176 to 200 of 1,466 Incident Response Jobs in England

Starling SOC team, you will be working with the industries brightest SecOps professionals to protect Starling customers, assets, and systems using the latest technologies. Incident Triage, Response, and Investigations based on Alerts received from multiple sources which include: Cloud Infrastructure/Security. Endpoint Detection and Response. Perimeter detection … tooling. Investigating and responding to security alerts raised by Users. Enhancing and creating analytic triggers to enhance alert efficacy. Continuous development of incident handling and readiness processes. Proactive threat hunting based on threat intelligence. Documentation of incidents and investigations. About your Skills We’re open-minded when it comes ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

hands-on role in ensuring it is reliable, scalable, and observable. You will help establish and mature SRE practices, focusing on: Monitoring and observability Incident response Post-incident review Reliability testing and capacity planning Toil reduction Enabling development velocity We offer a hybrid working arrangement with … Milton Keynes office. Key Responsibilities: Support teams using ConnellsX and respond to incidents in a structured, blameless way Investigate root causes and drive post-incident actions to completion Define SLIs, contribute to SLOs, and monitor error budgets Build dashboards, alerts, and runbooks to improve visibility Automate repetitive tasks ...

. Focus on automation and orchestration (SOAR) to reduce manual overhead and ensure security controls are consistently enforced across a global, multi-cloud environment; Incident Response Leadership: Lead the technical response to high-priority security incidents. Drive the containment, eradication, and recovery phases, while coordinating communication between … technical teams and senior stakeholders. Conduct deep-dive root cause analyses and develop long-term engineering roadmaps to prevent incident recurrence; Compliance & Security Assurance: Lead internal security audits and maturity assessments. Ensure systems align with international standards (e.g., ISO 27001) and regulatory requirements. Define the technical standards that validate ...

conversation around what flexibility could look like for you. The roles main functional responsibilities include: Management of a small team of technical specialists delivering Incident, Threat, Vulnerability and Incident management. Ensure Operational Security capabilities such as Security Operations Centre (SOC), Security Incident Response Team (SIRT), Security … externally sourced services. Implement (and maintain) clear UK owned processes and procedures as required for all aspects of Operational Security Through team, lead the response to UK impacting security incidents and personal data breaches, problem solve and co-ordinate across relevant teams to drive a rapid return ...

conversation around what flexibility could look like for you. The roles main functional responsibilities include: Management of a small team of technical specialists delivering Incident, Threat, Vulnerability and Incident management. Ensure Operational Security capabilities such as Security Operations Centre (SOC), Security Incident Response Team (SIRT), Security … externally sourced services. Implement (and maintain) clear UK owned processes and procedures as required for all aspects of Operational Security Through team, lead the response to UK impacting security incidents and personal data breaches, problem solve and co-ordinate across relevant teams to drive a rapid return ...

keen to learn and develop their skills. The Vacancy: Your duties will include monitoring networks, hosts and endpoints for malicious activity using Security Incident and Event Management (SIEM) tools, Endpoint Detection and Response (EDR) tools, Antivirus and Malware detection tools and email security systems. You will also help … security tooling will be under your remit. Understanding of common security ‘controls’ in order that guidance can be proffered in the event that an incident or event would require intervention. Ideally you will have some of the following qualifications and/or experience CompTIA Network+, Security+ or CASP, & CYSA ...

global financial system is a foundational priority, and the Cybersecurity Operations organization is central to that mission. Within it, the Detection and Response team serves as the front line of the firm's cyber defense, operating a global "follow-the-sun" model that delivers 24/7 monitoring, detection … response across regions. The London SOC is a critical hub anchoring coverage across EMEA, working seamlessly with partner centers worldwide to ensure continuous, uninterrupted protection. Role Overview This is a hands-on detection and response role at the core of the firm's cyber defense operations. The analyst ...

that address security requirements, helping enterprise organizations strengthen vulnerability management, speed up remediation and build greater cyber resilience. Responsibilities Implement and configure ServiceNow Vulnerability Response and Security Incident Response, including VR groups, remediation rulesets and risk scoring informed by CMDB data. Connect vulnerability scanners, such as Tenable … delivery priorities on track. Create clear high-level designs, technical documentation and user acceptance testing summaries. Skillset Extensive hands-on experience with ServiceNow Vulnerability Response and/or Security Incident Response, alongside familiarity with Unified Security Exposure Management (USEM). ServiceNow CSA, CIS-VR, an equivalent USEM ...

Incident Management Analyst Contract: 12 months Location: Chester Working Pattern Training Phase - First 2 Months Monday to Friday 7:00am - 4:00pm UK time Operational Shift Pattern Once fully operational, the role will operate on a rotating shift pattern: Shift A: Sunday to Thursday, 7:00am - 4:00pm Shift … Tuesday to Saturday, 7:00am - 4:00pm Role Overview We are seeking an experienced Incident Management Analyst to join a complex enterprise environment within the Financial Services sector. The successful candidate will be responsible for the end-to-end management of enterprise incidents, with a particular focus on major ...

operating culture focused on ownership, automation, reliability and continuous improvement. Remain highly hands-on, working directly with engineers on production issues, Kubernetes troubleshooting, incident response, deployment automation, observability, capacity management and service resilience. Drive the evolution of SaaS engineering towards a more automated model, reducing manual intervention, operational … through better tooling, workflow automation and self-healing capabilities. Explore and adopt appropriate Agentic AI and intelligent automation capabilities to improve operational decision support, incident triage, runbook execution, knowledge retrieval, change preparation and service management workflows. Own SaaS operational standards, including runbooks, monitoring, alerting, incident management, post-incident ...

strengthen our security posture. You will support the implementation of Zero Trust security principles across the organisation. You will enhance threat prevention, detection, and response capabilities through security engineering best practices. Cloud Security You will design and implement security controls within Microsoft Azure and hybrid cloud environments. You will … Operations & Threat Detection You will engineer and maintain SIEM, SOAR, and security monitoring platforms. You will develop and optimise security alerts, detections, and automated response processes. You will collaborate with internal teams and SOC providers to improve threat detection and incident response capabilities. You will support security ...

assigned cybersecurity advisory engagements for policyholders, working independently where appropriate and collaborating with the wider team on more complex engagements. Design and facilitate cyber incident tabletop exercises, helping clients evaluate their response capabilities, identify weaknesses and improve their preparedness. Deliver security awareness training, cyber risk briefings, workshops … record of independently delivering external stakeholder-facing work. Strong understanding of cybersecurity fundamentals, including identity and access management, endpoint and network security, vulnerability management, incident response, backup and recovery, and business resilience. Good understanding of common cyberattack methods, how threats can affect organisations and the security controls that ...

Technical Incident Commander Department: 61-458 - Technology - Live Operations Employment Type: Permanent - Full Time Location: UK - Leeds Reporting To: Adam De Silva Description Why Join DAZN? DAZN is one of the world’s leading sports streaming platforms, delivering live and on-demand content to millions of fans across … globe. In an always-on environment, service continuity is critical. As a Technical Incident Manager, you’ll be at the forefront of restoring services when issues arise, owning the process of critical incident response across our global tech infrastructure. This is your opportunity to directly influence ...

Technical Incident Commander Department: 61-458 - Technology - Live Operations Employment Type: Permanent - Full Time Location: UK - Leeds Reporting To: Adam De Silva Description Why Join DAZN? DAZN is one of the world’s leading sports streaming platforms, delivering live and on-demand content to millions of fans across … globe. In an always-on environment, service continuity is critical. As a Technical Incident Manager, you’ll be at the forefront of restoring services when issues arise, owning the process of critical incident response across our global tech infrastructure. This is your opportunity to directly influence ...

Incident Response Specialist Working Hours: Wednesday to Saturday, 08:00 to 17:45 (UK Time) Rate: £500 - £600 per day inside IR35 - 12 month contract Remote - 2 days per month in the London office About the Role We are seeking an experienced Incident Response Specialist ...

human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies - including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection … response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with the visibility and scalability needed to stay ahead of evolving threats. Sophos goes to market with a global partner ecosystem, including Managed Service Providers (MSPs), Managed Security ...

Cyber Essentials , and Cyber Essentials Plus certifications. Produce security metrics , dashboards , and security reports to inform security strategy . Lead and coordinate security incident response and post-incident improvements . Conduct third-party security assessments and manage vendor security assurance . Requirements 4+ years' experience … skills across complex IT environments. Proactive approach to security , with a focus on continuous improvement and best practice . Experience leading or supporting security incident response and remediation . Strong reporting , analysis , and security metrics capabilities. Excellent communication , stakeholder engagement , and documentation skills. Benefits Excellent salary Pension Private ...

cyber controls for the Y TREE business. This is a hands-on role with a wide range of responsibilities including monitoring, detection, response and remediation of security risks, threats and vulnerabilities. The ultimate goal is to holistically improve Y TREE’s security posture to meet the demands … hands-on Security Analyst, closely interacting with multiple technology disciplines to collectively improve the security posture of Y TREE’s technologies. SOC Collaboration & Incident Response: Collaborate with an externally-managed SOC; act as the escalation point for Y TREE, triage and prioritise issues, manage the issue lifecycle ...

Site Reliability Engineering, cloud operations, and modern software delivery practices with a passion for building high‐performing engineering teams. You will lead reliability strategies, incident management, automation initiatives, and continuous improvement efforts, while partnering closely with product, engineering, and business stakeholders to align technology outcomes with organisational objectives. This … World Check verify Applications. Define and implement SLOs, SLIs, and error budgets; maintain reliability scorecards and drive improvements through engineering backlogs. Act as Major Incident Commander during critical outages; lead blameless post‐incident reviews and ensure learnings are institutionalized. Drive automation‐first mindset across incident response ...

platform security and intelligent automation. You will operate the AI security control plane, harden agentic systems across their lifecycle, and establish monitoring and response that makes agent behavior observable, safe and auditable. You will be empowered to take ownership from day one—designing secure patterns, building production-grade automations … decisions, outputs, errors and outcomes; integrate with SIEM, SOAR, EDR/XDR, cloud, identity, data protection, application security and case-management platforms. Detection and Response: Design, tune and operationalize detections for AI-specific threats and control failures; lead or support triage, containment, eradication, recovery and post-incident improvement ...

/CD controls. Oversee vulnerability management, ensuring risks are identified, prioritised, owned and remediated in line with agreed service levels. Support and test incident-response processes, coordinating technical response when required and ensuring lessons learned lead to measurable improvements. Work with teams on security assessments, threat modelling … penetration testing and control reviews, turning findings into practical remediation plans. Increase automation across security operations to improve coverage, consistency and response times. Who you are Proven experience leading security engineering, platform engineering, cloud-security or application-security teams. A strong record of delivering complex security or technology programmes ...