1 to 25 of 68 Incident Response Jobs in the East of England

Incident Response, Senior Management £110 – 130,000 + Benefits + Bonus North London (x4 days a month in office) Snr Manager, Incident Response - Lead a global cybersecurity incident response team, managing major cyber incidents and developing response capabilities. Requires demonstrable experience progressing from … hands-on technical response to leadership, leading teams through complex investigations, and a solid grasp of incident response processes and tools. This is a Manager role... a Manager of IR technical teams, strategic mindset and responsibilities and requires solid gravitas to take incident command/command ...

life and work. Innovate with intention Build mission-ready tech that protects the nation. Are you looking for an opportunity to lead complex cyber incident investigations, provide senior technical direction during high-severity events, and help strengthen an enterprise cyber defense capability? Cyber threats continue to evolve in speed … sophistication, and effective response requires experienced practitioners who can combine deep technical investigation skills with calm operational leadership and clear communication. We are looking for a senior Tier 3 Incident Response Analyst who can lead investigations from escalation through resolution or handover, operate effectively under time pressure ...

Tier 3 SOC Analyst, Senior The Opportunity: Are you looking for an opportunity to lead complex cyber incident investigations, provide senior technical direction during high-severity events, and help strengthen an enterprise cyber defense capability? Cyber threats continue to evolve in speed and sophistication, and effective response requires … experienced practitioners who can combine deep technical investigation skills with calm operational leadership and clear communication. We are looking for a senior Tier 3 Incident Response Analyst who can lead investigations from escalation through resolution or handover, operate effectively under time pressure, and work across SOC, incident ...

Security Operations Lead – Threat Detection & Response Submit your CV and any additional required information after you have read this description by clicking on the application button. London | Hybrid | Up to £80k + excellent benefits I'm working with a leading London university to appoint a Security Operations Lead … lead its Threat Detection & Response (TDR) function within the wider Security Operations team. This is a senior cyber security leadership role with responsibility for continuous monitoring, alert triage, security investigations and incident response , alongside leading a team of security specialists and junior staff. You'll also play ...

transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing … delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents ...

continuous improvement of the Bango Platform end-to-end — from the infrastructure and pipelines that build and deploy it, to the observability and incident response that keep it running to agreed service levels. You combine three things that have historically sat in separate teams: platform and cloud infrastructure … engineering, automation and delivery pipeline ownership, and proactive/reactive reliability engineering including incident response and customer impact management. You design, build and operate the automation, observability and platform capabilities that other engineering teams rely on, and you are equally comfortable diagnosing a live incident ...

robust Information Security Management System (ISMS) aligned to ISO/IEC 27001. You will act as the central authority for information security governance, incident management and continuous improvement across the organisation. What You'll Be Doing Governance & Compliance: Implement and enforce client ISMP requirements across GSA, including security assurance … core IT controls, including identity and access management, MFA, endpoint protection, logging, monitoring and baseline security configuration across office and operational locations. SOC Integration & Incident Management: Oversee security monitoring, log availability, alerting and incident response processes, ensuring effective integration with the client SOC and any managed security ...

McGregor Boyall is seeking a Senior Manager of Cybersecurity Incident Response to lead a global incident response team across the US, UK and India. The role involves acting as a senior technical and operational leader for major cyber incidents and coordinating with stakeholders and partners. … ideal candidate has progression from hands-on response to leadership, with strong incident command, communications, and strategic capabilities, in a dynamic enterprise environment. #J-18808-Ljbffr ...

busy Security Operations Centre while remaining hands-on with technical investigations. You will act as the senior escalation point during your shift, leading incident response, mentoring analysts and ensuring high standards across investigations. You will also: Lead Major Incident investigations and technical response activities Analyse advanced … Lead Strong experience leading complex cyber security investigations Commercial experience with Microsoft Sentinel and Splunk Enterprise Security Excellent understanding of MITRE ATT and CK, incident response and threat-informed defence Strong networking knowledge including TCP/IP, DNS, HTTP/S, SMTP, LDAP and VPN technologies Experience analysing ...

capabilities for critical services. You Have: 8+ years of experience leading or advising on enterprise technology, resilience, cybersecurity, infrastructure, disa ster recovery, business continuity, incident response, or crisis management disciplines for large, complex European or global organizations Experience with advising executive stakeholders and leading senior-level advising … capabilities, and develop ing practical improvement roadmaps that help clients harden infrastructure, improve alignment to NIST CSF categories, strengthen recovery and continuity strategies, test response capabilities, and mature program governance over time Experience in a consult ing or corporate advisory role, including with a top-tier consulting company ...

Booz Allen Hamilton is seeking a Senior Tier 3 SOC Analyst to lead advanced cyber incident investigations and provide senior technical direction during high-severity events. You will coordinate across SOC, incident response, infrastructure, identity, legal, and business teams, while hands-on with forensic analysis and ongoing … enhancements to playbooks and detection. You will mentor junior analysts, drive improvements in incident response operations, and ensure clear communication with #J-18808-Ljbffr ...

monitoring networking infrastructure (latency, packet loss, device health, anomaly detection) Experience with capacity planning, demand forecasting, and redundancy/failover design Strong background in incident response practices and building automation around them Experience defining SLIs/SLOs and error‐budget‐based alerting Solid software engineering skills, writing maintainable … upskill the wider DevOps team on reliability and observability practices, working alongside the senior DevOps engineer Identify and automate away manual toil, including incident response workflows, compliance evidence collection and release processes Drive resiliency improvements across the infrastructure estate - redundancy, failover and capacity planning Lead on incident ...

Bango Platform. You hold everything expected of a Site Reliability Engineer — owning reliability end-to-end across the infrastructure, delivery pipelines, observability and incident response that keep the platform running to agreed service levels — but at greater scope, complexity and influence, and you take responsibility for lifting … that have historically sat in separate teams: platform and cloud infrastructure engineering, automation and delivery pipeline ownership, and proactive/reactive reliability engineering including incident response and customer impact management. What sets the senior role apart is not simply doing this work to a higher standard, but becoming ...

will contribute to the evaluation and implementation of solutions that drive resilience and risk reduction across the business.In the event of a disruption or incident, you will support the coordination of response activities, assist with root cause analysis, and help prepare communications for internal stakeholders and key customers. … This includes contributing to incident reports and supporting the presentation of findings and remediation plans.As a Business Continuity and Risk Analyst, you will build effective working relationships across Bango teams, helping to keep colleagues informed of policy and process changes and supporting them in identifying, managing, and escalating functional ...

with experience developing assurance artefacts such as SyOPs, RMADs, Security Impact Assessments, risk assessments, and accreditation evidence. Experience leading assurance initiatives, audits, control assessments, incident response activity, and vulnerability management using tools such as Nessus, Trivy, Tenable, or similar platforms. Ability to brief and influence senior stakeholders, mentor … Security Impact Assessments, Security Management Plans, risk assessments, and governance documentation. Drive maturity of assurance processes, tooling, reporting, and governance across multiple programmes. Lead incident response capability development, including response plans, playbooks, testing, exercising, and Tabletop Exercises (TTXs). Manage vulnerability, risk, audit, control assessment, and compliance ...

Demonstrable experience as a SOC Analyst Strong hands-on experience with SIEM, including Microsoft Sentinel Experience monitoring, triaging, and investigating security incidents Knowledge of incident response lifecycle and root cause analysis Experience with Microsoft Defender (essential) KQL knowledge desirable Ability to work independently and manage complex cyber investigations … Technical Exposure: IBM QRadar Microsoft Defender/EDRMicrosoft Sentinel (essential) Microsoft Entra ID/Azure AD Email threat response Incident Experience: Phishing & Business Email Compromise Malware & Ransomware Account Compromise Privilege Escalation Insider Threats DLP & Data Exfiltration Alerts Suspicious Authentication Activity Knowledge of: MITRE ATT&CK, Cyber Kill Chain ...

Booz Allen Hamilton seeks a Senior Tier 3 Incident Response Analyst to lead complex investigations, provide senior technical direction, and strengthen enterprise cyber defense. You will stay hands-on with DFIR while coordinating case management, evidence handling, and stakeholder communications. Mentor junior analysts and help drive playbooks … detections improvements. The role emphasizes timely incident containment, eradication, recovery actions, and collaboration across SOC, infrastructure, #J-18808-Ljbffr ...

investigating and responding to threats while strengthening the controls that protect our systems, networks and data. Your responsibilities will span security monitoring, risk review, incident response and liaison with local and national partners. You will also contribute to the wider ICT service, including Microsoft 365 administration, infrastructure updates … Security Analyst - Key Responsibilities: - Monitor security systems, identify and investigate cyber threats, and respond to incidents while maintaining clear documentation and up-to-date incident response procedures - Design, implement, maintain and monitor security measures across systems and networks, including firewalls, intrusion detection, anti-virus, authentication, log management ...

effective. You will help design, implement, maintain and monitor security measures across our systems and networks. You will also keep cyber security documentation and incident response procedures up to date, support regular testing and help deliver practical cyber security awareness and training for employees and Councillors. Alongside your … service to all service users, including employees, members and other customers. To ensure all members of the ICT team are aware of the Cyber Incident response and escalation process and support the Technical Delivery Manager to regularly test and review these processes. To keep abreast of emerging threats ...

ways: Provide leadership and oversight of data center operations across EMEA, ensuring safe, secure, and compliant execution in a 24x7 mission-critical environment. Lead incident response, change execution, and escalation coordination across infrastructure, network, facilities, and security teams. Oversee vendor access, onsite activities, and service delivery to maintain … ways: Provide leadership and oversight of data center operations across EMEA, ensuring safe, secure, and compliant execution in a 24x7 mission-critical environment. Lead incident response, change execution, and escalation coordination across infrastructure, network, facilities, and security teams. Oversee vendor access, onsite activities, and service delivery to maintain ...

replace legacy software ware and hardware. The map is constantly being updated with changes to technology and approaches to security. Participate in cyber incident response, governance reporting, penetration testing, control of the Risk Register and awareness training to uphold safety and compliance standards. Collaborate with Automation engineers … proactive mindset. Familiarity with: Networks, protocols, security and server virtualisation. Threats, vulnerabilities, impacts and mitigations in ICS systems and the enterprise environment. Cyber incident response, management, escalation, investigation & 3rd party involvement. Computer architecture, digital logic, machine level representation of data Management of cyber security risk, tools and techniques. ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

operation and continuous improvement of EMBL-EBIs cybersecurity capabilities. Working alongside infrastructure, platform and service teams, you will be responsible for vulnerability management, incident response, security monitoring, operational security processes and the implementation of technical security controls. This is a hands-on technical role focused on protecting EMBL … Tenable, Qualys or Rapid7. Familiarity with SIEM and security automation platforms such as Microsoft Sentinel, Splunk or Elastic. Experience implementing endpoint detection and response (EDR/XDR) technologies. Understanding of Identity Governance and Privileged Access Management. Knowledge of cyber security frameworks and implementing and maintaining effective security controls. Experience ...

business continuity readiness. Define and maintain monitoring, observability, alerting, dashboards and operational metrics, including SLIs, SLOs, reliability targets and operational health indicators. Lead incident response, root-cause analysis and post-incident improvements, implement centralised logging, tracing and telemetry, and improve system availability, scalability, performance and resilience. Required … Kubernetes. Databricks ecosystem, Kafka and pipeline operations. Linux administration and scripting. Monitoring and observability platforms such as CloudWatch, Datadog, Grafana, Prometheus, ELK or OpenTelemetry. Incident management and operational support. Security, networking and infrastructure best practices. A hands-on platform engineering profile combining AWS administration, DevOps automation, Site Reliability Engineering ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...