Incident Response Analyst

Reference: msd6vr7nt3qu3bucu3z8

We are seeking an experienced Incident Response Analyst to help protect critical systems, applications and data from cyber threats. You will join a collaborative security function responsible for detecting, investigating and responding to incidents across a complex technology environment. This is an opportunity to make a direct contribution to cyber resilience while developing your expertise in a fast-paced and continually evolving field.

Your responsibilities will include monitoring security alerts, triaging potential incidents and conducting detailed investigations using security information and event management (SIEM), endpoint detection and response (EDR), network and cloud security tools. You will analyse logs and other forensic evidence, identify the scope and impact of incidents, contain threats and support remediation activities. You will also contribute to incident response playbooks, post-incident reviews, threat intelligence assessments and recommendations for improving preventative controls.

The role will involve working closely with infrastructure, engineering, service management and risk teams, as well as communicating clearly with technical and non-technical stakeholders during potentially high-pressure situations. You may also support vulnerability investigations, security testing, threat hunting and the preparation of incident reports and management briefings. Participation in an out-of-hours rota may be required.

Applicants should have practical experience in a security operations, incident response or digital forensics environment, with a sound understanding of the incident lifecycle and common attack techniques. You will be comfortable working with SIEM and EDR platforms, analysing Windows and Linux systems, and investigating network traffic and authentication events. Knowledge of cloud environments, malware analysis, scripting or relevant frameworks such as MITRE ATT&CK would be advantageous.

Strong analytical, problem-solving and communication skills are essential, together with the ability to prioritise competing demands and maintain accurate records. Relevant professional qualifications or certifications, such as GIAC, CREST, CompTIA Security+ or equivalent experience, are welcomed. In return, you will receive opportunities for professional development, exposure to varied security challenges and the support needed to build a successful career in cyber security.

COMPETITIVE SALARY
Added 04/11/2026
Reference: msd6vr7nt3qu3bucu3z8

Other similar jobs

Senior Manager, Associate Director, Cyber Incident Response Advisory and Incident Management

Added 23/10/2026

We are seeking a Senior Manager, Associate Director, Cyber Incident Response Advisory and Incident Management to lead the development and delivery of effective cyber incident response capabilities. This is a senior role requiring strong technical knowledge, sound judgement and the ability to provide calm, decisive leadership during complex and high-impact security incidents. You will oversee incident response activities from initial triage and investigation through to containment, recovery and post-incident review. Working closely with cyber security, technology, risk, legal, compliance, communications and senior leadership teams, you will coordinate timely responses, establish clear lines of accountability and ensure that key decisions are...

Learn more

Senior Manager, Associate Director, Cyber Incident Response Advisory and Incident Management

Added 23/10/2026

We are seeking an experienced Senior Manager or Associate Director to lead cyber incident response advisory and incident management activities within a complex, fast-paced environment. This is a high-impact role for a confident cyber security professional who can provide strategic direction while remaining comfortable supporting the management of significant incidents. You will lead the development and continuous improvement of incident response frameworks, playbooks, processes and governance arrangements. Working closely with technology, risk, legal, compliance, communications and business stakeholders, you will ensure the organisation is prepared to identify, contain, investigate and recover from cyber incidents effectively. Key responsibilities will include managing...

Learn more

Security Consultant - Incident Response Analyst

Added 03/11/2026

We are seeking a Security Consultant – Incident Response Analyst to help organisations prepare for, respond to and recover from complex cyber security incidents. This role will suit an experienced incident responder who can combine strong technical investigation skills with clear communication, sound judgement and a professional, client-focused approach. You will lead and support investigations into suspected and confirmed incidents, including malware infections, ransomware, credential compromise, phishing, insider threats and unauthorised access. Your responsibilities will include collecting and analysing digital evidence, reviewing endpoint, network and cloud data, identifying attack vectors, assessing impact and developing accurate incident timelines. You will also...

Learn more

Incident Response Analyst

Added 29/10/2026

An exciting opportunity has arisen for an Incident Response Analyst to join a fast-paced security operations environment. You will play a key role in identifying, investigating and responding to cyber security incidents, helping to protect critical systems, data and services. This role would suit an analytical and motivated security professional who is confident working under pressure and communicating clearly with both technical and non-technical colleagues. You will monitor and assess security alerts, triage suspected incidents and carry out detailed investigations across endpoints, networks, cloud platforms and applications. Responsibilities will include analysing log data, identifying indicators of compromise, containing threats, supporting...

Learn more

Incident Response Analyst

Added 14/10/2026

We are seeking an Incident Response Analyst to help protect critical systems, applications, and data from cyber threats. In this role, you will monitor, investigate, and respond to security incidents across a diverse technology environment. You will analyse alerts from security monitoring tools, validate potential threats, determine scope and impact, and coordinate timely containment and remediation activities. The position requires sound technical judgement, strong attention to detail, and the ability to remain effective during high-priority incidents. Key responsibilities include triaging and investigating alerts, conducting endpoint, network, identity, and cloud-based analysis, and developing incident timelines using relevant logs and forensic evidence....

Learn more

Senior Security Incident Response Analyst

Added 23/09/2026

We are seeking a Senior Security Incident Response Analyst to lead the investigation, containment, and resolution of complex cybersecurity incidents across a diverse technology environment. In this role, you will monitor and analyse security alerts, coordinate rapid responses to suspected breaches, and provide expert guidance throughout the incident lifecycle. You will work closely with security operations, infrastructure, engineering, legal, risk, and business teams to assess impact, minimise disruption, and restore secure operations. Your responsibilities will include developing and refining incident response procedures, conducting detailed analysis of endpoint, network, identity, cloud, and application data, and performing forensic investigations to determine attack...

Learn more

Security Operations Engineer, AWS Security Cloud Response, Amazon Security Cloud Security Response

Added 14/10/2026

We are seeking a Security Operations Engineer to support cloud security response activities in a fast-paced, highly distributed environment. In this role, you will help protect cloud infrastructure, services, and customer data by investigating security events, coordinating incident response, and improving detection and response capabilities. You will work closely with security engineering, infrastructure, software development, and operations teams to identify threats, contain incidents, and reduce the likelihood of recurrence. Your responsibilities will include monitoring and analysing security alerts, conducting technical investigations, triaging suspected compromises, and supporting the full incident management lifecycle. You will develop and maintain incident response procedures, playbooks,...

Learn more

Incident Response Lead

Added 02/11/2026

We are seeking an experienced Incident Response Lead to take ownership of the organisation’s approach to identifying, managing and resolving technology and security incidents. This is a key role in strengthening operational resilience, reducing service disruption and ensuring that incidents are handled consistently, efficiently and with clear accountability. You will lead the response to major and complex incidents, coordinating technical teams, service owners, suppliers and senior stakeholders throughout the incident lifecycle. Responsibilities will include assessing impact and urgency, establishing appropriate response structures, maintaining accurate communications, directing investigation and recovery activities, and ensuring that agreed service levels are met. You will...

Learn more

Product Security Incident Response Program Manager (m/f/d)

Added 29/10/2026

We are seeking a Product Security Incident Response Programme Manager (m/f/d) to lead the planning, coordination and continuous improvement of our response to product security incidents. In this role, you will help protect customers, products and services by ensuring that security vulnerabilities and incidents are assessed, managed and resolved efficiently across a complex, international environment. You will own and develop the product security incident response framework, including policies, processes, playbooks, escalation paths and communication procedures. Working closely with product security, engineering, software development, legal, communications, privacy and customer-facing teams, you will coordinate the end-to-end response to incidents, from initial triage...

Learn more

Senior Cloud Incident Response Consultant

Added 29/10/2026

We are seeking a Senior Cloud Incident Response Consultant to lead the investigation, containment and resolution of complex security incidents across cloud environments. This is a senior technical role for an experienced incident responder who can work confidently under pressure, provide clear direction during critical events and help organisations strengthen their resilience against future threats. You will lead end-to-end incident response activities, from initial triage and scoping through containment, eradication, recovery and post-incident review. Working across cloud platforms, you will analyse identity and access activity, network traffic, workloads, endpoints, logs and other sources of forensic evidence. You will develop and...

Learn more

Consultant, Senior Consultant, Cyber Incident Response Advisory, Recovery and Resilience

Added 26/10/2026

We are seeking experienced professionals to join a cyber incident response advisory, recovery and resilience team. Opportunities are available at Consultant and Senior Consultant level for individuals who can help clients prepare for, respond to and recover from significant cyber security incidents. You will work with a broad range of stakeholders, supporting organisations in strengthening their ability to withstand disruption and maintain critical services. You will contribute to incident response engagements, including assessing the impact of cyber attacks, supporting containment and recovery activities, coordinating technical and business workstreams, and helping clients return to normal operations. You will also assist with...

Learn more

Disputes & Investigations - Senior Director, Incident Response Lead

Added 26/10/2026

We are seeking an experienced Senior Director to lead incident response activities across a complex, highly regulated environment. This is a senior leadership role responsible for directing the response to significant disputes, investigations, misconduct matters, regulatory concerns and other critical incidents that may affect customers, colleagues, operations or reputation. The successful candidate will establish and oversee a robust incident response framework, ensuring that matters are identified, assessed, escalated and managed consistently. You will lead multidisciplinary response teams, bringing together legal, compliance, risk, security, communications, technology, operations and other relevant specialists. You will provide clear direction during fast-moving and sensitive situations,...

Learn more

Consultant, Senior Consultant, Cyber Incident Response Advisory, Recovery and Resilience

Added 26/10/2026

We are seeking experienced professionals to join a Cyber Incident Response Advisory, Recovery and Resilience team at Consultant and Senior Consultant level. This is an opportunity to support clients in preparing for, responding to and recovering from complex cyber incidents, while helping them strengthen their long-term resilience. You will work with organisations across a range of sectors to assess their cyber incident response capabilities, identify vulnerabilities and develop practical strategies for managing disruption. Responsibilities may include supporting incident response engagements, conducting readiness assessments, reviewing crisis management arrangements and contributing to post-incident lessons-learned reviews. You will also help clients develop and...

Learn more

Manager, Cyber Incident Response Advisory, Recovery and Resilience

Added 23/10/2026

We are seeking a Manager, Cyber Incident Response Advisory, Recovery and Resilience to lead the development and delivery of effective cyber incident preparedness, response and recovery capabilities. This role will provide expert guidance to stakeholders across the organisation, helping to strengthen resilience against cyber threats and minimise operational impact when incidents occur. You will advise on cyber incident response plans, crisis management processes and recovery strategies, ensuring they remain practical, proportionate and aligned with business priorities. Responsibilities will include coordinating scenario-based exercises, facilitating post-incident reviews, identifying lessons learned and tracking improvement actions through to completion. You will also support the...

Learn more

Manager, Cyber Incident Response Advisory, Recovery and Resilience

Added 23/10/2026

We are seeking an experienced Manager, Cyber Incident Response Advisory, Recovery and Resilience to lead the development and delivery of effective cyber incident preparedness, response and recovery capabilities. This is an influential role for a professional who can combine technical understanding with strong stakeholder management, helping teams prepare for, respond to and learn from significant cyber events. You will provide expert advice on incident response, business continuity, disaster recovery and operational resilience. Working closely with technology, security, risk, legal, compliance and business teams, you will assess current capabilities, identify vulnerabilities and develop practical improvements that support a coordinated response to...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.