14 of 14 Incident Response Jobs in Cardiff

growing Security Operations function, with a strong focus on Microsoft Defender XDR and Microsoft Sentinel. The role covers security engineering, detection development, vulnerability management, incident response, and Microsoft 365 security, with direct client exposure. This is a primarily remote position with occasional attendance at the London or Cardiff … associated risks. Produce structured security reports and recommendations. Present technical findings to clients and stakeholders. Support client remediation and security improvement activities. Handle escalated Incident Response investigations. Support advanced security investigations from the triage team. Develop and improve Incident Response playbooks. Automate processes using Azure Logic ...

secrets management and infrastructure provisioning. Service Reliability: Define and implement SLIs, SLOs, and SLAs to ensure the stability and performance of critical services. Observability & Incident Management: Oversee the full monitoring stack and establish formal incident response and post-mortem processes. Security & Compliance: Enforce "security by design … problem-solving. Skills: Platform Engineering: Building developer-centric tools to increase engineering velocity. Cloud Governance: Managing multi-provider cloud footprints and resource optimisation. Incident Response: Leading high-pressure incident resolution and system recovery. Mentorship: Coaching senior engineers and developing future technical leaders. Process Design: Crafting standardised, scalable ...

Defining, implementing, and maintaining corporate security policies, standards, and procedures to ensure compliance with industry regulations, legal requirements (e.g., GDPR, HIPAA), and best practices. Incident Response and Management: Playing a key role in developing incident response plans and coordinating efforts to detect, analyse, and respond ...

hosted workloads Demonstrable experience having worked on AWS builds (standing up new infrastructure, IaC, migrations) as well as ongoing operational/support work (troubleshooting, incident response, day-to-day maintenance) Solid working knowledge of observability: metrics, logs, traces, and how to design or tune alerting and dashboards Comfortable ...

facilitate seamless product feature releases, adhering to established TechOps peer‐review processes. Monitor application-level health within the cluster, collaborating with TechOps on incident response and driving post‐mortems for engineering‐led deployments. Maintain clear documentation, deployment runbooks, and developer self‐service guides to streamline the engineering onboarding ...

facilitate seamless product feature releases, adhering to established TechOps peer-review processes. Monitor application-level health within the cluster, collaborating with TechOps on incident response and driving post-mortems for engineering-led deployments. Maintain clear documentation, deployment runbooks, and developer self-service guides to streamline the engineering onboarding ...

maintain secure infrastructure and platforms Drive automation, resilience and continuous improvement Support infrastructure hardening, vulnerability management and monitoring Work across IAM, configuration management and incident response Provide technical expertise on secure and compliant environments Essential Skills Linux AWS Terraform Docker Bash Python Strong security and infrastructure principles ...

with teams across the organisation to provide expert advice on secure environments, configuration management, identity and access management, infrastructure hardening, vulnerability management, monitoring, and incident response You will help ensure that critical services remain secure, available, and resilient against evolving cyber threats Linux/Terraform/Docker/ ...

security capabilities across Microsoft Sentinel and Defender XDR, working directly with clients to strengthen their environments. This is a hands-on engineering position, with incident response involvement focused on escalations rather than routine alert monitoring. The role Build, deploy and tune Sentinel detection rules using KQL. Configure … optimise Microsoft Defender XDR and wider Microsoft 365 security controls. Develop automation and response playbooks using Azure Logic Apps. Run vulnerability scans and phishing simulations, translating findings into practical recommendations. Contribute to development and deployment processes using DevOps and CI/CD. Share knowledge with colleagues and participate ...

Operational readiness for new releases Safe production access and change coordination Production is a high-discipline environment. You make sure it stays that way. Incident Management You own the full lifecycle: High‐signal alerting and fast detection Structured incident response Clear internal and customer communication Blameless postmortems … Escalations are fast and predictable. Monitoring & Reliability Define SLIs/SLOs for critical systems Improve visibility across availability, latency, errors, and saturation Track MTTR, incident frequency, and escalation trends Drive reliability roadmap initiatives We measure reliability, and improve it continuously. Team Leadership Lead and grow the Operations team ...

Network Rail in the United Kingdom is recruiting a Controller 4 to join our operations control teams. You will support incident management, coordinate fault responses and help safeguard railway services. The role requires knowledge of signalling, fault management and the NRN system, with strong teamwork and the ability ...

work setup with occasional London or Cardiff office visits. You will design and optimise security controls, develop detections, manage vulnerability assessments, and contribute to incident response. #J-18808-Ljbffr ...

security architectures for ICT capabilities on UK Defence projects. You will translate business needs into security requirements and lead threat analysis, vulnerability management, and incident response planning. Work involves evaluating security technologies, aligning architecture with client strategy, and producing clear technical documentation for diverse audiences. #J-18808-Ljbffr ...

maintenance of physical and virtual infrastructure, ensuring it meets performance and security standards. You will coordinate with support teams, service owners and suppliers, guiding incident response, change and service transition, and aiding continual service improvement using monitoring data #J-18808-Ljbffr ...