7 incident response analyst jobs found in London

Incident Response Analyst- Contract- Outside ir35 Rate- £450 per day, outside IR35 Location- 2 days onsite (London), 3 days' work from home Duration- 12-month contract. Incident Response Analyst Practical experience in cyber incident response, security monitoring or a Security Operations Centre environment. Hands-on experience investigating security alerts and incidents using SIEM and EDR/XDR technologies. Experience analysing Windows and Linux host artefacts, authentication activity, security logs, network traffic and packet captures. Working knowledge of incident response life cycle activities, including preparation, detection, analysis, containment, eradication, recovery and lessons learned. Experience producing incident records, investigation reports, management updates and post-incident findings. Understanding of attacker behaviours and frameworks, including MITRE ATT&CK, Cyber Kill Chain and NIST incident response guidance. Knowledge of...

Role - Incident Response Analyst (Cyber Security) Rate - upto £450/Day Outside IR35 12 Months contract London Based (Hybrid - 2 Days in office) Responsibilities: Should have atleast 8+ years of experience as an Incident Response Analyst. Must have strong experience as Cyber Security. - Incident Detection, Triage & Response: Monitor and analyse security alerts across SIEM, EDR/XDR, identity, email, cloud, and network security platforms. Validate incidents, assess severity and business impact, investigate threats such as phishing, malware, account compromise, and unauthorised access, and coordinate containment, eradication, and recovery activities in line with established SLAs. - Digital Forensics & Threat Investigation: Conduct forensic investigations across Windows/Linux endpoints, Servers, network traffic, authentication logs, email, and cloud environments. Collect and preserve digital evidence, maintain chain of custody, identify Indicators...

Incident Response Analyst- Contract- Outside ir35 Rate- £450 per day, outside IR35 Location- 2 days onsite (London), 3 days' work from home Duration- 12-month contract. Incident Response Analyst Practical experience in cyber incident response, security monitoring or a Security Operations Centre environment. Hands-on experience investigating security alerts and incidents using SIEM and EDR/XDR technologies. Experience analysing Windows and Linux host artefacts, authentication activity, security logs, network traffic and packet captures. Working knowledge of incident response life cycle activities, including preparation, detection, analysis, containment, eradication, recovery and lessons learned. Experience producing incident records, investigation reports, management updates and post-incident findings. Understanding of attacker behaviours and frameworks, including MITRE ATT&CK, Cyber Kill Chain and NIST incident response guidance. Knowledge of...

Incident Response Analyst (DFIR)   You’ll join the incident response team at an MSSP in a hands-on DFIR role, taking incidents across a range of client environments from first alert through containment, digital forensics and lessons learned. You’ll also be the person clients turn to during an incident, guiding them through it and presenting what you found once it’s resolved.   The essentials £500 - £600 per day, Outside IR35 London, 2 days a week on site Contract role, client-facing, working alongside Security Operations, Professional Services and Customer Success teams What you’ll actually do Triage and investigate alerts from SIEM, EDR/XDR, identity, email, cloud and network platforms, then set severity and escalate against client service levels Lead or support investigations into phishing, malware, account compromise, data loss and unauthorised access, coordinating containment and recovery...

Outside IR35 Rate: £400/day Hybrid: 2 days onsite either London Or Liverpool On-call rotations is 1-in-4 weeks SecOps Engineer L2/L3 | Outside IR35 Contract | Hybrid Rate: £380 - £400/day On-call rotations is 1-in-4 weeks - compensated Hybrid: 2 days a week onsite in London OR Liverpool Industry: Highly Regulated Firm Job Summary: Our client is looking for a strong Security Operations Engineer - hands-on L2/L3 security analyst where you would response to escalated incidents and drive the investigations yourself, acting as the technical SME in their cyber incident response team, and maintain key security platforms. You will have to carry out hands-on analysis rather than operating in a purely administrative SOC environment. Key Responsibilities: Respond to escalated cyber security events and drive investigations through to resolution Work closely with external security providers to improve monitoring and alert handling Review security data and...

Outside IR35 Contract Role - Market Rates - ASAP Start Hybrid 2 days a week in the office (City of London) Highly Regulated Industry Security Engineer (Cyber Incident Investigation & Response) Our client is looking for a strong Security Engineer to act as the technical escalation point above their SOC function, taking ownership of complex security incidents and driving investigations through to resolution. This is a hands-on role focused on incident triage, forensic investigation, threat analysis, and remediation within a large enterprise environment. You will be responsible for investigating escalated security events, identifying indicators of compromise (IoCs), performing root cause analysis, and improving detection capabilities through engineering and threat-informed defence measures. Key Responsibilities: Investigate and lead the response to security incidents escalated from the SOC team through to containment and remediation Perform forensic analysis...

About the job CYBER THREAT MANAGEMENT CONSULTANT | OUTSIDE IR35 I’m currently recruiting for a Cyber Threat Management Consultant to support a major international defence programme through a specialist cyber security consultancy.   This is an excellent opportunity for an experienced cyber security professional to contribute to the development of cyber threat management processes and operational security capabilities within a high-profile defence environment.   The Opportunity Contract: Outside IR35 Location: Reading – 2 days per week on-site Clearance: Active SC clearance or higher required Nationality: Due to the nature of this role, we can only consider sole UK, Italian or Japanese nationals   Key Responsibilities Establish and operationalise processes for managing cyber events, incidents and threats. Develop operating procedures for threat detection, triage, escalation and...