201 to 225 of 759 Incident Response Jobs in London

across multiple ServiceNow modules, including: Integrated Risk Management (IRM): Policy Management, Compliance & Audit Management, Vendor Risk Management, Business Continuity Management. Security Operations (SecOps): Vulnerability Response, Security Incident Response, and Security Dashboards. IT Service Management (ITSM). IT Operations Management (ITOM). Customer Service Management (CSM). Integration ...

DORA and deployment reliability metrics (deployment frequency, lead time, change failure rate, MTTR); Support SRE‐aligned practices such as error budgets, runbooks, and post‐incident reviews; Participate in incident response and on‐call rotation for delivery and platform services, driving fast detection and recovery; Contribute to disaster ...

provisioning time, and stability metrics. Monitor environment health using observability tools (Prometheus, Grafana, Splunk, etc.) and proactively identify and resolve performance issues or bottlenecks. Incident & Problem Management Lead incident response for environment-related issues, driving quick resolution and facilitating blameless post-mortems. Implement permanent fixes based … manual environment tasks and eliminate them through automation, improving engineering efficiency and reducing operational burden. Strategic & Cultural Responsibilities: Continuous Improvement Analyze environment performance data, incident trends, and post-mortem outcomes to drive ongoing enhancements and innovation. Reliability Management Apply an "error budget" framework to balance velocity and reliability across ...

with the accountable governance and delivery teams. Lead technical coordination for significant incidents and escalations, including impact assessment, recovery planning, executive communication and post-incident follow-through. Drive secure adoption and measurable value Partner with CSMs to build outcome-based success plans that connect customer priorities, technical milestones, adoption … identify material risks, diagnose issues and drive cross-functional resolution. Working knowledge of Zero Trust, least privilege, secure by design, vulnerability management, threat detection, incident response, security posture management and data loss prevention. Executive presence with the ability to connect technical performance to client trust, service resilience, revenue ...

reliability engineering practices across systems that support live, business‐critical environments. The successful candidate will play a key role in improving service reliability, observability, incident response, automation, and disaster recovery readiness across IMG platforms, while working closely with engineering, operations, and project stakeholders. Key Responsibilities And Accountabilities Design … improve release quality, resilience, and supportability. Act as an escalation point for production incidents, leading or supporting rapid diagnosis, mitigation, communication, and post‐incident follow‐up. Drive root cause analysis and corrective actions following incidents, with a focus on prevention and continuous improvement. Support the design, testing, and documentation ...

reliability engineering practices across systems that support live, business-critical environments. The successful candidate will play a key role in improving service reliability, observability, incident response, automation, and disaster recovery readiness across IMG platforms, while working closely with engineering, operations, and project stakeholders. Key Responsibilities and Accountabilities Design … improve release quality, resilience, and supportability. Act as an escalation point for production incidents, leading or supporting rapid diagnosis, mitigation, communication, and post-incident follow-up. Drive root cause analysis and corrective actions following incidents, with a focus on prevention and continuous improvement. Support the design, testing, and documentation ...

reports and updates for senior management * Monitor regulatory developments and create appropriate compliance roadmaps * Support cybersecurity awareness and training across the organisation * Participate in incident response and post-incident reviews * Help develop and implement corrective measures following security incidents * Provide credible cybersecurity guidance to stakeholders across ...

seeking an experienced Splunk Engineer to help design, build, and manage our Splunk SOAR service, with a strong focus on automation, security response, and service maturity. This role will be responsible for developing, reviewing, testing, and deploying Splunk SOAR playbooks into production environments, ensuring they are secure, reliable … Work closely with SOC analysts, security engineering teams, and stakeholders to optimise automation outcomes. Perform playbook tuning, troubleshooting, and enhancements to improve reliability and response times. Maintain clear technical documentation for playbooks, integrations, and processes. Support live security operations where SOAR automation is involved. Manage your own queue ...

practice) that scales reliability improvements across many application flows. Defines and implements standards for: Service cataloging, SLO/SLI frameworks and error budgets, incident response maturity, blameless post-incident reviews, resiliency patterns, capacity, performance, and scalability engineering. Drives service reviews with evidence-based reporting (availability, latency, incident … credibly at all levels—from engineers to senior technology and business stakeholders. Uses enterprise-authorized AI capabilities within the work environment to accelerate major-incident triage, troubleshooting, and post-incident analysis, validating outputs and handling operational data according to sensitivity and security requirements. Leads reuse-first adoption ...

reduction, and proactive issue identification. Create automated remediation processes, runbooks, and self-healing mechanisms to improve operational resilience. Perform troubleshooting, root cause analysis, and incident resolution across platform and application environments. Analyse operational trends, system telemetry, and performance data to drive continuous improvement initiatives. Collaborate with Product, Engineering, CloudOps … premise infrastructure. Experience implementing observability platforms such as Splunk, Datadog, Grafana, Prometheus, Dynatrace, or similar technologies. Experience with AI-driven operational tooling and automated incident response solutions. Object-oriented programming experience. Experience working within Product Engineering, Software Engineering, or R&D environments. Experience supporting highly available, business-critical ...

solvers (e.g., Gurobi) and ensure model performance, correctness, explainability, and maintainability. Establish strong engineering practices: code review, automated testing, CI/CD, release management, incident response, and post‐incident learning. Build observability into optimisation services (KPIs, logs, traces) and manage performance tuning (latency, throughput, cost) across environments. …/ELT, caching strategies, data quality checks, reproducible inputs/outputs. DevOps: CI/CD, infrastructure as code, containerisation (e.g., Docker), monitoring/alerting, incident management. Quality: unit/integration tests, performance tests, model validation frameworks, feature flags. Location & Hours of Work We operate a hybrid working policy ...

cloud infrastructure, delivery platforms, and operational capabilities. You will remain hands‐on across the engineering lifecycle, from architecture and infrastructure design through deployment, observability, incident response, and continuous improvement. We expect you to operate with a high degree of autonomy, make strategic and architectural decisions within your area … incidents, identify root causes, and turn lessons into measurable engineering improvements. Use approved generative AI tools for infrastructure development, automation, testing, pipeline improvement, documentation, incident analysis, and troubleshooting. Provide technical guidance through design reviews, code reviews, pairing, coaching, and hands‐on problem‐solving. WHAT YOU'LL BRING: Significant hands ...

stability of software applications and systems. Provides operational support and leadership for production systems in a \"you-build-it-you-run-it\" culture, including incident response, post-incident learning, and continuous reliability improvements. Leads evaluation sessions with external vendors, startups, and internal teams to drive outcomes-oriented … engineering practices across teams to improve code quality, delivery speed, and operational outcomes (e.g., AI-assisted code review/refactoring, test acceleration, release readiness, incident/root-cause analysis), while establishing measurable validation standards (secure coding, peer review, automated testing) and promoting reuse of proven patterns and automation within ...

onboarding, including SSPM tooling and SaaS security reviews Architect secure identity solutions, including centralised and federated authentication models across complex, cross‐domain environments Support incident response planning and business continuity activities, ensuring cloud‐hosted services meet resilience and recovery objectives Contribute to FinOps activities from a cybersecurity cost ...

services or insurance sectors.Broad knowledge of security domains: network security, endpoint protection, Secure development lifecycle, identity and access management, cloud security (AWS/Azure), incident response, and governance.Hands-on experience with SIEM, EDR, vulnerability management tools, and cloud-native security services.Demonstrable experience applying artificial intelligence (AI), machine learning ...

insurance sectors. Broad knowledge of security domains: network security, endpoint protection, Secure development lifecycle, identity and access management, cloud security (AWS/Azure), incident response, and governance. Hands-on experience with SIEM, EDR, vulnerability management tools, and cloud-native security services. Demonstrable experience applying artificial intelligence (AI), machine ...

make coding agents effective against our stack Improve observability and alerting so that system health is visible and actionable without manual investigation Participate in incident response and post-incident review, treating failures as systemic issues rather than individual ones What We Need Kubernetes & Cloud: Hands-on experience … other basis protected by law. Due to a high volume of candidates, Invisible may use automated decision-maker technologies to filter candidates based on response to our application questions and other provided information. Our use of automated decision-making enables us to be efficient by providing a manageable list ...

Bloomberg is seeking a Security Incident Management professional to coordinate responses to security incidents and high-profile events across its global network. The role emphasizes leadership, delegation, documentation, and defining required response actions rather than deep technical analysis. You will serve in incident management roles such … Incident Commander or Manager during active incidents, ensuring containment, remediation, and clear communication with stakeholders and senior #J-18808-Ljbffr ...

part of your work will involve operating and improving our observability stack built on Grafana and tools from the VictoriaMetrics and Prometheus ecosystems, improving incident detection and response, and developing AI-assisted monitoring capabilities. Working closely with platform, SRE, infrastructure, network, security, application, and ML engineering teams … telemetry: Help define shared standards for OpenTelemetry instrumentation, context propagation, and Collector pipelines. Support teams instrumenting Go, Node.js, and Python services and APIs. Alerting & incident response: Build useful dashboards and alerts, improve notification workflows through PagerDuty, and participate in on‐call rotations. Work with other teams to reduce ...

security experience who can design, configure and improve security solutions across a complex environment. While the candidate should be familiar with security monitoring and incident handling, this role is not suited to someone whose experience is limited to those areas. The successful candidate will be able to understand complex … leading a small team), work effectively with IT; development and business teams and communicate technical risks and recommendations clearly. The role includes participation in incident, change and problem management, with some out-of-hours work required for planned change, maintenance or urgent security response. Education, Skills & Experience Must Have ...

reviews and monitoring KPIs Ensure compliance with IT security policy standards, including encryption, secure disposal, build hardening, monitoring, patching and access controls Lead security incident response and contribute to major incident management control Ensure effective communications outside of the IT team Production of an appropriate IT infrastructure ...

recommendations for engineering teams, and be hands-on in implementing those recommendations. Monitor & Respond: Monitor and analyse system access logs, flag anomalies, and support incident response, containment, and post-incident root cause analysis. Plan for Resilience: Plan and test security backups and disaster recovery processes to keep ...

Engineering) working within the Global Information and Cyber Security Defence (ICSD) function, is the technical leader for enterprise cyber deception and unified detection and response across the Microsoft security ecosystem. The role focuses on building, operating, and continuously evolving an enterprise-grade Insider Risk Management (IRM) and deception programme … detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering unified detection, automated investigation, and response across endpoint, identity, email, and cloud workloads. It combines deep deception engineering expertise with hands‐on Defender XDR mastery and the use of Agentic ...

Tooling & Continuous Improvement Shape delivery practices to support consistency and predictability across global teams. Use delivery metrics (lead time, cycle time, throughput, deployment frequency, incident trends) to drive improvement. Support squads in adopting effective tooling (Jira, Confluence, Miro, dashboards). Champion a culture of learning, experimentation, and operational excellence. … cloud-native environments (AWS, Azure, GCP). Familiarity with microservices, APIs, CI/CD pipelines, DevOps practices, and modern cloud architectures. Experience supporting incident response and post‐incident delivery. Demonstrated ability to identify and manage cross‐team dependencies in scaled engineering organizations. Strong experience with Jira & Confluence ...

security baselines, hardening standards, policy controls and configuration-management practices. Support vulnerability and configuration-risk remediation across Azure and Microsoft security platforms. Support cyber incident investigations and provide security expertise during critical incidents and major technology changes. Produce and maintain High-Level Designs, Low-Level Designs, engineering standards, operating … security-control validation and vulnerability-remediation support. Experience with REST APIs, PowerShell, Python, automation, enterprise troubleshooting and operational support. Experience working with Security Operations, Incident Response, Cloud, Infrastructure, Identity and Architecture teams. Technical Knowledge and Skills Azure security and governance: Azure Policy, Defender for Cloud, Azure Monitor ...