1 to 25 of 36 Incident Response Jobs in the East of England

working with a large retail business, and they are looking for a Security Engineer to help build and mature their Cyber Security Incident Response capability. This is a strategic and hands-on role, working closely with the Cyber Security Incident Manager, SOC, DFIR, Threat Intelligence and Engineering … organisation's readiness for high-impact cyber incidents such as ransomware, insider threats and major security breaches. Key experience required: CSIRT, SOC or Incident Response experience within a large enterprise environment. Building and improving incident response capabilities, processes, playbooks and runbooks. Supporting tabletop exercises, simulations ...

tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security event reporting, and content maintenance (tuning). What we are looking for Key Responsibilities: Serves as a senior member … optimization of enterprise security platforms, overseeing lifecycle management including break-fix, patching, version upgrades, and integration with broader security ecosystems. Directs complex security incident response efforts across multiple vectorsendpoint protection, EDR, malware analysis, network and computer forensicsensuring rapid containment and root cause analysis. Designs and executes advanced vulnerability ...

matched up to 9%, Hybrid working opportunity, Private Healthcare. Responsibilities Managing checklists and problem management through to handover or resolution. Threat identification and classification. Incident response lead. Report writing. Stakeholder management. Continuous improvement. Junior SOC staff mentoring. Tasks Maintain and monitor effectiveness of security measures and controls. … SIEM and EDR tools. Monitor and configure IDS/IPS. Analyse and create reports for security incidents, root cause, lessons learnt. Create and rehearse Incident Response plans; support audits and red team engagements. Work closely with Cyber Security/IT teams and external support groups. Communicate with individuals ...

network estate (including Cisco Meraki). The role is hands-on and operational, partnering with IT teams to implement security controls, support monitoring and incident response through Sophos MDR, and improve cyber resilience by supporting Disaster Recovery (DR) testing and Business Continuity (BC) readiness. Key Responsibilities Cloud Security … ensure changes follow change control. Enable and review network security logging/alerting (e.g., syslog/SIEM integrations where applicable). Monitoring, Detection & Incident Response (Sophos MDR) Act as the internal technical point of contact for Sophos MDR and ensure smooth collaboration with MDR analysts. Maintain coverage ...

cyber assurance integrates Knowledge of methodologies (Waterfall, Incremental, SAFE, DevOps) Experienced in managing ITHC activities end-to-end, from initial scoping through remediation Incident Response & Awareness Experienced in developing and managing Cyber Incident Response capabilities, including planning, implementation, and continuous improvement Proven experience designing and delivering ...

security infrastructure Monitor and manage security tools including firewalls, SIEM, PAM, IDS, endpoint security, and network access controls Handle cyber security incidents and support incident response and recovery activities Perform root cause analysis and work with problem management teams Plan, test, and implement changes following strict change control … environments) Strong experience in OT/IT security operations and infrastructure Hands-on experience with network security, firewalls, and monitoring tools Experience in incident response and cyber security improvement initiatives Preferred Skills Industrial protocols: DNP3, ICCP, IEC 61850 Standards: NISD, NCSC CAF, ISO 27001/ ...

opportunity for a Senior Cyber Security Analyst (12 month contract) within Marshall.The focus of this technical role is on threat prevention, detection and response for Marshall, including the configuration and monitoring of a security information and event management (SIEM) system, operating next generation antivirus, intrusion detection/prevention systems … Marshall protection and detection capabilities as risks evolve over time.Responsibilities include:Managing set checklistsProblem management through to handover or resolutionThreat identification and classificationIncident response leadReport writingStakeholder managementContinuous improvementJunior SOC staff mentoringTasks:Helping to maintain and monitor the effectiveness of security measures and controlsConduct and help coordinate, routine security event ...

including IAM roles, network security, and compliance monitoring. FinOps & Cost Optimization:Analyze usage and costs to optimize resource allocation, including rightsizing and auto-scaling. Incident Management:Provide expert-level troubleshooting, incident response, and performance monitoring. This is a hybrid position, with the expectation being 3 days ...

required skills) your application to our client in conjunction with this vacancy only. KEY SKILLS: SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk, SIEM, Incident Response, MITRE ATT and CK, Networking, SC Clearance ...

required skills) your application to our client in conjunction with this vacancy only. KEY SKILLS: SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk, SIEM, Incident Response, MITRE ATT and CK, Networking, SC Clearance ...

outset. Own the technical quality and evolution of our cloud infrastructure and delivery pipelines, identifying and addressing systemic risks. Drive improvements to reliability practices, incident response, and post‐incident learning across teams. Provide hands‐on expertise across infrastructure, automation, and CI/CD when needed, particularly ...

audit logging across production systems • Support cloud security, RBAC, managed identities and secure access controls • Monitor system reliability, performance, latency and throughput • Support incident response, root cause analysis and platform improvements • Work with internal and external teams to support scalable global deployments Requirements • Strong hands-on experience with ...

gather requirements, address concerns, and provide updates on projects and system status Contribute to the design, build and operational management of the services Lead incident response, troubleshooting, and root cause analysis to mitigate and prevent future issues Work closely with engineering, support and operations teams to upskill ...

threats from false positives and applying appropriate containment and mitigation. Act as the escalation point for IT Support on security-related issues. Lead cybersecurity incident investigations, including malware analysis and digital forensics, and produce detailed reports and recommendations. Support and participate in incident response activities and exercises … strengthen readiness. Provide out-of-hours support where reasonable, including response to escalations, system downtime, and security incidents. Identify, assess, and remediate vulnerabilities through proactive assessments and scheduled vulnerability scans. Review and maintain vulnerability and risk records, ensuring timely remediation. Perform routine security checks to maintain system integrity ...

play a key role in protecting their systems, infrastructure, and data. This is a hands-on position where you'll lead on threat detection, incident response, and continuous security improvement across the business. What You'll Be Doing Monitoring and analysing security events (SIEM, endpoints, networks) Investigating incidents ...

play a key role in protecting their systems, infrastructure, and data. This is a hands-on position where you'll lead on threat detection, incident response, and continuous security improvement across the business. What You'll Be Doing Monitoring and analysing security events (SIEM, endpoints, networks) Investigating incidents ...

deliver high-quality infrastructure services Develop CI/CD pipelines and Infrastructure as Code (e.g., Terraform) Enhance observability, logging, and operational tooling Lead incident response and root cause investigations Implement fixes to improve stability and prevent recurrence Embed security and compliance into platform design Manage access controls, encryption ...

technical documentation, including implementation guides, design documents, and operational procedures. Provide both remote and onsite support during deployment and post-implementation phases. Participate in incident response activities and root cause analysis investigations. Deliver knowledge transfer sessions and technical workshops to internal IT teams. Required Skills & Experience Certifications Cisco ...

ensure compliance with relevant standards and best practice. Youll play an important role in strengthening our cyber resilience, leading security awareness initiatives, supporting incident response and helping to embed a security-first culture across the business. Through your work, youll help ensure security considerations are integrated into projects ...

ensure compliance with relevant standards and best practice. You’ll play an important role in strengthening our cyber resilience, leading security awareness initiatives, supporting incident response and helping to embed a security-first culture across the business. Through your work, you’ll help ensure security considerations are integrated ...

production environments. You will support deployments through well-designed CI/CD pipelines and automation. You will ensure effective monitoring and be responsible for incident response. You will also manage databases, backups and disaster recovery processes, while collaborating with developers to continuously improve delivery, architecture and operational workflows. What ...

complete minor repairs Keep accurate inventories and security mark equipment Monitor and maintain network security, ensuring safe and appropriate use Assist with cyber incident response and promote cyber safety in line with NCSC/DFE guidelines Ensure compliance with GDPR, RPA, and Copyright Licensing Authority regulations ...

Aerospace Ltd is seeking a Senior Cyber Security Analyst for a 12-month contract role. The successful candidate will manage cyber security operations, lead incident responses, and mentor junior staff. Requires expertise in Windows, Linux, and cyber security protocols. This position offers a competitive salary and a hybrid working ...

your application to our client in conjunction with this vacancy only. KEY SKILLS SOC Shift Lead, Security Operations Centre, Microsoft Sentinel, Splunk, MITRE ATT, Incident Response, DV Cleared ...

your application to our client in conjunction with this vacancy only. KEY SKILLS SOC Shift Lead, Security Operations Centre, Microsoft Sentinel, Splunk, MITRE ATT, Incident Response, DV Cleared ...