. You will provide technical leadership during high-impact events, ensuring that response activities are structured, timely and aligned with established security and business continuity objectives. The role will work closely with security operations, infrastructure, application, legal, risk, compliance and communications teams to reduce operational impact and protect sensitive information. Responsibilities will include leading incident response investigations from initial triage through recovery and post-incident review; assessing alerts, indicators of compromise and reported threats; directing containment, eradication and remediation...

Learn more

Associate Manager - Cyber Security Incident Response

Added 23/09/2026

We are seeking an experienced Associate Manager – Cyber Security Incident Response to help protect critical systems, data and services from evolving cyber threats. In this role, you will support the management of security incidents from initial detection through to containment, eradication and recovery, ensuring that response activities are coordinated, timely and well documented. You will work closely with security operations, infrastructure, applications, risk, legal, privacy and business stakeholders to assess impact, determine priorities and guide effective remediation. Your responsibilities will include overseeing the triage and investigation of suspected security incidents, validating alerts and coordinating appropriate escalation. You will help...

Learn more

Senior Manager, Global Cyber Security Incident Response (Global CSIRT)

Added 18/09/2026

We are seeking a Senior Manager, Global Cyber Security Incident Response to lead and evolve a global incident response capability. This role will be responsible for directing the identification, containment, investigation and recovery of significant cyber security incidents across a complex, international environment. You will provide calm, decisive leadership during high-impact events, coordinate technical and business stakeholders, and ensure that response activities protect critical services, data and customer trust. The role will also contribute to the development of a mature, intelligence-led and continuously improving Global CSIRT function. Key responsibilities include leading incident response teams and third-party partners through suspected and...

Learn more

Senior Associate, Cyber Security Analyst – Incident Response

Added 02/09/2026

We are seeking a Senior Associate, Cyber Security Analyst – Incident Response to join a dedicated security operations function. In this role, you will help protect critical systems, data and services by leading the investigation and response to cyber security incidents. You will work closely with technology, risk, infrastructure and business teams to identify threats, contain activity, recover affected environments and strengthen the organisation’s overall security posture. Key responsibilities include monitoring and analysing security alerts, endpoint activity, network traffic, identity events and other indicators of compromise. You will triage incidents, determine scope and severity, coordinate containment and eradication activities, and...

Learn more

Graduate Consultant, Cyber Incident Response: One Year Fixed Term Contract

Added 01/09/2026

Graduate Consultant, Cyber Incident Response: One Year Fixed Term Contract. An exciting opportunity is available for a recent graduate or early-career professional to begin a career in cyber incident response. Working as part of a specialist security team, you will support the investigation, management and resolution of cyber incidents affecting a range of systems, networks and users. This is a practical, learning-focused role suited to someone with a genuine interest in cybersecurity, strong analytical ability and a willingness to develop technical expertise. Your responsibilities will include assisting with the triage and investigation of suspected security incidents, reviewing alerts and log...

Learn more

Head of Cyber Defence & Incident Response

Added 25/08/2026

We are seeking an experienced Head of Cyber Defence & Incident Response to lead the development and delivery of a resilient, intelligence-led cyber security capability. This senior role will provide strategic direction across security operations, threat detection, incident response, vulnerability management and cyber resilience, ensuring the organisation is prepared to prevent, identify, contain and recover from increasingly sophisticated threats. You will advise senior stakeholders on cyber risk, translate technical issues into clear business impacts, and promote a strong culture of security and continuous improvement. Key responsibilities will include leading and developing cyber defence and incident response teams; establishing and refining...

Learn more

Cyber Incident Response Manager

Added 25/08/2026

We are seeking an experienced Cyber Incident Response Manager to lead the identification, investigation and resolution of cyber security incidents across a complex technology environment. This role will manage the full incident response lifecycle, from preparation and detection through containment, eradication, recovery and post-incident review. You will provide calm, decisive leadership during high-impact events and help strengthen the organisation’s resilience against evolving cyber threats. Key responsibilities will include managing and developing incident response processes, playbooks and escalation procedures; coordinating technical response activities across security, infrastructure, applications, legal, compliance and communications teams; and ensuring incidents are accurately assessed, documented and reported....

Learn more

Security Operations Engineer, AWS Security Cloud Response, Amazon Security Cloud Security Response

Added 14/10/2026

We are seeking a Security Operations Engineer to support cloud security response activities in a fast-paced, highly distributed environment. In this role, you will help protect cloud infrastructure, services, and customer data by investigating security events, coordinating incident response, and improving detection and response capabilities. You will work closely with security engineering, infrastructure, software development, and operations teams to identify threats, contain incidents, and reduce the likelihood of recurrence. Your responsibilities will include monitoring and analysing security alerts, conducting technical investigations, triaging suspected compromises, and supporting the full incident management lifecycle. You will develop and maintain incident response procedures, playbooks,...

Learn more

Incident Response Manager - Product & Engineering

Added 20/10/2026

We are seeking an experienced Incident Response Manager to lead the organisation’s response to significant incidents affecting products, platforms and engineering services. You will provide calm, structured leadership during high-severity events, coordinating technical teams, product stakeholders, customer communications and business operations to restore services quickly and safely. You will own the incident management framework, ensuring that response processes are clear, effective and consistently followed across a complex technology environment. Your responsibilities will include managing major incidents from initial assessment through resolution, establishing appropriate response teams, maintaining accurate timelines and ensuring that actions, decisions and risks are clearly documented. You will...

Learn more

Crisis & Incident Response Manager VP

Added 16/10/2026

We are seeking an experienced Crisis & Incident Response Manager at Vice President level to lead the organisation’s approach to major incidents, business disruption and crisis management. This is a high-profile role responsible for ensuring that critical events are identified, managed and resolved effectively, while protecting customers, colleagues, operations and reputation. You will provide confident leadership during fast-moving situations, coordinate cross-functional response teams and ensure that senior stakeholders receive clear, timely and accurate information. Your responsibilities will include owning and continually improving the incident and crisis management framework; maintaining response plans, playbooks, escalation procedures and contact structures; and leading exercises,...

Learn more

Incident response investigator

Added 14/10/2026

We are seeking an Incident Response Investigator to identify, assess and manage security incidents across a complex technology environment. The successful candidate will investigate suspected cyber attacks, policy violations, data breaches and other security events, working methodically to establish the facts, determine impact and support timely resolution. You will monitor alerts and intelligence sources, conduct triage, preserve evidence and maintain accurate, auditable incident records from initial detection through closure. Key responsibilities include analysing logs, endpoint activity, network traffic, email artefacts and cloud data to identify indicators of compromise and reconstruct attack timelines. You will coordinate containment, eradication and recovery activities...

Learn more

Incident Response Analyst

Added 14/10/2026

We are seeking an Incident Response Analyst to help protect critical systems, applications, and data from cyber threats. In this role, you will monitor, investigate, and respond to security incidents across a diverse technology environment. You will analyse alerts from security monitoring tools, validate potential threats, determine scope and impact, and coordinate timely containment and remediation activities. The position requires sound technical judgement, strong attention to detail, and the ability to remain effective during high-priority incidents. Key responsibilities include triaging and investigating alerts, conducting endpoint, network, identity, and cloud-based analysis, and developing incident timelines using relevant logs and forensic evidence....

Learn more

Incident Response Consultant

Added 14/10/2026

We are seeking an experienced Incident Response Consultant to help organisations prepare for, respond to, and recover from complex cybersecurity incidents. In this role, you will work with clients across a range of industries to investigate security events, contain threats, minimise business impact, and support effective recovery. You will contribute to incident response engagements from initial triage through to post-incident review, providing clear technical guidance and practical recommendations throughout. Your responsibilities will include monitoring and analysing alerts, conducting digital forensics, identifying attack vectors, and assessing the scope and impact of compromises. You will lead or support incident response activities involving...

Learn more

Security Engineer, Incident Response

Added 08/10/2026

We are seeking a Security Engineer, Incident Response to help protect critical systems, applications, and data from evolving cyber threats. In this role, you will investigate security alerts and incidents, coordinate effective containment and remediation, and help strengthen the organisation’s overall detection and response capabilities. You will work closely with security operations, infrastructure, engineering, application, and business teams to manage incidents from initial triage through recovery and post-incident review. Your responsibilities will include monitoring and analysing alerts from endpoint, network, identity, cloud, and application security tools; conducting forensic investigations; identifying attack techniques, indicators of compromise, and root causes; and maintaining...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.