Incident Response Analyst

Reference: q1atb6p4gqiooeedcxrl

An exciting opportunity has arisen for an Incident Response Analyst to join a fast-paced security operations environment. You will play a key role in identifying, investigating and responding to cyber security incidents, helping to protect critical systems, data and services. This role would suit an analytical and motivated security professional who is confident working under pressure and communicating clearly with both technical and non-technical colleagues.

You will monitor and assess security alerts, triage suspected incidents and carry out detailed investigations across endpoints, networks, cloud platforms and applications. Responsibilities will include analysing log data, identifying indicators of compromise, containing threats, supporting eradication and recovery activities, and maintaining accurate incident records. You will also contribute to post-incident reviews, root-cause analysis and the development of recommendations to prevent recurrence.

The successful candidate will help maintain and improve incident response playbooks, procedures and detection capabilities. You will work closely with infrastructure, engineering and risk teams to coordinate response activities, escalate serious events appropriately and provide clear updates throughout the incident lifecycle. The role may also involve supporting threat hunting, vulnerability remediation, security awareness initiatives and the preparation of management reports and performance metrics.

Applicants should have experience in cyber security operations, incident response, security monitoring or a closely related discipline. You will have a sound understanding of common attack techniques, incident handling principles and digital investigation methods, together with practical experience using SIEM, EDR or other security monitoring tools. Familiarity with cloud security, network protocols, malware analysis and frameworks such as MITRE ATT&CK would be advantageous.

Strong problem-solving skills, attention to detail and the ability to prioritise competing demands are essential. You should be comfortable documenting technical findings, working collaboratively and making well-reasoned decisions in time-sensitive situations. Relevant qualifications such as Security+, GCIH, GCIA, CISSP or equivalent experience are welcomed. A commitment to continuous learning and maintaining current knowledge of the evolving threat landscape is expected.

£63.00 - £75.00
Per hour
Added 29/10/2026
Reference: q1atb6p4gqiooeedcxrl

Other similar jobs

Senior Manager, Associate Director, Cyber Incident Response Advisory and Incident Management

Added 23/10/2026

We are seeking a Senior Manager, Associate Director, Cyber Incident Response Advisory and Incident Management to lead the development and delivery of effective cyber incident response capabilities. This is a senior role requiring strong technical knowledge, sound judgement and the ability to provide calm, decisive leadership during complex and high-impact security incidents. You will oversee incident response activities from initial triage and investigation through to containment, recovery and post-incident review. Working closely with cyber security, technology, risk, legal, compliance, communications and senior leadership teams, you will coordinate timely responses, establish clear lines of accountability and ensure that key decisions are...

Learn more

Senior Manager, Associate Director, Cyber Incident Response Advisory and Incident Management

Added 23/10/2026

We are seeking an experienced Senior Manager or Associate Director to lead cyber incident response advisory and incident management activities within a complex, fast-paced environment. This is a high-impact role for a confident cyber security professional who can provide strategic direction while remaining comfortable supporting the management of significant incidents. You will lead the development and continuous improvement of incident response frameworks, playbooks, processes and governance arrangements. Working closely with technology, risk, legal, compliance, communications and business stakeholders, you will ensure the organisation is prepared to identify, contain, investigate and recover from cyber incidents effectively. Key responsibilities will include managing...

Learn more

Incident Response Analyst

Added 14/10/2026

We are seeking an Incident Response Analyst to help protect critical systems, applications, and data from cyber threats. In this role, you will monitor, investigate, and respond to security incidents across a diverse technology environment. You will analyse alerts from security monitoring tools, validate potential threats, determine scope and impact, and coordinate timely containment and remediation activities. The position requires sound technical judgement, strong attention to detail, and the ability to remain effective during high-priority incidents. Key responsibilities include triaging and investigating alerts, conducting endpoint, network, identity, and cloud-based analysis, and developing incident timelines using relevant logs and forensic evidence....

Learn more

Senior Security Incident Response Analyst

Added 23/09/2026

We are seeking a Senior Security Incident Response Analyst to lead the investigation, containment, and resolution of complex cybersecurity incidents across a diverse technology environment. In this role, you will monitor and analyse security alerts, coordinate rapid responses to suspected breaches, and provide expert guidance throughout the incident lifecycle. You will work closely with security operations, infrastructure, engineering, legal, risk, and business teams to assess impact, minimise disruption, and restore secure operations. Your responsibilities will include developing and refining incident response procedures, conducting detailed analysis of endpoint, network, identity, cloud, and application data, and performing forensic investigations to determine attack...

Learn more

Security Operations Engineer, AWS Security Cloud Response, Amazon Security Cloud Security Response

Added 14/10/2026

We are seeking a Security Operations Engineer to support cloud security response activities in a fast-paced, highly distributed environment. In this role, you will help protect cloud infrastructure, services, and customer data by investigating security events, coordinating incident response, and improving detection and response capabilities. You will work closely with security engineering, infrastructure, software development, and operations teams to identify threats, contain incidents, and reduce the likelihood of recurrence. Your responsibilities will include monitoring and analysing security alerts, conducting technical investigations, triaging suspected compromises, and supporting the full incident management lifecycle. You will develop and maintain incident response procedures, playbooks,...

Learn more

Incident Response Lead

Added 02/11/2026

We are seeking an experienced Incident Response Lead to take ownership of the organisation’s approach to identifying, managing and resolving technology and security incidents. This is a key role in strengthening operational resilience, reducing service disruption and ensuring that incidents are handled consistently, efficiently and with clear accountability. You will lead the response to major and complex incidents, coordinating technical teams, service owners, suppliers and senior stakeholders throughout the incident lifecycle. Responsibilities will include assessing impact and urgency, establishing appropriate response structures, maintaining accurate communications, directing investigation and recovery activities, and ensuring that agreed service levels are met. You will...

Learn more

Product Security Incident Response Program Manager (m/f/d)

Added 29/10/2026

We are seeking a Product Security Incident Response Programme Manager (m/f/d) to lead the planning, coordination and continuous improvement of our response to product security incidents. In this role, you will help protect customers, products and services by ensuring that security vulnerabilities and incidents are assessed, managed and resolved efficiently across a complex, international environment. You will own and develop the product security incident response framework, including policies, processes, playbooks, escalation paths and communication procedures. Working closely with product security, engineering, software development, legal, communications, privacy and customer-facing teams, you will coordinate the end-to-end response to incidents, from initial triage...

Learn more

Senior Cloud Incident Response Consultant

Added 29/10/2026

We are seeking a Senior Cloud Incident Response Consultant to lead the investigation, containment and resolution of complex security incidents across cloud environments. This is a senior technical role for an experienced incident responder who can work confidently under pressure, provide clear direction during critical events and help organisations strengthen their resilience against future threats. You will lead end-to-end incident response activities, from initial triage and scoping through containment, eradication, recovery and post-incident review. Working across cloud platforms, you will analyse identity and access activity, network traffic, workloads, endpoints, logs and other sources of forensic evidence. You will develop and...

Learn more

Consultant, Senior Consultant, Cyber Incident Response Advisory, Recovery and Resilience

Added 26/10/2026

We are seeking experienced professionals to join a cyber incident response advisory, recovery and resilience team. Opportunities are available at Consultant and Senior Consultant level for individuals who can help clients prepare for, respond to and recover from significant cyber security incidents. You will work with a broad range of stakeholders, supporting organisations in strengthening their ability to withstand disruption and maintain critical services. You will contribute to incident response engagements, including assessing the impact of cyber attacks, supporting containment and recovery activities, coordinating technical and business workstreams, and helping clients return to normal operations. You will also assist with...

Learn more

Disputes & Investigations - Senior Director, Incident Response Lead

Added 26/10/2026

We are seeking an experienced Senior Director to lead incident response activities across a complex, highly regulated environment. This is a senior leadership role responsible for directing the response to significant disputes, investigations, misconduct matters, regulatory concerns and other critical incidents that may affect customers, colleagues, operations or reputation. The successful candidate will establish and oversee a robust incident response framework, ensuring that matters are identified, assessed, escalated and managed consistently. You will lead multidisciplinary response teams, bringing together legal, compliance, risk, security, communications, technology, operations and other relevant specialists. You will provide clear direction during fast-moving and sensitive situations,...

Learn more

Consultant, Senior Consultant, Cyber Incident Response Advisory, Recovery and Resilience

Added 26/10/2026

We are seeking experienced professionals to join a Cyber Incident Response Advisory, Recovery and Resilience team at Consultant and Senior Consultant level. This is an opportunity to support clients in preparing for, responding to and recovering from complex cyber incidents, while helping them strengthen their long-term resilience. You will work with organisations across a range of sectors to assess their cyber incident response capabilities, identify vulnerabilities and develop practical strategies for managing disruption. Responsibilities may include supporting incident response engagements, conducting readiness assessments, reviewing crisis management arrangements and contributing to post-incident lessons-learned reviews. You will also help clients develop and...

Learn more

Manager, Cyber Incident Response Advisory, Recovery and Resilience

Added 23/10/2026

We are seeking a Manager, Cyber Incident Response Advisory, Recovery and Resilience to lead the development and delivery of effective cyber incident preparedness, response and recovery capabilities. This role will provide expert guidance to stakeholders across the organisation, helping to strengthen resilience against cyber threats and minimise operational impact when incidents occur. You will advise on cyber incident response plans, crisis management processes and recovery strategies, ensuring they remain practical, proportionate and aligned with business priorities. Responsibilities will include coordinating scenario-based exercises, facilitating post-incident reviews, identifying lessons learned and tracking improvement actions through to completion. You will also support the...

Learn more

Manager, Cyber Incident Response Advisory, Recovery and Resilience

Added 23/10/2026

We are seeking an experienced Manager, Cyber Incident Response Advisory, Recovery and Resilience to lead the development and delivery of effective cyber incident preparedness, response and recovery capabilities. This is an influential role for a professional who can combine technical understanding with strong stakeholder management, helping teams prepare for, respond to and learn from significant cyber events. You will provide expert advice on incident response, business continuity, disaster recovery and operational resilience. Working closely with technology, security, risk, legal, compliance and business teams, you will assess current capabilities, identify vulnerabilities and develop practical improvements that support a coordinated response to...

Learn more

Incident Response Team Leader

Added 22/10/2026

We are seeking an experienced Incident Response Team Leader to lead the effective management of operational incidents and ensure the timely restoration of critical services. You will coordinate response activity across technical and business teams, providing clear direction during high-impact events and maintaining a calm, structured approach under pressure. You will lead the incident response process from initial identification through to resolution, ensuring incidents are assessed, prioritised, recorded and communicated appropriately. Responsibilities will include coordinating technical investigations, assigning actions, managing escalations and ensuring that stakeholders receive accurate and timely updates. You will also facilitate incident bridges, maintain decision logs and...

Learn more

Cyber Incident Response Lead

Added 21/10/2026

We are seeking an experienced Cyber Incident Response Lead to direct the investigation, containment and recovery of significant cyber security incidents. This is a hands-on leadership role for an accomplished incident responder who can provide calm, decisive direction during high-pressure situations and strengthen organisational resilience over the long term. You will lead the end-to-end response to security incidents, from initial triage and forensic investigation through to eradication, recovery and post-incident review. You will coordinate technical teams and wider stakeholders, establish response priorities, maintain accurate incident records and provide clear updates to senior leaders. The role will also involve assessing potential...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.