151 to 175 of 1,467 Incident Response Jobs in England

seeking a Cyber Security Analyst to safeguard IT systems, monitor threats, and ensure regulatory compliance. You will work with threat management, SIEM tools, and incident response to protect our infrastructure. Join a team that collaborates with IT, conducts risk assessments, implements access controls, and develops incident response ...

drive automation efforts to reduce operational toil, and help build resilient systems that deliver exceptional customer experiences. You will leverage your expertise in observability, incident response, and distributed systems to proactively identify and resolve reliability challenges. Working closely with engineering teams, you will design and implement solutions that … hands-on experience of DevOps practices including monitoring, virtual networks, cloud storage, containers and orchestration, CI/CD, configuration management, and securing cloud applications.**Incident Management** * Has the ability to create and/or present RCAs including the executive summary, timeline, detailed impact statement, follow-on actions, and residual ...

looking for a Cyber Security Manager to take ownership of cyber security across a complex organisation, leading the delivery of operational security, incident response, vulnerability management and cyber resilience initiatives. This is a hands-on leadership role reporting directly to the CIO, offering the opportunity to shape … security operations. What You'll Be Doing Leading and developing the organisation's cyber security function Managing and mentoring a Cyber Security Analyst Owning incident response and cyber security investigations Driving vulnerability management and remediation activities Overseeing security operations, monitoring and threat detection Managing and improving security tooling ...

complex security concepts to technical and non-technical audiences Advising on security architectures, controls and technologies Developing cyber security strategies and implementation roadmaps Supporting incident response and business continuity planning Applying frameworks including NIST, ISO 27001, CIS and CAF Providing specialist advice across complex Defence and Government environments … Security environments Knowledge of security frameworks including NIST, ISO 27001, CIS or CAF Experience within areas such as security architecture, cyber risk, vulnerability management, incident response, security monitoring or threat intelligence Strong stakeholder management and client-facing communication skills Understanding of network security, encryption, authentication and access controls ...

help drive the next phase of security maturity. This is a fantastic opportunity for someone who enjoys a broad role combining security operations, governance, incident response, vulnerability management and stakeholder engagement, while leading a small but growing cyber function. What You'll Be Doing Leading the organisation … cyber security programme Managing and mentoring a Cyber Security Analyst Overseeing security operations, monitoring and incident response Driving vulnerability management and security improvements Managing and optimising security tooling including Microsoft Defender, Endpoint Security, Mimecast and Darktrace Working closely with senior stakeholders to improve cyber resilience Supporting security awareness ...

capabilities across an enterprise security environment. You will translate cyber threat intelligence, threat modelling outputs, threat hunting findings, red/purple team exercises and incident learnings into high-fidelity detection logic that identifies sophisticated attacker behaviour while minimising false positives. This is a specialist detection engineering position focused … detection rules aligned with MITRE ATT&CK and organisational threat models. Translate threat intelligence, threat hunting insights, red/purple team findings and incident investigations into effective detection use cases. Develop behavioural, risk-based and correlated detections across endpoint, identity, cloud, network, email and application telemetry. Continuously tune ...

capabilities across an enterprise security environment. You will translate cyber threat intelligence, threat modelling outputs, threat hunting findings, red/purple team exercises and incident learnings into high-fidelity detection logic that identifies sophisticated attacker behaviour while minimising false positives. This is a specialist detection engineering position focused … detection rules aligned with MITRE ATT&CK and organisational threat models. Translate threat intelligence, threat hunting insights, red/purple team findings and incident investigations into effective detection use cases. Develop behavioural, risk-based and correlated detections across endpoint, identity, cloud, network, email and application telemetry. Continuously tune ...

strengthen our data. As a member of the Attack Analysis team, you will fit into a Global team providing 24/7 monitoring and Incident Response, acting as the frontline defense for attacks against the firms’ infrastructure. As a SOC Manager, you will serve as the direct manager … metrics to ensure the team is meeting overall alert and case goals as well as identifying opportunities to improve and tune alerts. In an incident response scenario, the SOC Manageris responsible for assigning, coordinating and documenting the outcome of specific analysis workstreams and preparing communications to senior management. ...

Penningtons Manches Cooper LLP is seeking a Security Engineer to protect the organisation’s technology environment through proactive monitoring, incident response, vulnerability management, and IAM governance. The role interfaces with the external SOC and owns disciplines across vulnerability/compliance and IAM. You will monitor SIEM tools, lead … incident response, manage Defender products, and tune detection policies. #J-18808-Ljbffr ...

guidance on DLP strategy and controls where relevant Support and advise across the Microsoft security stack (Purview, Defender, Sentinel) where applicable Contribute to incident response and exposure management activity, drawing on real-world operational experience (Rapid7 exposure welcomed) Act as a mentor and technical escalation point for more … awareness or hands-on experience is a plus Experience with the Microsoft security stack (Purview, Defender, Sentinel) is a strong bonus Experience with Rapid7 (incident response and/or exposure management) is valued Real-world incident response experience, not just platform familiarity A genuine passion ...

Sophos in the United Kingdom is seeking an Incident Response Analyst to investigate, contain, and respond to cyber incidents across Windows, macOS, and Linux, leveraging MDR resources and SophosLabs. You will document analyses and communicate findings to customers. The role requires 3+ years of experience in cyber investigations … knowledge of incident response toolsets, and the ability to work under pressure, including weekends/holidays. Remote-first with some hybrid flexibility is available. #J-18808-Ljbffr ...

stays hands-on. You'll manage a team of Information Security professionals and a group of security vendor partners. You'll drive improvements in incident response, cyber resilience, governance, risk management and security awareness. The role is highly visible, and you'll work closely with senior stakeholders … capability Managing, coaching and developing a team of Information Security professionals Managing security vendor partners and making sure they deliver Owning and improving security incident response, including communications and recovery Leading security investigations and overseeing remediation after incidents or identified risks Driving compliance with security policies, standards ...

Trade Desk. NOC Engineers provide world-class technical support while also acting as true engineers - employing complex troubleshooting, customer connectivity onboarding, real-time monitoring, incident response, change execution, and escalation management for a highly distributed, latency-sensitive global network spanning both physical infrastructure and cloud platforms. A defining … milestones to affected firms. Participate in a rotational on-call schedule to support the global trading environment during non-staffed hours. Real-Time Monitoring & Incident Response - 20% Proactively monitor global customer connectivity, market access paths, and back-end trading infrastructure in real time during trading hours. Analyze network ...

Security Operations Centre (SOC) in Liverpool on a 12-month fixed term contract. You will perform second and third line reviews, analysis, and incident response for security events, supporting external security partners and guiding end users in best practices across the business. The role requires strong experience … security operations, incident response, and detection engineering, with a focus on Azure/365 environments #J-18808-Ljbffr ...

programming language, such as Python, Java, Scala, or NodeJS Experience with any combination of the following: application security frameworks, identity and access controls, incident response, mobile security, cloud computing and security, AI security, threat intelligence, and penetration testing Experience managing competing priorities and using metrics to drive business … discipline, or experience with equivalent introductory technical domain knowledge Preferred Qualifications Experience in any combination of the following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software ...

will connect cybersecurity processes with the teams responsible for investigating and resolving potential data loss events, and ensure that there is coordination across technical, Incident Response, HR, Risk, and Legal teams, bringing clarity to complex cases and helping ensure that issues are handled effectively and appropriately. Lead … operate DLP technologies, ensuring technical capabilities support program requirements. Provide oversight of the DLP alert and escalation process end-to-end, partnering with Incident Response to ensure alerts are triaged effectively and route to the right investigation and escalation paths. Act as the security partner to HR, Legal ...

operations, partners, service levels and governance into a clear global operating model. Strengthen identity, device, access, data protection, security testing, incident response and business continuity controls. Improve integration, adoption and training across core business systems, telephony, call-centre and clinical support platforms. Establish proportionate governance for AI, enterprise … strategy, infrastructure, cloud services, end-user support, device management and service performance. Own cyber security strategy, identity and access management, vulnerability management, penetration testing, incident response and security awareness. Maintain IT policies, procedures, acceptable-use and content controls, and the evidence required for audit or inspection. Lead business ...

Training's government-funded Cyber Security course is your shortcut to breaking into the cyber security industry. Learn the essentials - threat intelligence, security testing, incident response and legislation - in an interactive online format and earn an NCFE-accredited Level 3 Certificate in Cyber Security Practices. Course details Duration … cyber security principles and threat intelligence Identifying malicious software, vulnerabilities and social engineering tactics Applying effective security testing methods and cyber security controls Developing incident response plans for security breaches Understanding legislation, information security standards and ethical practice in cyber security Potential roles Information Security Analyst Incident ...

will be a key part of the Security Operations Centre (SOC). The Security Operations Specialist provides Second and Third Line review, Analysis and Incident Response for Security events and incidents reported to the SOC, responding in line with agreed SLA's. The role directly supports our external … security reports to identify trends and working with teams to develop strategies to drive secure behaviours throughout the business Form part of the Cyber Incident Response team as a technical SME Maintaining and delivery of Phishing campaigns, reporting and remediation management Operational and Security maintenance of Security tooling ...

will be a key part of the Security Operations Centre (SOC). The Security Operations Specialist provides Second and Third Line review, Analysis and Incident Response for Security events and incidents reported to the SOC, responding in line with agreed SLA's. The role directly supports our external … security reports to identify trends and working with teams to develop strategies to drive secure behaviours throughout the business Form part of the Cyber Incident Response team as a technical SME Maintaining and delivery of Phishing campaigns, reporting and remediation management Operational and Security maintenance of Security tooling ...

Define security requirements for endpoint, email, Microsoft 365, data, application and network architectures Establish appropriate requirements for security logging, monitoring, alerting, threat detection and incident response Review technical architecture and solution designs, identifying security weaknesses, control gaps, dependencies and areas requiring further assurance Assess migration strategies and cutover … assurance activities, including validation of security controls before major migrations or go-live decisions Provide security input into operational readiness, ensuring that monitoring, alerting, incident response and support arrangements are in place before services transition into production Align programme designs with organisational security policies, information-security standards, data ...

monitoring networking infrastructure (latency, packet loss, device health, anomaly detection) Experience with capacity planning, demand forecasting, and redundancy/failover design Strong background in incident response practices and building automation around them Experience defining SLIs/SLOs and error‐budget‐based alerting Solid software engineering skills, writing maintainable … upskill the wider DevOps team on reliability and observability practices, working alongside the senior DevOps engineer Identify and automate away manual toil, including incident response workflows, compliance evidence collection and release processes Drive resiliency improvements across the infrastructure estate - redundancy, failover and capacity planning Lead on incident ...

human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection … response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with the visibility and scalability needed to stay ahead of evolving threats. Sophos goes to market with a global partner ecosystem, including Managed Service Providers (MSPs), Managed Security ...

Cleared Major Incident & Problem Manager 6 Months initially 2 Days per week in Reading £Market Rate (Inside IR35) My client, a large defence based organisation are looking for a Major Incident & Problem Manager to take ownership of critical incident response and problem management within a complex … central point of coordination during major service disruptions, leading technical teams, suppliers and business stakeholders to restore services as quickly as possible. Alongside incident management, you will drive structured root-cause investigations, identify recurring issues and ensure lessons learned translate into meaningful service improvements. This role requires a confident ...

Cleared Major Incident & Problem Manager 6 Months initially 2 Days per week in Reading £Market Rate (Inside IR35) My client, a large defence based organisation are looking for a Major Incident & Problem Manager to take ownership of critical incident response and problem management within a complex … central point of coordination during major service disruptions, leading technical teams, suppliers and business stakeholders to restore services as quickly as possible. Alongside incident management, you will drive structured root-cause investigations, identify recurring issues and ensure lessons learned translate into meaningful service improvements. This role requires a confident ...