76 to 100 of 1,465 Incident Response Jobs in England

forefront of cyber security, using industry-leading technologies to protect and support our clients. Alongside our SOC capability, we have cutting-edge incident response teams delivering rapid cyber breach investigations for clients through insurance panels and direct engagements, supporting organisations at their most critical moments. We invest heavily … teams. We’re seeking an experienced Network Engineer to join our Cyber Defence Centre. This is a hands‐on technical role that spans live incident response, security assessment and hardening, and the design and delivery of managed security solutions in client environments. You will ...

foundation in cyber security and Microsoft technologies who wants to build deeper capability across Azure security, Microsoft Defender, Sentinel, identity security, vulnerability management and incident response. Working within Platform Engineering, you will collaborate with Cyber Security, Infrastructure, Cloud, Network, Application, Service and Operations teams to investigate security events, implement … vulnerabilities and support security improvement and transformation initiatives. The role offers clear scope to develop expertise in cloud security, threat detection, security automation and incident response, with increasing technical ownership as your experience grows. Key Responsibilities Cloud & Infrastructure Security Administer and support security controls across Microsoft Azure, Microsoft ...

Sophos is seeking a Senior Incident Response Analyst to lead investigations across MDR customers and MSPs within the Critical Incident Response Team. You will use Sophos technologies to contain and remediate incidents, mentor junior analysts, and contribute to detection improvements. The role requires strong incident response, malware analysis basics, and excellent customer service during high-pressure incidents. Remote-first with some hybrid possibilities. #J-18808-Ljbffr ...

growing Security Operations function, with a strong focus on Microsoft Defender XDR and Microsoft Sentinel. The role covers security engineering, detection development, vulnerability management, incident response, and Microsoft 365 security, with direct client exposure. This is a primarily remote position with occasional attendance at the London or Cardiff … associated risks. Produce structured security reports and recommendations. Present technical findings to clients and stakeholders. Support client remediation and security improvement activities. Handle escalated Incident Response investigations. Support advanced security investigations from the triage team. Develop and improve Incident Response playbooks. Automate processes using Azure Logic ...

capability/controls, with ongoing maturity assessments Conduct security due diligence assessments on any new/changed IS services impacting the business Conduct Cyber Incident Response testing in collaboration with team Support cyber incident response/investigations Oversee service provisioning and hosting of internal LoB apps …/release management Maintain apps (including SAP) build/support documentation (including Service Catalogue), drawing on outsourced providers Provide Master Data Management Handle major incident response (Apps, including SAP) Manage outsourced Apps support contract performance/resources, directing and supervising as required Act as the "glue" to connect ...

capability/controls, with ongoing maturity assessments Conduct security due diligence assessments on any new/changed IS services impacting the business Conduct Cyber Incident Response testing in collaboration with team Support cyber incident response/investigations Oversee service provisioning and hosting of internal LoB apps …/release management Maintain apps (including SAP) build/support documentation (including Service Catalogue), drawing on outsourced providers Provide Master Data Management Handle major incident response (Apps, including SAP) Manage outsourced Apps support contract performance/resources, directing and supervising as required Act as the "glue" to connect ...

from the ground up. This is a foundational role within a well-established Security Operations function, offering genuine ownership over strategy, tooling, governance and incident response for OT/IoT environments. You'll work cross-functionally with Threat Intelligence, Incident Response, Vulnerability Management, GRC and Security … Architecture, as well as engineering and site teams, to embed proportionate, pragmatic security controls across operational environments — while also playing a key role in incident response when OT/IoT-related incidents occur. Key Responsibilities Build and develop the organisation's OT/IoT security capability from ...

minimizes organizational risk and reduces the impact of security breaches, by utilizing the latest industry standards and combining experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, you will be able to help clients contain security events, harden their environments, and transform their security … role, you will be responsible for driving remediation efforts by developing, coordinating, and executing the eradication, recovery, and remediation plan in parallel with active incident response. You will partner with key stakeholders, including the Incident Response (IR) team, IT operations, business units, and legal, to ensure that ...

Operations Team means working at the forefront of innovation, combining market-leading technologies with bespoke in-house solutions to deliver real-time intelligence, rapid incident response, and strategic guidance. If you're passionate about shaping the future of cybersecurity and making a tangible impact, this is your opportunity … operations while developing your capabilities against our skills framework. You'll be supported in building technical expertise and broadening your understanding of threat intelligence, incident response, and security systems. We recognise that you may not have every skill listed, but we're looking for enthusiasm, a willingness ...

agentic runtime, auth, data retrieval, eval tooling) Experience running AI systems in production at scale, including observability, cost and capacity planning, regression detection, and incident response for AI-powered applications Experience operating production distributed systems on AWS/Azure, with a strong grasp of reliability, observability, and incident response at scale Deep knowledge of cloud-native technologies, serverless applications, event-driven architectures, data and inference pipelines, relational, NoSQL, and vector databases, and modern software architecture patterns Proven track record of owning multi-year technical strategy and architectural roadmaps, guiding teams from AI prototype through production deployment ...

motivations and methods adopted by a wide range of threat sources with a good understanding of how exploitation of systems occurs. In addition, supporting Incident Readiness activities (such as Tabletop sessions, Client Training, and Playbook creation), when not actively supporting investigations. Key Responsibilities Performing investigations for WithSecure clients … producing high quality reports to present findings and guidance. Maintaining target utilization on client chargeable projects whilst working as a Senior Incident Response Investigator. Producing output to highlight the technical competence of the company to a standard that can be published. Supporting your practice area in successful delivery ...

with prominent global insurance carriers, leading law firms, and Fortune 1000 businesses. The Engagement Manager oversees complex client engagements related to cybersecurity, digital forensics, incident response, and post-breach remediation. This leadership role focuses on managing the entire client lifecycle, from initial engagement and strategy development to project … suite" executives, legal counsel, and boards of directors. Strategic advisory: Provide expert guidance on cyber resilience, digital risk identification, risk mitigation strategies, and incident response planning. Help clients navigate complex technical, legal, and regulatory landscapes. Project oversight: Supervise digital forensics and incident response teams, ensuring that ...

focused on innovation, knowledge sharing, continuous improvement, and operational excellence.About the RoleJoin Maersk's Cyber team and play a key role in a modern incident management and response function that combines digital forensics, threat hunting, detection engineering, and cyber security improvement initiatives. This role offers the opportunity … contribute to complex investigations, strengthen response capabilities, and help shape the future of cyber defence within a globally recognised organisation.Key ResponsibilitiesConduct digital forensic investigations across endpoint, cloud, and OT environments to support incident response and recovery activities.Perform threat hunting and behavioural analysis to proactively identify threats ...

Role: Cyber Incident Manager Duration: 5 Months Location: UK Remote Day Rate: £500 Inside IR35 Active SC clearance required due to project restrictions Overview We are seeking an experienced Cyber Incident Manager to join a high-profile programme supporting a secure government environment. The successful candidate will lead … coordination, management, and resolution of cyber security incidents, ensuring rapid response, stakeholder engagement, and continuous service improvement. This role requires a proactive individual with strong communication skills, experience managing complex cyber incidents, and the ability to operate effectively within secure and highly regulated environments. Key Responsibilities Lead ...

innovation, knowledge sharing, continuous improvement, and operational excellence. About the Role Join Maersk's Cyber team and play a key role in a modern incident management and response function that combines digital forensics, threat hunting, detection engineering, and cyber security improvement initiatives. This role offers the opportunity … contribute to complex investigations, strengthen response capabilities, and help shape the future of cyber defence within a globally recognised organisation. Key Responsibilities Conduct digital forensic investigations across endpoint, cloud, and OT environments to support incident response and recovery activities. Perform threat hunting and behavioural analysis to proactively ...

human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection … response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with the visibility and scalability needed to stay ahead of evolving threats. Sophos goes to market with a global partner ecosystem, including Managed Service Providers (MSPs), Managed Security ...

Cyber Security Analyst, you'll act as a technical authority within Security Operations, owning the design, development and continuous improvement of our detection and response capabilities. You'll lead the response to major security incidents, drive threat-informed detection engineering, influence security architecture decisions, and work closely with … expertise with leadership responsibilities, offering the opportunity to mentor junior analysts while contributing to strategic security initiatives across the business. Key responsibilities: Lead Security Incident Response by managing high‐severity security incidents end‐to‐end, coordinating containment and recovery activities, conducting post‐incident reviews, and acting ...

Cyber Security Analyst, you'll act as a technical authority within Security Operations, owning the design, development and continuous improvement of our detection and response capabilities. You'll lead the response to major security incidents, drive threat-informed detection engineering, influence security architecture decisions, and work closely with … expertise with leadership responsibilities, offering the opportunity to mentor junior analysts while contributing to strategic security initiatives across the business. Key responsibilities: Lead Security Incident Response by managing high‐severity security incidents end‐to‐end, coordinating containment and recovery activities, conducting post‐incident reviews, and acting ...

Description: Job Title: Cyber Incident Management Senior Specialist Corporate Title: Vice President Location: Chester At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Res The Team: Cyber Incident Response and Management is part of the Cyber Response & Recovery Team who provide a globally coordinated and managed response capability for information security events and incidents that may impact the confidentiality, integrity, and/or availability of the Bank’s information and information systems or has privacy implications. ...

traditional relationship and service-led banking powered by modern technology. Job Purpose Support the Bank's operational cyber security capability through cyber security monitoring, incident response coordination, vulnerability management, supplier assurance and operational reporting activities. To place the interests of customers at the centre of all activities … Conduct Rules. Job Description Key Responsibilities: Support the day-to-day oversight of outsourced cyber security services, including Managed Detection and Response (MDR), Security Operations Centre (SOC) and threat monitoring providers. Coordinate cyber security alerts, incidents and escalations, ensuring actions, decisions and outcomes are appropriately recorded and tracked. ...

Principal EDR & XDR Engineer is a senior technical role responsible for the engineering, optimisation, and strategic development of the organisation's Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR) platforms. The role will act as the technical Subject Matter Expert (SME) for Microsoft Defender … CrowdStrike Falcon, ensuring the organisation maintains effective endpoint visibility, threat detection, and incident response capabilities. Based on the source role's emphasis on SIEM leadership and detection capabilities. Working closely with the CDC Engineering Manager, Security Operations, Incident Response, Threat Intelligence, and Security Architecture teams ...

functions, managing a team, and ensuring the delivery of high-quality SOC services including 1st-3rd line Security monitoring and alert analysis, threat detection, incident management and response, and where required threat hunting services. Your work may include: Run the day to day operations of the 24/… provide and appropriate reporting for executive leadership. Collaborate with threat intelligence, risk management, and compliance teams. Ensure 24/7 operational readiness and effective incident response capabilities for the Consolidated SOC Manage the technical and security aspects of the Consolidated SOC directly with customers on consolidated SOC-related ...

will act as the second‐in‐command to the Information Security & Compliance Manager, providing hands‐on support for day‐to‐day compliance activities, incident response, risk management, and stakeholder engagement. The role ensures resilience and consistency in the organisation’s security and privacy controls, particularly during periods … terms and conditions, and ensure privacy controls are in place. You will be part of the MWH Business Continuity team, helping with security incident response planning, incident management and investigation. You will work with all parts of the business, service providers, external consultants, clients, JV partners ...

robust Information Security Management System (ISMS) aligned to ISO/IEC 27001. You will act as the central authority for information security governance, incident management and continuous improvement across the organisation. What You'll Be Doing Governance & Compliance: Implement and enforce client ISMP requirements across GSA, including security assurance … core IT controls, including identity and access management, MFA, endpoint protection, logging, monitoring and baseline security configuration across office and operational locations. SOC Integration & Incident Management: Oversee security monitoring, log availability, alerting and incident response processes, ensuring effective integration with the client SOC and any managed security ...

handovers with the US and India locations. Manage the end-to-end lifecycle of EMEA security events — from detection through investigation and escalation to Incident Response (CIRT) to closure — in line with defined SLOs and KPIs, coordinating with market security and technology teams. Detection & Response Operations Identify … investigate intrusions and drive effective response using SIEM, SOAR, EDR/XDR, and email security solutions, supporting threat hunting and developing remediation plans across EMEA markets. Provide detection tuning and feedback loops to Detection Engineering and managed providers, and coordinate with CIRT and Cyber Threat Intelligence on handoffs ...