201 to 225 of 1,466 Incident Response Jobs in England

Risk and Control Assessment: Identify security risks, vulnerabilities, control gaps and emerging threats within assigned workstreams, supporting proportionate remediation, escalation and risk treatment activity. Incident Response: Support and coordinate response activity for security incidents where assigned, including investigation, evidence gathering, stakeholder updates, reporting and escalation. Compliance … activity, proposing recommendations where necessary. Workstream and Control Support: Support Information Security activity where it relates to assigned workstreams, user and data security controls, incident response, control operation, evidence, reporting, policy compliance, remediation or escalation. Threat Awareness and Continuous Improvement: Maintain awareness of emerging cyber security threats, technology ...

human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies - including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection … response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with the visibility and scalability needed to stay ahead of evolving threats. Sophos goes to market with a global partner ecosystem, including Managed Service Providers (MSPs), Managed Security ...

Bango Platform. You hold everything expected of a Site Reliability Engineer — owning reliability end-to-end across the infrastructure, delivery pipelines, observability and incident response that keep the platform running to agreed service levels — but at greater scope, complexity and influence, and you take responsibility for lifting … that have historically sat in separate teams: platform and cloud infrastructure engineering, automation and delivery pipeline ownership, and proactive/reactive reliability engineering including incident response and customer impact management. What sets the senior role apart is not simply doing this work to a higher standard, but becoming ...

Grafana/Datadog/ELK Azure Monitor CloudWatch Understanding of SRE concepts including: Service Level Indicators (SLIs) and Service Level Objectives (SLOs) Error Budgets Incident Management Root Cause Analysis Blameless Post-mortems Database Reliability Engineering Own and improve the reliability, availability, scalability, and performance of production database services. Design … integration and database deployment modernization. Partner with software engineering teams to improve database reliability and deployment processes. Drive cloud migration and modernization initiatives. Observability & Incident Response Implement monitoring, alerting, dashboards, and operational runbooks. Participate in on-call support and incident response activities. Lead root cause analysis ...

will contribute to the evaluation and implementation of solutions that drive resilience and risk reduction across the business.In the event of a disruption or incident, you will support the coordination of response activities, assist with root cause analysis, and help prepare communications for internal stakeholders and key customers. … This includes contributing to incident reports and supporting the presentation of findings and remediation plans.As a Business Continuity and Risk Analyst, you will build effective working relationships across Bango teams, helping to keep colleagues informed of policy and process changes and supporting them in identifying, managing, and escalating functional ...

with experience developing assurance artefacts such as SyOPs, RMADs, Security Impact Assessments, risk assessments, and accreditation evidence. Experience leading assurance initiatives, audits, control assessments, incident response activity, and vulnerability management using tools such as Nessus, Trivy, Tenable, or similar platforms. Ability to brief and influence senior stakeholders, mentor … Security Impact Assessments, Security Management Plans, risk assessments, and governance documentation. Drive maturity of assurance processes, tooling, reporting, and governance across multiple programmes. Lead incident response capability development, including response plans, playbooks, testing, exercising, and Tabletop Exercises (TTXs). Manage vulnerability, risk, audit, control assessment, and compliance ...

performance and security while helping colleagues grow. Work with Data Engineering colleagues on interfaces, data contracts, data quality and operational failure modes. Contribute to incident response, post-incident learning and continuous improvement of the services you support. Document technical decisions and operational knowledge so the team … wider platform environment. AI-assisted engineering tools such as Claude Code or Codex, used with disciplined review and validation. Agile planning, code review, incident response and collaborative technical documentation. Why you’ll love it here Salary c. £80k Flexible, hybrid working. You'll spend a minimum ...

readiness, and ongoing compliance monitoring. Assist with the identification, assessment, and documentation of security risks. Track remediation actions and follow up with control owners. Incident Response & Problem Support Support security incident response activities, including investigation and evidence gathering. Assist with root cause analysis and documentation … Experience Experience in an information security, IT risk, or IT operations role. Understanding of common cybersecurity risks, threats, and control types. Familiarity with incident management, risk assessment, and assurance activities. Ability to analyse information, identify issues, and document findings clearly. Strong written and verbal communication skills. Ability to manage ...

Manager, Digital Forensics and Incident Response# Manager, Digital Forensics and Incident Response*Aon***London, England**Hybrid · Manager · Full-time### The RoleThis position involves managing and performing forensic investigations into cybersecurity incidents, including network intrusions, malware attacks and data breaches. Responsibilities include evidence preservation, host and network analysis ...

availability standards. Supply Chain Resilience: Assess the security posture of third-party APIs and integrations to prevent data leaks or service disruptions. Operational Excellence & Incident Response Incident Commander: Lead the response to information security incidents. Act as the primary escalation point, coordinating containment while providing clear ...

next step in your career. The role As a Senior CSIRT Analyst you will play a key role in G-Research’s Cyber Security Incident Response Team (CSIRT), specialising in cloud detection and response across AWS and hybrid environments. You will investigate, respond and proactively hunt … corporate Windows environments. You will use cloud-native security tooling and multi-SIEM operations, such as Elastic, Azure, AWS, to strengthen detection and response capabilities. You will also participate in purple team and red team exercises, continuously validating and improving the team’s effectiveness against advanced adversaries. ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. This … analysis and identifying potential threats or areas requiring further investigation. Working closely with external security service providers to ensure effective monitoring, alert management, and incident handling. Supporting cyber incident response activities as a technical security specialist. Analysing security metrics and trends, providing recommendations to improve security controls ...

scheduled information security on‐call rotation; assess urgent alerts and incidents, initiate containment or escalation procedures, engage appropriate stakeholders, and maintain clear incident handoffs. Key Deliverables Security alerts, incidents, and ServiceNow requests resolved and documented within defined service‐level targets. Zscaler, email‐security, identity‐security, and Microsoft security‐platform … security risk, with identified control gaps, exceptions, and remediation actions documented and tracked. On‐call security events triaged, documented, and escalated within established response targets. Required Experience Five or more years of progressive experience in information security, security operations, incident response, or a related discipline. Hands ...

ship: static and dynamic analysis, IaC and container scanning, secrets detection, and secure coding guidance that engineers will actually use. Improve detection and response: make sure the right things are logged and alerted on and contribute hands‐on when there is an incident. Incident response here … hands affair; depending on the incident you may lead it or support whoever does. Scope, run and challenge third party penetration tests, and triage reports that arrive through our vulnerability disclosure policy. Document what you find and what you change in clear technical writing that engineers ...

strong central security architecture capability. Embed security into enterprise architecture, solution design and procurement. Drive standardisation through reusable security controls and patterns. Oversee detection, response and recovery across IT and OT environments. Continuously improve incident response capability and organisational resilience. Align incident management with regulatory … ability to influence at the executive level and deliver integrated, enterprise-wide security capabilities. You will have proven leadership experience in security operations and incident response teams, and experience building and leading integrated security functions. A strong track record embedding security into business and technology delivery ...

spot instances, and down-scaling policies to eliminate waste, while providing full visibility into the unit economics of training and serving LLM models. Observability & Incident Response: Establish 24/7 incident response, telemetry, and observability metrics to monitor system performance, model drift, and data pipelines. Data ...

actively participates in supporting/governing forums Contribute to the analysis and mitigation of data protection risks Monitors information security incidents, contributing to incident response and root cause analysis. Will own resulting actions as required where they relate to required changes in IT Security and Information Risk Management … policy and controls Security operations and incident response, liaison with internal teams and 3rd party suppliers To thrive in this role, you need to have A track record of delivering security solutions for large-scale infrastructure, transformation or integration programmes Practical knowledge and understanding of industry security frameworks ...

activity by interpreting relevant standards and good practice frameworks, translating requirements into practical actions, and working with Technology Teams to support proportionate implementation. Security Incident Support: Support security incident response by helping assess governance, risk and compliance impacts, coordinating evidence, supporting root cause analysis and ensuring lessons … improvement. Essential Good understanding of information technology security, information security risk and control management. Experience supporting, coordinating or assuring IT security controls, vulnerability management, incident response, IT disaster recovery or IT change governance, ideally while working alongside technical teams who own implementation. Awareness of recognised security standards ...

emerging threats.· Strategic Planning & Commercial Judgement: Own the security roadmap and budget; appraise tools and controls on a risk-reduction-per-pound basis.· Incident Response & Resilience: Own the incident response plan and act as escalation point for major incidents; coordinate root-cause analysis, statutory reporting ...

across multiple teams. Mentor colleagues and contribute to the development of cybersecurity awareness and capability across the organization. Provide leadership and coordination for cybersecurity incident response activities and major security events. Lead and oversee vulnerability management processes, including prioritization, remediation governance, and risk reporting. Role Requirement Demonstrable experience … Qualys, Tenable, Rapid7, or equivalent platforms. Knowledge of cloud security posture management and cloud security best practices. Familiarity with threat intelligence, threat detection, and incident response processes. Ability to balance technical security requirements with business priorities. Experience managing and delivering cybersecurity projects or programs Strong analytical and problem ...

auditability. Collect and maintain audit-ready evidence; support internal and external audits, control assessments, security reviews, customer requirements, and remediation plans. Participate in incident response, containment, recovery, root-cause analysis, and corrective actions for infrastructure and endpoint security events. Manage technical risks and policy exceptions transparently, including compensating … Entra ID or equivalent identity platforms. Practical experience implementing system and endpoint hardening, configuration baselines, patch management, vulnerability remediation, encryption, endpoint detection and response, and least-privilege controls. Experience supporting security or compliance programs and producing evidence for audits, assessments, or customer and regulatory requirements. Strong networking knowledge, including ...

architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective actions Lead incident response efforts, including investigation and remediation of security breaches Support our internal security awareness and training programs, advocating the DevSecOps mindset that we have … risk and impact to us A proactive approach to staying updated with the latest security threats, vulnerabilities and mitigation techniques Thorough understanding of the incident response process (preparation, identification, containment, eradication, recovery, lessons learned) What skills are desirable: In-depth knowledge of network security, including core routing ...

Develop security policies, procedures, and automation frameworks. Communicate regularly with client IT teams to provide guidance and ensure operational readiness. Support the development of incident response processes and documentation. Advance security standard operating procedures and incident response reporting. Mentor developing team members. What You’ll Bring … infrastructure. Ability to gather client requirements and translate them into technical solutions. Strong knowledge of: SIEM and SOAR platforms API integrations Endpoint Detection and Response (EDR) Log analysis and malware detection Network monitoring tools Case management systems Atlassian Suite (Jira and Confluence) Email security, DLP, encryption, and vulnerability management ...

intelligence to determine the nature and severity of security events. Escalate indicators confirmed or suspected cyber security incidents to the Lead SOC Analyst or Incident Responder team in accordance with established operational procedures. Support Incident Responders by providing accurate analytical findings, supporting evidence, timelines and technical information throughout … incident investigations. Contribute to the continual improvement of monitoring capability by identifying opportunities to improve alert quality, investigation processes, monitoring coverage and detection effectiveness. Validate new monitoring content, detection rules and operational procedures before deployment into the live SOC environment. Assist in the onboarding of new systems, cloud services ...

architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective actions Lead incident response efforts, including investigation and remediation of security breaches Support our internal security awareness and training programs, advocating the DevSecOps mindset that we have … risk and impact to us A proactive approach to staying updated with the latest security threats, vulnerabilities and mitigation techniques Thorough understanding of the incident response process (preparation, identification, containment, eradication, recovery, lessons learned) What skills are desirable: In-depth knowledge of network security, including core routing ...