726 to 750 of 1,465 Incident Response Jobs in England

security release plan. Monitoring, reliability and recovery. Own observability (Application Insights, Log Analytics), alerting, backups and disaster recovery, including periodic DR tests. Lead incident response for platform issues and run blameless root-cause reviews. Cost management. Monitor and optimise Azure spend across environments and clients; right-size resources ...

engineering teams to translate technical requirements into scalable platform solutions. Mentor junior and mid-level engineers, participate in the on-call rotation, lead incident response for team-owned services and deliver engineering improvements that prevent recurring incidents. Skills 5+ years of experience in software, backend or platform engineering ...

services meet security, compliance, data protection and architecture requirements by design.* Establish effective logging, metrics, tracing, alerting and service-level indicators.* Own service health, incident response, root-cause analysis and the prioritisation of preventative improvements.* Encourage reusable engineering patterns, good documentation and consistent ways of working across integration ...

skill enhancement. Specialist Expertise: Deep expertise in at least one relevant sub-domain of cyber or information security (for example, security architecture design, incident response, cyber risk management, security training, or policy development) is a bonus. This could be demonstrated by significant project experience or thought leadership ...

automation that let engineers focus on code, not friction. Pioneer AI-assisted DevOps — explore and implement ways AI can streamline builds, deployments, monitoring, and incident response. Drive CI/CD excellence: fast builds, safe deployments, quality gates, and the ability for product teams to ship independently. Own cloud security ...

business intelligence tools and data-driven KPIs. Cybersecurity & Governance Background in implementing cybersecurity strategies across enterprise and operational domains. Experience in threat detection, and incident response. Knowledge of regulatory requirements and governance frameworks (e.g., ISO 27001, NIST). Budgeting & Resource Allocation Strong financial management skills, including budgeting, forecasting ...

infrastructure engineering or operations teams in a 24/7 service environment. Strong knowledge of infrastructure resilience, capacity planning, disaster recovery, business continuity and incident response. Experience planning and delivering infrastructure projects while coordinating internal stakeholders, vendors and managed service providers. Knowledge of security and regulatory frameworks relevant ...

resolve complex production issues while operating effectively in a fast-paced, high-pressure environment. In this role, you will diagnose complex system behaviours, coordinate incident responses, manage post-mortems, and oversee safe software deployments. By combining financial-markets interest with hands-on insight into production systems, you will directly ...

active SC Clearance to own and manage a critical ServiceNow platform within a secure enterprise environment. The role combines technical platform ownership, service management, incident leadership and stakeholder engagement, ensuring the ServiceNow service remains secure, stable and continuously improved. Participation in an on-call rota for major incidents … Responsibilities Own the ServiceNow platform and associated services. Manage service performance, availability, SLAs and continual improvement initiatives. Provide ServiceNow Development expertise when required Lead Incident, Problem and Change Management activities. Coordinate and lead major incident response and resolution. Act as the technical authority for ServiceNow enhancements, upgrades ...

detecting, and responding to threats across our digital estate using SIEM, EDR/XDR and related platforms. What you'll do: Lead or support incident response end-to-end: triage, containment, eradication, recovery, and post-incident review Run proactive threat hunting to catch what existing controls miss ...

Y TREE is seeking a security-focused analyst to join the Technology team in London. You will monitor, detect, respond to threats, and remediate vulnerabilities while coordinating with an externally managed SOC. The role emphasizes ...

strong technical capability, and the ability to operate within a highly regulated nuclear environment. You will report to OT Security Manager. Responsibilities: Security Monitoring & Incident Response Monitor and analyse security events across IT, OT and physical security environments. Investigate cyber, operational technology and physical security incidents, escalating issues … following site procedures. Collect forensic evidence and contribute to incident reviews and continuous improvement activities. Asset, Risk & Access Management Maintain security asset inventories and support Critical Digital Asset (CDA) identification and classification. Assist with vulnerability management, risk assessments and maintenance of the Security Risk Register. Conduct access reviews ...

analysts to watch dashboards, we're building the AI-driven system that does the watching: it triages alerts, investigates, and takes the first response action, so the humans on the team spend their time on the work that needs a human. Our goal is to automate every event … both the Blue Team's software and the team itself. This is an engineering leadership role first. The team writes software: detection pipelines, automated response, the agents, and the integrations that tie them into Clio's products and infrastructure. You'll lead that team, set its technical direction ...

M+C Saatchi Group is seeking a proactive Cyber Security Specialist to protect information assets and support security across operations, governance, risk, and incident response. The role collaborates across teams to maintain a robust security posture in a dynamic environment. The ideal candidate has strong cyber security experience, knowledge ...

bespoke tooling and Threat Intelligence solutions to triage suspicious events, provide context and an assessment of risk/threat to customers to enable efficient response and continuously monitor customer environments; yet it doesn’t stop there. Not only will you be expected to assess threats using all information sources … also get involved in projects that enhance the capability of our services and ensure we are providing cutting‐edge detection & response services to our clients. This includes threat hunting, supporting the implementation of new cutting‐edge technology, malware analysis, recommending detections and getting involved in strategic cross‐team projects ...

DAZN is seeking a Technical Incident Commander to lead critical incident response across our live operations. You will own restoration efforts, coordinate technical teams, and drive rapid problem resolution in a 24/7 environment to maintain service availability for millions of users. You will collaborate with ...

/IP, firewalls, load balancers), and post-migration performance stabilization. 4. Support, Operations & Compliance Provide tier-3 production support and participate in major incident response and root cause analysis (RCA). Execute operational changes under standard ITIL frameworks (Incident, Problem, and Change Management). Maintain clear operational ...

Agent to their production environments (observability tools, infrastructure as code, GitOps tooling, and CI/CD pipelines) and guiding their teams from AI-assisted incident response to supervised and autonomous actions with safety guardrails. You will also contribute code directly back to the core SRE Agent product, building … regular contact with 2–4 strategic customer teams to deploy the SRE Agent, configure tools and connectors, and embed AI actions across their incident management lifecycle to drive adoption and value Build and contribute core agent capabilities: Scope, design, and build reusable agent tools, connectors, and skills ...

improve operational efficiency, scalability, and service reliability. Support the development of Nscale's Centre of Excellence as the operational authority for infrastructure operations. Incident Management & Technical Leadership Take ownership of complex infrastructure incidents from diagnosis through to resolution. Lead major incident response activities and coordinate technical teams … rapid business growth. Documentation, Standards & Governance Own the creation and continuous improvement of operational documentation, standards, and runbooks. Define and maintain operational procedures for incident management, planned maintenance, and communications. Ensure consistency of operational execution across all Nscale data centres. Cross-Functional Collaboration Work closely with Infrastructure Engineering, Deployment ...

leadership across cybersecurity transformation programmes. Essential Experience Cyber Security Architecture Strong cybersecurity background in one or more of: Identity & Access Management (IAM) Security Operations & Incident Response Threat & Vulnerability Management Cloud Security Infrastructure Security Network Security Application Security Data Security Cryptography Experience working on large-scale IT and cyber … Solution Architecture. Ability to communicate complex security concepts to both technical and non-technical stakeholders. Knowledge of security governance, risk management, threats, vulnerabilities, and incident response. Identity & Access Management 3+ years' experience with HashiCorp Vault (preferably on-prem). 3+ years' experience using Terraform, including development of complex reusable ...

governance, security expertise and related teams. Ensure C&IR operates as an integrated department, connecting strategic cyber risk, operational insight, assurance findings, change demand, incident learning and external threat intelligence into a coherent plan of action. Skills/Experience Required We’re proud to be a Disability Confident Employer … risk or comparable enterprise risk functions in a complex organisation, with ability to lean in and drive team performance across all areas (including detection & response, Assurance, SSDLC, policy and AI Security). Demonstrated experience translating cyber and information resilience risk into senior-level decisions, priorities, control expectations and accountable ...

development and maintenance of cloud automation, testing, CI/CD and containerised infrastructure, working closely with code and build teams to streamline delivery. Lead incident management and root cause analysis, while identifying and implementing improvements to prevent recurring production issues. Strong professional experience in DevOps, Platform Engineering … Jenkins and GitHub Actions. Proven experience with Infrastructure as Code (Pulumi desirable), including designing and maintaining Infrastructure as Code. Strong experience with monitoring, logging, incident response and production troubleshooting. Experience containerising applications and operating containerised infrastructure such as Docker, ECS, Docker Swarm or Kubernetes. Strong understanding of cloud ...

provide visibility and control of information risks for Policing. It will support the 24x7x365 nature of the police operations, providing a threat detection and response capability for digital services before, during and after cyber attacks, enabling stakeholders to understand and proactively manage risk across the technology estate at both … Correlate intelligence from multiple sources (OSINT, SIGINT, internal telemetry, etc.) to build a comprehensive threat picture and drive proactive defence. Support and lead pre-incident planning, threat modelling, and attack surface reduction initiatives. Act as a senior point of contact during live incidents, supporting decision-making and coordinating intelligence ...

CrowdStrike and Splunk platforms. The successful candidate will ensure the effective integration, configuration, and operational use of security tools to enhance threat detection, incident response, and overall security maturity. Additionally, the role involves providing technical leadership, mentoring, and knowledge transfer to bolster internal cyber capabilities during a period … high‐severity security incidents, facilitating rapid investigation, containment, and remediation using EDR and SIEM tools. Develop and implement SOAR workflows to automate detection, response, and security operations processes. Conduct proactive threat hunting using SIEM/EDR data and MITRE ATT&CK‐aligned techniques. Support vulnerability assessment and security scanning ...

that standardize build, test, and deploy flows with auditable delivery. Automate onboarding and environment setup to minimize manual effort for application teams. Deliver runbooks, incident response guides, and self-healing automation for critical services. Contribute to platform architecture for shared hosting and delivery pipelines across multiple clouds. Design … logging, metrics, alerts, registries, DNS, and TLS. Enforce guardrails such as resource limits, quotas, network policies, and least-privilege access. Participate in post-incident reviews and drive improvements for reliability and cost efficiency. BASIC QUALIFICATIONS Strong experience in platform engineering, DevOps, and cloud-native infrastructure. Deep expertise in Kubernetes ...