51 to 75 of 460 Incident Response Jobs in England

suppliers, partners, and third-party service providers. 4. Operational Cyber Security Management Oversee operational security activities across multiple entities, including: Threat detection and monitoring Incident response and remediation Vulnerability identification and patch management Endpoint protection and hardening Network and boundary defence IDS/IPS tuning, configuration, and alert … national security, critical infrastructure, aerospace, research). Demonstrable experience managing cyber security in high-assurance and classified system environments. Strong experience across security operations, incident response, vulnerability management, and threat detection. Technical knowledge of: Identity management and access controls PKI and cryptographic services SIEM platforms and log analytics ...

Role Title: Information Security Senior Consultant – Detection and Response (Europe & Americas) About Westpac: Westpac is one of the world’s oldest banks and a leading financial services organisation with a strong presence across Australia, New Zealand and key international markets. We support individuals, businesses and institutions through a broad … with our customers and communities. About the Team: This role is a core part of Westpac’s global 24/7 cybersecurity monitoring and incident response capability - the bank’s first line of cyber defence. How will I help? You will be responsible for analysing and responding ...

responsible for leading both our Cloud Platform and Enterprise Service orgs: Leading and developing two engineering teams — Cloud Platform (cloud infrastructure, observability, SRE, incident response) and Enterprise Services (IT support, IAM, Okta, Slack and core SaaS) — setting technical direction, hiring and performance standards across both. Delivering the reliability … performance and cost-efficiency of the cloud platform underpinning production services, including SLOs, on-call and incident response practices, and post-incident learning, in line with the broader infrastructure strategy. Executing the roadmap for enterprise services and identity, treating internal IT as an engineering discipline — automation-first ...

Ensure cloud platforms config meets best practise/compliance Manage security vendors Conduct risk assessments Monitor security events - SIEM, IDS/IPS, Sentinel1 Lead incident response, coordinate with vendors during breach Ensure compliance with regulations - GDPR, HIPAA, PCI-DSS, ISO27001, NIST Work with IT teams to secure infrastructure … applications and endpoints Integrate security into cloud deployments Develop/Test incident response, DR and BC Senior Information Security Analyst: Experience Cloud security platforms - AWS Security Hub, Azure Security Centre Identity management and encryption Managing security vendors Security tech: Firewalls, VPNs, Endpoint protection Frameworks - NIST, CIS Controls Scripting ...

security policies, standards and procedures. Leading security awareness and training programmes that improve behaviours and strengthen Moneybox’s security culture. Owning Moneybox’s security incident response framework, ensuring the business is prepared to identify, contain, respond to and recover from security incidents effectively. Overseeing vulnerability management, including scanning … operational efficiency. Experience managing security risk in cloud‐based environments, ideally including Azure. Strong understanding of third‐party security risk management. Experience with incident response planning, testing and improvement. Experience reporting security risks, controls and metrics to senior management. Strong communication skills, with the ability to translate technical ...

security policies, standards and procedures. Leading security awareness and training programmes that improve behaviours and strengthen Moneybox’s security culture. Owning Moneybox’s security incident response framework, ensuring the business is prepared to identify, contain, respond to and recover from security incidents effectively. Overseeing vulnerability management, including scanning … operational efficiency. Experience managing security risk in cloud‐based environments, ideally including Azure. Strong understanding of third‐party security risk management. Experience with incident response planning, testing and improvement. Experience reporting security risks, controls and metrics to senior management. Strong communication skills, with the ability to translate technical ...

Security Manager IT Security Manager opportunity for a security leader with a strong SecOps/Incident Response background and broad cyber security management experience to lead a team of 11 across SecOps, Engineering, Architecture and MSSP management, driving security operations and strategic initiatives across on-premises and cloud … function across both on-premises and cloud environments, ensuring the effective delivery of security operations and strategic security initiatives. Leverage your strong SOC and Incident Response background to oversee threat detection, incident management, vulnerability management, and the continuous enhancement of security capabilities. Manage and develop a team ...

critical national infrastructure programme. You will engage with suppliers, systems integrators, emergency services and wider government stakeholders. Key responsibilities Support cyber security operations, including incident response, vulnerability management and threat monitoring. Work with suppliers and systems integration partners to ensure security deliverables meet contractual and programme requirements. Support … development of an end-to-end Security Operations Centre. Review and maintain operational procedures, incident playbooks and security reporting. Lead and contribute to security governance forums. Advise stakeholders on security risks, mitigations and incident handling. Support security investigations and coordinate activity across programme, government and emergency-service teams. ...

KPMG is seeking a Cyber Response & Recovery Manager (German speaker) to lead reactive DFIR engagements in the CRS Team within Cyber Advisory. This hands-on role requires managing medium to large incidents, coordinating with the leadership, and developing in-house response capabilities. You will travel on short notice … when not responding, help mature clients' incident response capabilities. Based in London or Manchester, the role offers exposure to national critical incidents, opportunities #J-18808-Ljbffr ...

help protect systems that matter. Apply today and take your cyber security career to the next level. If you're passionate about threat detection, incident response, and staying one step ahead of attackers, we'd love to hear from you. Office based: Farnborough. Clearance: You do need … triage and investigate security incidents across critical client environments. Analyse network traffic, logs and security events to identify threats and vulnerabilities. Lead and support incident response activities, providing expert guidance on containment, eradication and recovery. Enhance detection rules and use cases using MITRE ATT&CK and threat-informed ...

high-performing Information Security team, fostering accountability, engagement, and continuous improvement. Drive the Bank's cyber defence capability, overseeing security operations, threat intelligence, incident response, vulnerability management, and technical assurance activities. Strengthen governance frameworks, ensuring ongoing compliance with FCA, PRA, operational resilience, and industry security standards. Build trusted … within a regulated financial services environment. Strong understanding of industry recognised frameworks such as ISO 27001, NIST, and CIS. Experience leading Security Operations, cyber incident response, governance, and risk management activities. Strong technical understanding of cloud security, identity and access management, enterprise infrastructure, and third-party security risk. ...

model. Ensure compliance with recognised security frameworks including ISO27001, NIST Cyber Security Framework and IEC62443. Lead security architecture, Security Operations Centre (SOC), vulnerability management, incident response and cyber resilience activities. Conduct technology and cyber risk assessments, developing mitigation plans and providing executive reporting. Lead business continuity and disaster … strategies. Essential – Demonstrated experience managing enterprise infrastructure including cloud, networking, datacentres, storage, end‐user computing and cyber security technologies. Essential – Experience leading Security Operations, incident response, vulnerability management, technology transformation and cloud migration programmes. Essential – Experience managing technology budgets, strategic suppliers, managed service providers and vendor contracts. Essential ...

model.Ensure compliance with recognised security frameworks including ISO 27001, NIST Cyber Security Framework and IEC 62443.Lead security architecture, Security Operations Centre (SOC), vulnerability management, incident response and cyber resilience activities.Conduct technology and cyber risk assessments, developing mitigation plans and providing executive reporting.Lead business continuity and disaster recovery planning.Champion … strategies. (E)Demonstrated experience managing enterprise infrastructure including cloud, networking, datacentres, storage, end-user computing and cyber security technologies. (E)Experience leading Security Operations, incident response, vulnerability management, technology transformation and cloud migration programmes. (E)Experience managing technology budgets, strategic suppliers, managed service providers and vendor contracts. ...

opportunity for a Senior Cyber Security Analyst (12 month contract) within Marshall.The focus of this technical role is on threat prevention, detection and response for Marshall, including the configuration and monitoring of a security information and event management (SIEM) system, operating next generation antivirus, intrusion detection/prevention systems … Marshall protection and detection capabilities as risks evolve over time.Responsibilities include:Managing set checklistsProblem management through to handover or resolutionThreat identification and classificationIncident response leadReport writingStakeholder managementContinuous improvementJunior SOC staff mentoringTasks:Helping to maintain and monitor the effectiveness of security measures and controlsConduct and help coordinate, routine security event ...

that everything else runs on. You'll work across the full platform lifecycle—from infrastructure design and provisioning through to CI/CD, observability, incident response and cost optimisation. The role suits someone who pairs strong infrastructure-as-code discipline with a genuine automation-first mindset … Pulumi, CloudFormation or equivalent) and the workflows around it Operate Kubernetes clusters and supporting platform services Implement observability—metrics, logs, traces, dashboards, alerting Lead incident response, root-cause analysis and reliability improvements Drive cloud cost optimisation and capacity planning Implement security hardening, secret management and compliance controls Partner ...

Outside IR35) Contract: 6-month rolling contract Location: Liverpool (Hybrid) Keywords: Information Security, Cyber Security, ISO27001, NIST, Risk, Governance, Vulnerability Management, Incident Response, Outside IR35 A leading organisation within the transport and logistics sector is looking for an Information Security Analyst to join its Group IT function … bring Previous experience in an Information Security, Cyber Security or IT Security Analyst role. Strong understanding of security principles including risk management, vulnerability management, incident response and access control. Knowledge of security frameworks such as ISO 27001, NIST or Cyber Essentials . Experience with common security technologies such ...

instrumental in defining and upholding Service Level Objectives (SLOs) and Service Level Indicators (SLIs), implementing effective monitoring and alerting strategies, and leading operational incident response processes. What you'll do The core responsibility is to implement, maintain, and continuously improve the foundational platform infrastructure that powers all engineering … controlled, and auditable. Proactively manage the capacity of the infrastructure to consistently meet or exceed Service Level Objectives for latency, error rates, and availability. Incident Response and Post‐Mortems: Act as first‐line responders for critical system incidents. Triage, diagnose, and resolve complex production issues rapidly. Drive ...

core priority of this role. The successful candidate will take a leading part in strengthening and evolving the firm's security posture in response to an increasingly sophisticated threat landscape, including emerging risks associated with AI. This is a technically demanding role that combines proactive security ownership with infrastructure … office‐based and requires five days per week on‐site presence. Key Responsibilities Lead the firm's security operations function, owning threat detection, incident response, and vulnerability management end‐to‐end Monitor, triage, and respond to security events across the environment, including log analysis, anomaly detection, and threat ...

Security Engineering team, helping to design, implement and continuously improve the security controls that protect large-scale AWS environments. Working closely with Security Operations, Incident Response, Threat Engineering and Cloud Engineering teams, you'll build and maintain cloud security solutions, improve security automation, and help embed security best … security posture through automation, logging, alerting and continuous improvement Work closely with engineering teams to embed security into cloud platforms and application delivery Support incident response, investigations and remediation activities Contribute to security-by-design initiatives across cloud infrastructure Requirements We're looking for someone who can demonstrate ...

remain secure, resilient and highly available while supporting continuous delivery and operational excellence. You'll work across cloud infrastructure, automation, CI/CD, monitoring, incident response and platform reliability, collaborating closely with engineering teams to improve how applications are built, deployed and supported. This is an excellent opportunity … native services. Implementing Infrastructure as Code using CloudFormation, AWS CDK and/or Terraform. Monitoring platform performance, availability and system health. Supporting incident response, root cause analysis and continuous service improvement. Skills & Experience Essential Commercial experience in a DevOps, Cloud Engineering or Platform Engineering role. Strong AWS experience ...

/CD pipeline development and maintenance Application deployment and release management Developer tooling administration (GitLab, Packagist, NPM, Dependabot) Dependency management and automated security updates Incident Management & Observability: Assist with the diagnosis and assessment of technical issues On-call engineering and incident response Monitoring, alerting, and error tracking … OpenSIPS FreeSWITCH Essential experience Required: Experience with CI/CD pipelines and deployment workflows Hands-on experience with cloud infrastructure Application monitoring, alerting, and incident response (any major tooling) Familiarity with load balancing and message queue technologies Maintaining and contributing to shared code libraries and internal tooling Investigating ...

boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant boundary configurations and security baselines Incident Management & Threat Response Lead boundary security incident detection, investigation and response Manage security alerts, anomaly investigation and threat escalation Coordinate incident response across boundary security team and customer security teams Conduct post-incident reviews and implement preventative measures Maintain security event logs and provide compliance reporting to MOD Technology & Service Development Evaluate and implement boundary security technologies and tools Design automation and orchestration for boundary security operations Lead ...

Flagstone is seeking a senior security engineer to own and operate detection and incident response across our Azure cloud security stack. You will work hands-on with Microsoft Sentinel, Defender for Cloud, and XDR tooling, while coordinating remediation with engineering squads. You'll drive security through code, pipelines ...

alerts within a live SOC environment. Analyse security incidents to determine scope, impact, and priority, ensuring appropriate escalation and response. Manage end-to-end incident response activities from detection through to resolution. Support the development and enhancement of SIEM use cases, detection rules, analytics, and playbooks. Conduct real … cloud environments, and enterprise IT infrastructure. Experience creating and tuning detection use cases, analytics, and playbooks. Knowledge of Information Security principles, threat detection, and incident response practices. Familiarity with Microsoft technologies, Linux systems, and security tooling. Understanding of security frameworks and data protection principles including GDPR ...

cybersecurity who wants to develop their career in a hands-on SOC position. You will be responsible for monitoring and analysing security alerts, supporting incident response activities and helping to protect critical systems against evolving cyber threats. The client is open on specific technology experience and is primarily … Ideally 1+ year of commercial cybersecurity or SOC experience Experience monitoring, analysing and responding to security alerts A basic understanding of SOC operations and incident response principles Knowledge of common cyber threats, attack vectors and malware types A good understanding of networks, operating systems and core security concepts ...