Arcus Search
Senior / Lead Incident Response Engineer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Job Title: Senior / Lead Incident Response Engineer
Type: Permanent
Location: London – Hybrid
The Opportunity
We are working with a leading, technology-driven financial services organisation to appoint two Senior / Lead Incident Response Engineers on a permanent basis.
These are senior-level positions within a highly sophisticated cybersecurity environment, suited to candidates who have built their careers in cybersecurity engineering and have subsequently developed deep expertise in incident response and major incident management.
The organisation is looking for individuals who have already operated through large-scale, high-impact and business-critical cyber incidents and who are capable of taking complete ownership when the pressure is on.
This is not a role for someone who simply participates in an incident response process. You will be expected to lead from the front, take accountability, coordinate technical teams, make critical decisions and drive incidents through to resolution.
Key Responsibilities
- Take end-to-end ownership of major cybersecurity incidents, from initial detection and triage through containment, eradication, recovery and post-incident activity.
- Lead the technical response to high-severity and business-critical security incidents.
- Coordinate response activity across Security, Engineering, Infrastructure, Cloud, IT and wider technology teams.
- Lead complex investigations to establish the scope, impact, root cause and attack path of an incident.
- Provide clear technical direction and decision-making during fast-moving and high-pressure situations.
- Communicate incident status, risk and recommended actions clearly to senior technical and business stakeholders.
- Drive post-incident reviews, ensuring lessons learned are translated into tangible security and resilience improvements.
- Develop and continuously improve incident response processes, playbooks and operational procedures.
- Identify opportunities to improve detection, containment, investigation and recovery capabilities.
- Work closely with Security Operations, Detection Engineering, Threat Intelligence, Cloud Security and wider cybersecurity teams.
- Help develop incident response tooling, automation and engineering capabilities.
- Contribute to the maturity of the organisation's wider cyber incident and crisis management framework.
- Provide technical leadership and mentorship to other security professionals.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
About You
The ideal candidate will have a strong cybersecurity engineering background combined with significant experience in incident response.
You will ideally have:
- Extensive experience in cybersecurity engineering, security operations, DFIR or a related technical security discipline.
- Proven experience leading major cybersecurity incidents within large, complex organisations.
- A track record of taking full ownership and accountability for critical incidents.
- Experience operating effectively when information is incomplete, the situation is changing rapidly and the business impact is significant.
- Strong technical knowledge across areas such as cloud, identity, endpoints, networks, applications and security tooling.
- A strong understanding of modern attack techniques, including identity compromise, credential theft, lateral movement, cloud compromise, data exfiltration and ransomware/extortion.
- Experience with technologies such as SIEM, EDR/XDR, threat intelligence, forensic and incident response platforms.
- Excellent analytical and investigative capabilities.
- The ability to lead and influence highly technical teams without relying solely on formal authority.
- Exceptional communication skills, including the ability to provide concise and accurate updates to senior stakeholders during live incidents.
- A strong sense of ownership, accountability and urgency.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
The Background We're Looking For
You may currently be working as a:
- Lead Incident Response Engineer
- Senior Incident Response Engineer
- Cyber Incident Response Lead
- Senior Cybersecurity Engineer – Incident Response
- Cyber Incident Manager
- Major Incident Response Lead
- DFIR / Incident Response Lead
Alternatively, you may have a broader security engineering title but have increasingly specialised in incident response and major incident management.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location