12 of 12 Incident Response Jobs in Glamorgan

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing vulnerability scan results … working with technical teams to prioritise fixes. Keeping accurate incident records and producing clear reports on findings and recommended actions. Supporting access reviews, security procedures and staff awareness initiatives. Staying informed about emerging threats and identifying opportunities to improve security. About you Youll bring a curious mind, a methodical ...

emerging threats Review existing security tools and controls, recommending improvements where required Work closely with infrastructure engineers, external SOC providers and security partners on incident response and cyber resilience What we are looking for: Around 2-3+ years of commercial cyber security experience Hands on experience within … Microsoft security environments Experience with Microsoft Sentinel or other SIEM/SOC technologies Knowledge of XDR/EDR, vulnerability management and incident response Good understanding of Identity & Access Management, ideally including Entra ID, PIM, MFA or SSO Broader knowledge of Microsoft Azure and cloud security Strong communication skills ...

security and reducing organisational risk through proactive security engineering. This is not a traditional SOC position. Whilst you'll contribute to threat detection and incident response activities, the focus of the role is designing, implementing and continuously improving security controls across Microsoft technologies and cloud platforms. What … governance controls using Microsoft Purview Work closely with infrastructure, cloud and project teams to embed security into new and existing technology solutions Contribute to incident response activities and ongoing improvements to detection capabilities Provide technical security guidance to both technical and non-technical stakeholders Support compliance against recognised ...

organisational data and services Providing expert advice on secure environments, configuration management and infrastructure hardening Supporting identity and access management, vulnerability management, monitoring and incident response activities Maintaining resilient and highly available services in line with departmental policies and security standards Driving continuous improvement and automation to enhance … design Experience with infrastructure hardening, configuration management and vulnerability management Knowledge of identity and access management principles and security best practice Understanding of monitoring, incident response and operational risk management Ability to identify opportunities for automation and continuous service improvement Excellent communication skills, with the ability to provide ...

pipelines to support safe, consistent delivery across environments. Maintaining and improving observability across the platform estate, including monitoring, logging, alerting, and dashboards. Supporting technical incident response and post-incident reviews, contributing to problem management and long-term remediation. Maintaining platform security standards, including access control reviews, vulnerability … Elemental services such as MediaLive, MediaConvert, and MediaPackage. Supporting live events and broadcast-critical streaming services, including monitoring, quality assurance, and incident response. Income-generating platform work Contributing to the development and operation of server-side ad insertion capability and other income-generating platform initiatives. Supporting the technical delivery ...

maintain secure, resilient infrastructure and platform services Champion security best practices across infrastructure design, configuration, and operations Support infrastructure hardening, vulnerability management, monitoring, and incident response activities Implement and maintain Infrastructure as Code solutions Collaborate with engineering, architecture, and security teams to improve platform reliability and security posture … working within complex enterprise environments Strong stakeholder engagement and problem-solving skills Desirable Experience Experience working within government or highly regulated environments Exposure to incident management and operational support activities Understanding of compliance-driven infrastructure delivery ...

designs and platform initiatives. Delivery & Problem-Solving Take ownership of well-scoped platform tasks, upgrades and new capabilities from development through to delivery. Support incident response, troubleshooting, and root-cause analysis, escalating more complex issues when appropriate. Participate in technical and design discussions, contributing ideas and practical solutions. ...

engagement. Contribute to the Scrumconnect developer community and promote the adoption of good engineering practices. Act as a senior on-call responder, supporting incident management and driving long-term resilience and reliability improvements. Collaborate with product managers, designers, architects, developers, testers, and other stakeholders to deliver user-focused digital … principles and secure-by-default engineering. Experience with systems design and integration in complex environments. Comfortable supporting services in production, including on-call participation, incident response, troubleshooting, and observability. Experience using development and collaboration tools such as Jira, Confluence, and Bitbucket . User-focused mindset and experience collaborating ...

Microsoft Sentinel Managing phishing simulation campaigns and supporting vulnerability scanning Reviewing client environments and identifying opportunities to improve their Microsoft 365 security posture Supporting incident response activities and security investigations Producing clear technical reports, recommendations and documentation Working with senior engineers to triage and escalate more complex technical ...

security capabilities across Microsoft Sentinel and Defender XDR, working directly with clients to strengthen their environments. This is a hands-on engineering position, with incident response involvement focused on escalations rather than routine alert monitoring. The role Build, deploy and tune Sentinel detection rules using KQL. Configure … optimise Microsoft Defender XDR and wider Microsoft 365 security controls. Develop automation and response playbooks using Azure Logic Apps. Run vulnerability scans and phishing simulations, translating findings into practical recommendations. Contribute to development and deployment processes using DevOps and CI/CD. Share knowledge with colleagues and participate ...

that systems remain aligned with internal security policies and regulatory expectations. Alongside supplier management, you’ll oversee core systems and user access management, support incident response activities and maintain business continuity and disaster recovery readiness. The role will also involve supporting internal audits, regulatory reviews and technology governance ...