18 of 18 Incident Response Jobs in Cardiff

growing Security Operations function, with a strong focus on Microsoft Defender XDR and Microsoft Sentinel. The role covers security engineering, detection development, vulnerability management, incident response, and Microsoft 365 security, with direct client exposure. This is a primarily remote position with occasional attendance at the London or Cardiff … associated risks. Produce structured security reports and recommendations. Present technical findings to clients and stakeholders. Support client remediation and security improvement activities. Handle escalated Incident Response investigations. Support advanced security investigations from the triage team. Develop and improve Incident Response playbooks. Automate processes using Azure Logic ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

Defining, implementing, and maintaining corporate security policies, standards, and procedures to ensure compliance with industry regulations, legal requirements (e.g., GDPR, HIPAA), and best practices. Incident Response and Management: Playing a key role in developing incident response plans and coordinating efforts to detect, analyse, and respond ...

organisational data and services Providing expert advice on secure environments, configuration management and infrastructure hardening Supporting identity and access management, vulnerability management, monitoring and incident response activities Maintaining resilient and highly available services in line with departmental policies and security standards Driving continuous improvement and automation to enhance … design Experience with infrastructure hardening, configuration management and vulnerability management Knowledge of identity and access management principles and security best practice Understanding of monitoring, incident response and operational risk management Ability to identify opportunities for automation and continuous service improvement Excellent communication skills, with the ability to provide ...

maintain secure, resilient infrastructure and platform services Champion security best practices across infrastructure design, configuration, and operations Support infrastructure hardening, vulnerability management, monitoring, and incident response activities Implement and maintain Infrastructure as Code solutions Collaborate with engineering, architecture, and security teams to improve platform reliability and security posture … working within complex enterprise environments Strong stakeholder engagement and problem-solving skills Desirable Experience Experience working within government or highly regulated environments Exposure to incident management and operational support activities Understanding of compliance-driven infrastructure delivery ...

designs and platform initiatives. Delivery & Problem-Solving Take ownership of well-scoped platform tasks, upgrades and new capabilities from development through to delivery. Support incident response, troubleshooting, and root-cause analysis, escalating more complex issues when appropriate. Participate in technical and design discussions, contributing ideas and practical solutions. ...

facilitate seamless product feature releases, adhering to established TechOps peer‐review processes. Monitor application-level health within the cluster, collaborating with TechOps on incident response and driving post‐mortems for engineering‐led deployments. Maintain clear documentation, deployment runbooks, and developer self‐service guides to streamline the engineering onboarding ...

facilitate seamless product feature releases, adhering to established TechOps peer-review processes. Monitor application-level health within the cluster, collaborating with TechOps on incident response and driving post-mortems for engineering-led deployments. Maintain clear documentation, deployment runbooks, and developer self-service guides to streamline the engineering onboarding ...

hosted workloads Demonstrable experience having worked on AWS builds (standing up new infrastructure, IaC, migrations) as well as ongoing operational/support work (troubleshooting, incident response, day-to-day maintenance) Solid working knowledge of observability: metrics, logs, traces, and how to design or tune alerting and dashboards Comfortable ...

Microsoft Sentinel Managing phishing simulation campaigns and supporting vulnerability scanning Reviewing client environments and identifying opportunities to improve their Microsoft 365 security posture Supporting incident response activities and security investigations Producing clear technical reports, recommendations and documentation Working with senior engineers to triage and escalate more complex technical ...

with teams across the organisation to provide expert advice on secure environments, configuration management, identity and access management, infrastructure hardening, vulnerability management, monitoring and incident response. You will help ensure that critical services remain secure, available and resilient against evolving cyber threats. Skills and Qualifications: Demonstrable experience ...

security capabilities across Microsoft Sentinel and Defender XDR, working directly with clients to strengthen their environments. This is a hands-on engineering position, with incident response involvement focused on escalations rather than routine alert monitoring. The role Build, deploy and tune Sentinel detection rules using KQL. Configure … optimise Microsoft Defender XDR and wider Microsoft 365 security controls. Develop automation and response playbooks using Azure Logic Apps. Run vulnerability scans and phishing simulations, translating findings into practical recommendations. Contribute to development and deployment processes using DevOps and CI/CD. Share knowledge with colleagues and participate ...

that systems remain aligned with internal security policies and regulatory expectations. Alongside supplier management, you’ll oversee core systems and user access management, support incident response activities and maintain business continuity and disaster recovery readiness. The role will also involve supporting internal audits, regulatory reviews and technology governance ...

Operational readiness for new releases Safe production access and change coordination Production is a high-discipline environment. You make sure it stays that way. Incident Management You own the full lifecycle: High‐signal alerting and fast detection Structured incident response Clear internal and customer communication Blameless postmortems … Escalations are fast and predictable. Monitoring & Reliability Define SLIs/SLOs for critical systems Improve visibility across availability, latency, errors, and saturation Track MTTR, incident frequency, and escalation trends Drive reliability roadmap initiatives We measure reliability, and improve it continuously. Team Leadership Lead and grow the Operations team ...

work setup with occasional London or Cardiff office visits. You will design and optimise security controls, develop detections, manage vulnerability assessments, and contribute to incident response. #J-18808-Ljbffr ...

security architectures for ICT capabilities on UK Defence projects. You will translate business needs into security requirements and lead threat analysis, vulnerability management, and incident response planning. Work involves evaluating security technologies, aligning architecture with client strategy, and producing clear technical documentation for diverse audiences. #J-18808-Ljbffr ...

maintenance of physical and virtual infrastructure, ensuring it meets performance and security standards. You will coordinate with support teams, service owners and suppliers, guiding incident response, change and service transition, and aiding continual service improvement using monitoring data #J-18808-Ljbffr ...

support critical operations, with emphasis on security by design and compliance. You will build, administer and harden infrastructure, manage identity and access, monitoring and incident response, and drive automation to improve availability and security across services. #J-18808-Ljbffr ...