276 to 300 of 1,452 Incident Response Jobs in England

Sophos is seeking an intermediate-level Incident Response Analyst to support its MDR customers within the Critical Incident Response Team. You will perform advanced investigative, forensic, and containment activities during active cyber incidents, mentoring junior analysts and producing customer-facing findings. You will operate with moderate … autonomy, serve as the technical backbone of engagements, and contribute to post-incident reviews while maintaining thorough documentation and timelines. #J-18808-Ljbffr ...

identify risks and vulnerabilities in people, processes, and technology. In this role, you will design and execute Red Team assessments to evaluate preventative controls, incident response processes, and detection capabilities, and advise cross-functional teams on security strategy and risk management. This position is anticipated to require … operating within financial services environments and knowledge of sector-related cybersecurity or resiliency organization practices, operations risk management processes, principles, regulations, threats, risks, and incident response methodologies Experience delivering regulatory-driven red team testing such as CBEST, TIBER, and iCAST Experience of targeting cloud-based environments such ...

WithSecure is seeking a Senior Incident Response Investigator to lead investigations for clients and produce high-quality reports. You will work on targeted attacks across large enterprise networks, with exposure to diverse OS environments and complex security architectures. The role involves incident readiness support, report writing ...

business to operate effectively and securely. Working closely with internal teams, suppliers and stakeholders, you’ll investigate technical issues, improve security controls, support incident response activities and contribute to the delivery of secure technology solutions. This is an exciting opportunity for someone who enjoys solving complex technical problems … making a meaningful impact through technology. Design, implement, maintain and continuously improve security controls across the technology estate. Support security monitoring, vulnerability management, incident response and remediation activities. Investigate and resolve security‐related issues affecting systems, services and users. Collaborate with colleagues, suppliers and stakeholders to embed security ...

Methods is seeking a Senior Cyber Analyst to lead complex investigations and incident response, providing strategic direction to maintain a robust security posture for clients. You will own detection rules and playbooks for Microsoft Sentinel, Defender XDR, SIEM, SOAR, EDR and XDR, while mentoring the Cyber Services team. ...

business to operate effectively and securely. Working closely with internal teams, suppliers and stakeholders, you'll investigate technical issues, improve security controls, support incident response activities and contribute to the delivery of secure technology solutions. This is an exciting opportunity for someone who enjoys solving complex technical problems … through technology. You will be responsible for Design, implement, maintain and continuously improve security controls across the technology estate. Support security monitoring, vulnerability management, incident response and remediation activities. Investigate and resolve security-related issues affecting systems, services and users. Collaborate with colleagues, suppliers and stakeholders to embed ...

business to operate effectively and securely. Working closely with internal teams, suppliers and stakeholders, you’ll investigate technical issues, improve security controls, support incident response activities and contribute to the delivery of secure technology solutions. This is an exciting opportunity for someone who enjoys solving complex technical problems … through technology. You will be responsible for Design, implement, maintain and continuously improve security controls across the technology estate. Support security monitoring, vulnerability management, incident response and remediation activities. Investigate and resolve security-related issues affecting systems, services and users. Collaborate with colleagues, suppliers and stakeholders to embed ...

cyber security strategy and roadmap. Own and continuously improve ISO 27001 and Cyber Essentials Plus. Lead security operations and manage an outsourced SOC. Oversee incident response, vulnerability management and remediation. Manage external security partners and specialist suppliers. Lead and mentor the Information Security team. Work closely with senior … Proven experience owning and improving ISO 27001 and security governance. Experience managing outsourced SOC and security partners. Strong knowledge of security operations, threat detection, incident response and vulnerability management. Good understanding of Microsoft/Azure, cloud security, SaaS assurance and security architecture. This is a senior leadership opportunity ...

ensure smooth deployment processes across environments Participate in on-call rotations and act as an escalation point for production incidents Lead or contribute to incident response and post-mortems, driving long-term improvements Core Tech Stack AWS (Primary) CloudWatch (or integration with tools like Datadog) Infrastructure & Automation Terraform … Directory/identity integration IIS and .NET application hosting PowerShell scripting and automation Observability & Operations Monitoring and alerting platforms (Datadog, CloudWatch, etc.) Logging and incident response tooling Qualifications What We’re Looking For Extensive experience in DevOps, Cloud Engineering, or Systems Engineering Strong hands-on experience with ...

FASTEK Limited in the United Kingdom seeks a Security Operations role to monitor and manage IT security infrastructure, conduct vulnerability assessments, lead incident response, and implement security policies and procedures across the organization. You will ensure GDPR and ISO27001 compliance, work with SIEM tools for threat detection, manage ...

sound engineering trade-offs around scalability, maintainability, performance, and product impact Own reliability and operational excellence, including telemetry, SLOs, error budgets, on-call rotations, incident response, and continuous service improvement Champion DevOps practices, including CI/CD, deployment automation, monitoring, and application-level operations Collaborate with Platform Engineers … Experience designing and building scalable APIs, services, and cloud-native applications Strong understanding of DevOps practices, including CI/CD, deployment, monitoring, automation, and incident response Experience delivering secure, observable, high-quality production software Strong focus on code quality, automated testing, documentation, performance, and maintainability Ability to lead ...

Bloomberg in London seeks a Senior Incident Response & Digital Forensics Analyst to lead end-to-end investigations, from acquiring forensic images to reconstructing attacker activity. You will analyse memory and network evidence, reverse engineer binaries, mentor teammates, and help develop detection coverage and playbooks for the SOC. This ...

Datadog, and safe release practices Oversee database and schema evolution practices - migrations, data integrity, and performance - in partnership with platform and infrastructure teams Lead incident response for backend-owned systems - triage, escalation, post-incident reviews, and runbook quality Mentor engineers on PHP (Yii/Yii2), Go, Security … platform operations - with solid breadth across design, build, test, and run Track record of owning production systems end-to-end: implementation, rollout, monitoring, incident response, and follow-up Experience leading technical delivery on complex, ambiguous initiatives involving multiple engineers, dependencies, or teams Strong architectural judgement - evaluating trade-offs ...

Taking a lead role in the secure adoption of Microsoft 365 Copilot, AI agents and custom AI applications Improving security monitoring, detection engineering and incident response Supporting complex and high‐severity security incidents alongside internal teams and external SOC partners Strengthening vulnerability and exposure management using threat intelligence … them Strong knowledge across identity, cloud, endpoint, data, network and application security Experience with threat modelling and security architecture reviews Exposure to detection engineering, incident response, threat hunting and vulnerability management Security automation or scripting experience Knowledge of Zero Trust, ISO 27001, Cyber Essentials Plus and NIST ...

Privileged Access Management, and associated access control environments. The role will support the secure management of privileged accounts, access workflows, credential rotation, platform onboarding, incident response, control monitoring, and operational governance relating to privileged access. In addition, the role will contribute to broader identity security capabilities, including secrets … identity and PAM responsibilities, the role will support wider cyber security engineering activities, including security platform operations, automation, tooling enhancements, threat detection improvements, and response to security incidents as business and security priorities evolve. Responsibilities Role specific: Engineer security products to be production ready. Configure security toolset and controls ...

Consulting is seeking a Senior Consultant to lead incident response engagements, perform digital forensics, and advise clients on cyber risk. The role requires strong analytical skills and knowledge of frameworks, with hybrid travel to client sites in London and beyond. You will work with top-tier firms ...

security maturity improvements. Get exposure to AI security: Work around Copilot, AI agents, Purview, and data security compliance. Broad technical remit: Microsoft security, SIEM, incident response, cloud/SaaS security, identity, and network security. Room to grow: The team is investing in capability, and strong performers may have … work independently, prioritise a varied workload, and bring ideas from your own experience. Key areas include: Vulnerability management, remediation planning, reporting, and automation. Security incident triage, investigation, and response. Microsoft Defender, Entra ID/Active Directory, Conditional Access, and related controls. SIEM query building and KQL. Ransomware resilience, including ...

outcomes. Deep technical knowledge of modern cybersecurity technologies including endpoint security, XDR/EDR, cloud security, identity and access management, SIEM/log management, incident response, and threat intelligence Experience with security transformation programs, including Zero Trust architecture, cloud migration security, legacy estate modernisation, and security operating model … CyberUK speaking, or NCSC certification processes Professional certifications such as CISSP, CISM, or equivalent (desirable but not essential given practitioner experience requirement) Experience with incident response in government context, including major cyber incidents or nation-state attacks Existing relationships with key government stakeholders Published thought leadership ...

engineering, detection engineering, SIEM/SOAR, security automation and AI-driven security operations . You’ll design and improve security monitoring, detection, response and automation capabilities across a large enterprise environment, with a particular focus on AI and agentic technologies . Key Responsibilities Design and optimise security monitoring, SIEM … including ingestion, parsing, normalisation and enrichment . Develop and tune detection rules, correlation searches and threat detection use cases . Build SOAR playbooks, automated response workflows and security integrations . Integrate SIEM, SOAR, EDR/XDR, IAM, vulnerability management and cloud security tools . Support incident response ...

Prima is seeking a Security Engineer focused on Incident Response to join our Security Team. You will work within a vibrant engineering culture with 350+ engineers across software, infrastructure, operations and security. The role emphasizes proactive monitoring, detections, and automation to safeguard data and drivers on our platform. ...

seeking a Senior IT Security Principal to provide technical leadership across security operations, vulnerability management, incident response, threat hunting, risk mitigation and compliance. You will act as a trusted advisor to senior stakeholders and lead enterprise security initiatives to strengthen the organisation’s security posture. You will mentor ...

consultants related programmes. Principal Preferred Requirements Cybersecurity Expertise: Significant experience and proven technical depth within one of the following domains of cybersecurity; security operations & incident response, threat & vulnerability management, identity & access management, cryptography, infrastructure, network, application, data, cloud Broad background across information technology with the ability to communicate … technical SMEs at a comfortable level Excellent command of cybersecurity organisation practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies Keen understanding of national and international laws, regulations, policies and ethics related to financial industry cybersecurity Experience and understanding of both ...

consultants related programmes. Principal Preferred Requirements Cybersecurity Expertise: Significant experience and proven technical depth within one of the following domains of cybersecurity; security operations & incident response, threat & vulnerability management, identity & access management, cryptography, infrastructure, network, application, data, cloud Broad background across information technology with the ability to communicate … technical SMEs at a comfortable level Excellent command of cybersecurity organisation practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies Keen understanding of national and international laws, regulations, policies and ethics related to financial industry cybersecurity Experience and understanding of both ...

busy team in the United Kingdom. You will bring a minimum of five years' SOC experience, mentor junior staff, and contribute to rapid incident response and threat detection. This role emphasizes hands-on SIEM work (Splunk, MS Sentinel), log analysis (Wireshark), and strong knowledge of Windows and Linux ...

Testing Site - JPMC is seeking a SOC Manager to lead a team of analysts in 24/7 monitoring and incident response. You will guide alert triage, case analysis, and drive continuous improvement across metrics and processes. You will coordinate incident response workstreams, prepare communications for senior ...