476 to 500 of 1,465 Incident Response Jobs in England

responding to incidents, but continuously improving through engineering excellence, threat intelligence, and data‐driven decision‐making. It combines real‐time defense (e.g., monitoring, detection, incident response) with long‐term capability building (e.g., tooling, automation, detection engineering, and platform integration) leaning into the opportunity of Agentic AI for faster … Operations and Engineering partners closely with Security Architecture, Threat Intelligence, Engagement and Engineering teams to ensure that controls are operationalized, detections are meaningful, and response processes are efficient and repeatable. A key focus is reducing mean time to detect and respond (MTTD/MTTR), increasing visibility across the environment ...

tools (e.g., Prometheus, Grafana, ELK stack, Cloudwatch). Excellent problem-solving skills and the ability to troubleshoot complex issues in distributed systems. Experience of Incident management and blameless postmortems that includes driving the incident response efforts during outages and other critical incidents, resolution, and communication ...

tools (e.g., Prometheus, Grafana, ELK stack, Cloudwatch). Excellent problem-solving skills and the ability to troubleshoot complex issues in distributed systems. Experience of Incident management and blameless postmortems that includes driving the incident response efforts during outages and other critical incidents, resolution, and communication ...

improvement across the security landscape. Working closely with senior security stakeholders, you'll take ownership of key security controls, identify opportunities for enhancement, support incident response activities and help embed a strong security culture across the organisation. Key Responsibilities Manage and enhance Microsoft security, compliance and data protection … access control (RBAC), access reviews and Joiner-Mover-Leaver processes. Identify security risks, vulnerabilities and control gaps, driving remediation activity where required. Support security incident investigations, coordination, reporting and escalation. Assist with audits, compliance activities and the maintenance of security control evidence. Produce meaningful security reporting and insights ...

KPIs, across incidents, service requests and change, reporting honestly on where things stand and what you are doing about it Chair or oversee incident, problem and change management processes, including major incident response and post-incident reviews Plan and manage the rota that keeps support cover … live, business-critical enterprise system, ideally Oracle Cloud (Fusion) or a comparable ERP/HCM/EPM platform Solid grounding in ITIL-based incident, problem and change management, and the judgement to know when to escalate and when to let a process run Experience managing SLAs, service reporting ...

What you will do as a Senior Application Engineer Support, configure, and enhance security tooling platforms (e.g. SIEM, EDR) that underpin threat detection and response Deliver engineering tasks within defined work packages, ensuring alignment with user needs, security requirements, and service-level objectives. Contribute to application architecture, integration … defence environments Desirable Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar) SOAR platforms and automation of security response workflows Integration with monitoring, alerting, and incident response systems Threat detection, analytics, and use case development Experience integrating with enterprise services (Active ...

What you will do as a Senior Application Engineer*** Support, configure, and enhance security tooling platforms (e.g. SIEM, EDR) that underpin threat detection and response* Deliver engineering tasks within defined work packages, ensuring alignment with user needs, security requirements, and service-level objectives.* Contribute to application architecture, integration … environments## ## Desirable:* Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar)* SOAR platforms and automation of security response workflows* Integration with monitoring, alerting, and incident response systems* Threat detection, analytics, and use case development* Experience integrating with enterprise services (Active ...

support to customers and systems for all Managed Service Platforms Implement observability and proactively monitor our Azure Cloud footprint, utilising dashboards, alerts and runbooks Incident response, analysis, remediation and associated post-incident root cause analysis reviews Support performance/reliability testing and capacity planning activitiesPerform routine system ...

improve overall system protection levels against malicious attacks/intrusions/breaches etc.. Creates detailed reports on all activities related to cyber security including incident response actions taken and recommendations for further improvements/mitigations etc.. Provides technical advice on cyber security issues both internally within the srganisation … Windows, Linux, and network devices,including vulnerability remediation. Hands-on experience with cyber security operations and technologies,including security monitoring, logging, alerting, threat detection, incident investigation, EDR, anti-malware/antivirus platforms, vulnerability management,encryption, cryptographic controls, and threat intelligence tools. Proven ability to automate and optimise security operations ...

Analyst will support in ensuring that Accord's systems are secure, compliant and resilient. This role will include, but not be limited to: Incident Response: Monitor, investigate and respond to Security events across the organisation Firewall Management: Configure, audit and tune network and web application firewall rules … discipline. CompTIA Security+ certification (or equivalent practical knowledge and experience). Experience supporting security operations activities, including monitoring alerts, basic investigation, and assisting in incident response. Working knowledge of Microsoft security technologies, such as Defender for Endpoint, Defender for Office 365, and Azure AD/Entra ID. Understanding ...

operation and continuous improvement of EMBL-EBIs cybersecurity capabilities. Working alongside infrastructure, platform and service teams, you will be responsible for vulnerability management, incident response, security monitoring, operational security processes and the implementation of technical security controls. This is a hands-on technical role focused on protecting EMBL … Tenable, Qualys or Rapid7. Familiarity with SIEM and security automation platforms such as Microsoft Sentinel, Splunk or Elastic. Experience implementing endpoint detection and response (EDR/XDR) technologies. Understanding of Identity Governance and Privileged Access Management. Knowledge of cyber security frameworks and implementing and maintaining effective security controls. Experience ...

other passenger-facing devices that are critical to daily service delivery. You will lead a multi-disciplinary team responsible for ensuring high availability, rapid incident response, and seamless customer experience across all front office technology. Key Responsibilities Lead the end-to-end support and operation of front office … major incidents affecting ticketing systems, gates, validators, kiosks, and associated platforms , coordinating rapid resolution with engineering and field teams. Drive operational excellence across: Incident management Ticket prioritisation and queue management Root cause analysis (RCA) Service performance and uptime Work closely with field engineers, maintenance teams, and operational stakeholders ...

operation and continuous improvement of EMBL-EBI's cybersecurity capabilities. Working alongside infrastructure, platform and service teams, you will be responsible for vulnerability management, incident response, security monitoring, operational security processes and the implementation of technical security controls. This is a hands-on technical role focused on protecting … Tenable, Qualys or Rapid7. Familiarity with SIEM and security automation platforms such as Microsoft Sentinel, Splunk or Elastic. Experience implementing endpoint detection and response (EDR/XDR) technologies. Understanding of Identity Governance and Privileged Access Management. Knowledge of cyber security frameworks and implementing and maintaining effective security controls. Experience ...

other passenger-facing devices that are critical to daily service delivery. You will lead a multi-disciplinary team responsible for ensuring high availability, rapid incident response, and seamless customer experience across all front office technology. Key Responsibilities Lead the end-to-end support and operation of front office … major incidents affecting ticketing systems, gates, validators, kiosks, and associated platforms , coordinating rapid resolution with engineering and field teams. Drive operational excellence across: Incident management Ticket prioritisation and queue management Root cause analysis (RCA) Service performance and uptime Work closely with field engineers, maintenance teams, and operational stakeholders ...

Argo CD. Driving cloud security, monitoring and platform reliability. Supporting disaster recovery, backup and compliance activities. Optimising cloud performance, availability and costs. Leading incident response and troubleshooting activities. Working closely with developers to embed DevSecOps best practice. What We're Looking For Active SC Clearance. Strong experience ...

aligned to MOD security requirements Coordinate DevSecOps engineers, developers, testers and infrastructure teams Create and maintain security processes, technical standards and operational runbooks Support incident response, patching, risk management and compliance activity Expereince required: You'll need strong hands-on experience across: AWS | Kubernetes/EKS | Terraform | GitHub ...

delivery lifecycle Develop automation tooling using Ansible, Python and Bash Work closely with developers, product owners and stakeholders within Agile delivery teams Participate in incident response, root cause analysis and continuous service improvement activities Provide support within a 24/7 operational environment, including participation ...

Groups, IAM, ACM, and KMS Support infrastructure deployments using CloudFormation Manage storage infrastructure using S3, including life cycle policies and access controls Participate in incident response, troubleshooting, and root cause analysis Follow and support security standards, change management, and release governance processes Contribute to sprint planning, refinement ...

activities. Configure and fine-tune SIEM platforms to optimise performance, visibility and detection capability. Support the development and deployment of SOAR playbooks to streamline incident response processes. Maintain the availability and performance of SOC infrastructure, including servers, networks and security appliances. Configure and optimise log ingestion pipelines ...

network security principles, including segmentation, encryption, secure remote access, threat prevention, and security policy enforcement. Proven experience supporting 24x7 production environments with demanding availability, incident response, disaster recovery, and change-control requirements. Experience leading technical delivery through the full lifecycle, from requirements and design through implementation, testing, documentation ...

technical and non-technical teams A proactive mindset with a focus on automation and continuous improvement Ability to work effectively under pressure, particularly during incident response Commitment to a blameless culture and continuous learning Nice to Have Experience contributing to open-source projects Familiarity with SRE principles ...

Infrastructure as Code (IaC). Scripting and configuration: Bash, Python and YAML. On-Prem plus Cloud platforms: Microsoft Azure. SRE and observability: Monitoring, alerting, incident response, reliability and resilience engineering, Prometheus, Grafana and Zabbix. Security and compliance: Security Check (SC) clearance and experience in secure, compliance-driven defence ...

Identity Management and Zero Trust principles. Support Cyber Essentials Plus, ISO 27001, DSPT and NHS security compliance activities. Participate in penetration testing, security audits, incident response and root cause analysis. Promote cyber security awareness and best practice across the organisation. Drive innovation through automation, AI and modern technology ...

systems, hosted and supported in other geographical locations. Knowledge and experience of SaaS, PaaS and IaaS solutions is desirable. Responsibility for the security analysis, incident classification and incident response actions including notification and alerting. Monitoring for possible security incidents, using knowledge of attack types and standard protocol ...

tools Experience monitoring service health, capacity, performance and security, and planning or assuring patching, backup, recovery and continuity arrangements Experience supporting security monitoring and incident response, including the use of SIEM tooling, escalation, root‐cause analysis and preventative action A practical understanding of IT service management, including incident ...