Senior Cloud Incident Response Lead

S-RM; Greater London; Hybrid; GBP 80,000 - 110,000; Full time

Benefits offered by this job

25 days holiday per year

Pension contribution up to 7%

Private medical insurance

Job summary

S-RM is seeking a Senior Cloud Incident Response Consultant in London to lead client-facing investigations across AWS, Azure and GCP. You will guide incident response engagements, analyze cloud identities, logs and telemetry, and coordinate remediation with cross-functional teams.

The role requires deep cloud expertise, strong communication, and the ability to operate in high-pressure situations. Flexible and hybrid working options are available in the UK.

Qualifications

• 5+ years' experience in a technical cloud security, cloud engineering, DevSecOps, platform engineering or security operations role, with hands-on experience of at least one major cloud platform.
• Direct experience in a consulting or in-house incident response team is beneficial, but not essential.
• Hands-on experience with AWS, Azure or GCP, including identity and access management, logging and audit trails, and cloud-native security tooling.
• Experience with CI/CD platforms and Infrastructure-as-Code.

Responsibilities

• Leading technical incident response engagements from first contact through to closure.
• Acting as the primary technical resource on response cases, guiding colleagues on the project team.
• Leading cloud-based investigations across AWS, Azure and GCP, including compromised cloud identities, access keys, APIs and control planes.
• Cloud log, audit trail and telemetry analysis (CloudTrail, Entra ID, Azure Activity Logs, GCP Cloud Audit Logs).
• Overseeing host- and network-based investigations, containment, and remediation support.

Skills

Cloud security

Incident response

Cloud providers

Automation scripting

Communication

Tools

AWS

Azure

GCP

GitHub Actions

Terraform

Kubernetes

Job description

S-RM is seeking a Senior Cloud Incident Response Consultant in London to lead client-facing investigations across AWS, Azure and GCP. You will guide incident response engagements, analyze cloud identities, logs and telemetry, and coordinate remediation with cross-functional teams.

The role requires deep cloud expertise, strong communication, and the ability to operate in high-pressure situations. Flexible and hybrid working options are available in the UK.