26 to 50 of 258 Incident Response Jobs in London

responsible for leading both our Cloud Platform and Enterprise Service orgs: Leading and developing two engineering teams — Cloud Platform (cloud infrastructure, observability, SRE, incident response) and Enterprise Services (IT support, IAM, Okta, Slack and core SaaS) — setting technical direction, hiring and performance standards across both. Delivering the reliability … performance and cost-efficiency of the cloud platform underpinning production services, including SLOs, on‐call and incident response practices, and post‐incident learning, in line with the broader infrastructure strategy. Executing the roadmap for enterprise services and identity, treating internal IT as an engineering discipline — automation‐first ...

Developer Empowerment: Building and maintaining 'golden path' templates for secure service deployment, enabling feature teams to confidently and safely push code without compromising security. Incident Response: Contributing expertise to the security incident response team, helping to swiftly and effectively manage and resolve security events. What ...

trusted engineering partner to the desk, ensuring systems are stable, performant, and aligned with business needs. Support live trading environments, including incident response, root cause analysis, and post mortem leadership. Work as a core member of the software engineering team, participating in daily standups and design discussions. Contribute … across trading systems, including automated remediation, self‐healing workflows, and resilience engineering. Use enterprise‐authorized AI capabilities within the work environment to accelerate major‐incident triage, troubleshooting, and post‐incident analysis, validating outputs and handling operational data according to sensitivity and security requirements. Lead reuse‐first adoption ...

Role Title: Information Security Senior Consultant – Detection and Response (Europe & Americas) About Westpac: Westpac is one of the world’s oldest banks and a leading financial services organisation with a strong presence across Australia, New Zealand and key international markets. We support individuals, businesses and institutions through a broad … with our customers and communities. About the Team: This role is a core part of Westpac’s global 24/7 cybersecurity monitoring and incident response capability - the bank’s first line of cyber defence. How will I help? You will be responsible for analysing and responding ...

responsible for leading both our Cloud Platform and Enterprise Service orgs: Leading and developing two engineering teams — Cloud Platform (cloud infrastructure, observability, SRE, incident response) and Enterprise Services (IT support, IAM, Okta, Slack and core SaaS) — setting technical direction, hiring and performance standards across both. Delivering the reliability … performance and cost-efficiency of the cloud platform underpinning production services, including SLOs, on-call and incident response practices, and post-incident learning, in line with the broader infrastructure strategy. Executing the roadmap for enterprise services and identity, treating internal IT as an engineering discipline — automation-first ...

security policies, standards and procedures. Leading security awareness and training programmes that improve behaviours and strengthen Moneybox’s security culture. Owning Moneybox’s security incident response framework, ensuring the business is prepared to identify, contain, respond to and recover from security incidents effectively. Overseeing vulnerability management, including scanning … operational efficiency. Experience managing security risk in cloud‐based environments, ideally including Azure. Strong understanding of third‐party security risk management. Experience with incident response planning, testing and improvement. Experience reporting security risks, controls and metrics to senior management. Strong communication skills, with the ability to translate technical ...

security policies, standards and procedures. Leading security awareness and training programmes that improve behaviours and strengthen Moneybox’s security culture. Owning Moneybox’s security incident response framework, ensuring the business is prepared to identify, contain, respond to and recover from security incidents effectively. Overseeing vulnerability management, including scanning … operational efficiency. Experience managing security risk in cloud‐based environments, ideally including Azure. Strong understanding of third‐party security risk management. Experience with incident response planning, testing and improvement. Experience reporting security risks, controls and metrics to senior management. Strong communication skills, with the ability to translate technical ...

Security Manager IT Security Manager opportunity for a security leader with a strong SecOps/Incident Response background and broad cyber security management experience to lead a team of 11 across SecOps, Engineering, Architecture and MSSP management, driving security operations and strategic initiatives across on-premises and cloud … function across both on-premises and cloud environments, ensuring the effective delivery of security operations and strategic security initiatives. Leverage your strong SOC and Incident Response background to oversee threat detection, incident management, vulnerability management, and the continuous enhancement of security capabilities. Manage and develop a team ...

critical national infrastructure programme. You will engage with suppliers, systems integrators, emergency services and wider government stakeholders. Key responsibilities Support cyber security operations, including incident response, vulnerability management and threat monitoring. Work with suppliers and systems integration partners to ensure security deliverables meet contractual and programme requirements. Support … development of an end-to-end Security Operations Centre. Review and maintain operational procedures, incident playbooks and security reporting. Lead and contribute to security governance forums. Advise stakeholders on security risks, mitigations and incident handling. Support security investigations and coordinate activity across programme, government and emergency-service teams. ...

KPMG is seeking a Cyber Response & Recovery Manager (German speaker) to lead reactive DFIR engagements in the CRS Team within Cyber Advisory. This hands-on role requires managing medium to large incidents, coordinating with the leadership, and developing in-house response capabilities. You will travel on short notice … when not responding, help mature clients' incident response capabilities. Based in London or Manchester, the role offers exposure to national critical incidents, opportunities #J-18808-Ljbffr ...

high-performing Information Security team, fostering accountability, engagement, and continuous improvement. Drive the Bank's cyber defence capability, overseeing security operations, threat intelligence, incident response, vulnerability management, and technical assurance activities. Strengthen governance frameworks, ensuring ongoing compliance with FCA, PRA, operational resilience, and industry security standards. Build trusted … within a regulated financial services environment. Strong understanding of industry recognised frameworks such as ISO 27001, NIST, and CIS. Experience leading Security Operations, cyber incident response, governance, and risk management activities. Strong technical understanding of cloud security, identity and access management, enterprise infrastructure, and third-party security risk. ...

model.Ensure compliance with recognised security frameworks including ISO 27001, NIST Cyber Security Framework and IEC 62443.Lead security architecture, Security Operations Centre (SOC), vulnerability management, incident response and cyber resilience activities.Conduct technology and cyber risk assessments, developing mitigation plans and providing executive reporting.Lead business continuity and disaster recovery planning.Champion … strategies. (E)Demonstrated experience managing enterprise infrastructure including cloud, networking, datacentres, storage, end-user computing and cyber security technologies. (E)Experience leading Security Operations, incident response, vulnerability management, technology transformation and cloud migration programmes. (E)Experience managing technology budgets, strategic suppliers, managed service providers and vendor contracts. ...

that everything else runs on. You'll work across the full platform lifecycle—from infrastructure design and provisioning through to CI/CD, observability, incident response and cost optimisation. The role suits someone who pairs strong infrastructure-as-code discipline with a genuine automation-first mindset … Pulumi, CloudFormation or equivalent) and the workflows around it Operate Kubernetes clusters and supporting platform services Implement observability—metrics, logs, traces, dashboards, alerting Lead incident response, root-cause analysis and reliability improvements Drive cloud cost optimisation and capacity planning Implement security hardening, secret management and compliance controls Partner ...

instrumental in defining and upholding Service Level Objectives (SLOs) and Service Level Indicators (SLIs), implementing effective monitoring and alerting strategies, and leading operational incident response processes. What you'll do The core responsibility is to implement, maintain, and continuously improve the foundational platform infrastructure that powers all engineering … controlled, and auditable. Proactively manage the capacity of the infrastructure to consistently meet or exceed Service Level Objectives for latency, error rates, and availability. Incident Response and Post‐Mortems: Act as first‐line responders for critical system incidents. Triage, diagnose, and resolve complex production issues rapidly. Drive ...

core priority of this role. The successful candidate will take a leading part in strengthening and evolving the firm's security posture in response to an increasingly sophisticated threat landscape, including emerging risks associated with AI. This is a technically demanding role that combines proactive security ownership with infrastructure … office‐based and requires five days per week on‐site presence. Key Responsibilities Lead the firm's security operations function, owning threat detection, incident response, and vulnerability management end‐to‐end Monitor, triage, and respond to security events across the environment, including log analysis, anomaly detection, and threat ...

Flagstone is seeking a senior security engineer to own and operate detection and incident response across our Azure cloud security stack. You will work hands-on with Microsoft Sentinel, Defender for Cloud, and XDR tooling, while coordinating remediation with engineering squads. You'll drive security through code, pipelines ...

Docker, Kubernetes (GKE/AKS/EKS), and Cloud Run. Implement comprehensive monitoring and observability using Vertex AI Inspector, LangSmith, or Azure Monitor. Drive incident response and post-mortems for production AI system failures. Act as a technical lead on key AI engineering workstreams, shaping architecture and approach. … Google AI SDKs Vertex AI Azure AI services LangGraph CrewAI RAG pipelines Soft Skills leadership mentoring collaboration problem-solving communication design discussions code review incident response optimisation best practices #J-18808-Ljbffr ...

Docker, Kubernetes (GKE/AKS/EKS), and Cloud Run. • Implement comprehensive monitoring and observability using Vertex AI Inspector, LangSmith, or Azure Monitor. • Drive incident response and post-mortems for production AI system failures. • Act as a technical lead on key AI engineering workstreams, shaping architecture and approach. … Google AI SDKs Vertex AI Azure AI services LangGraph CrewAI RAG pipelines Soft Skills leadership mentoring collaboration problem-solving communication design discussions code review incident response optimisation best practices #J-18808-Ljbffr ...

Prima is seeking a Security Engineer focused on Incident Response to join our Security Team. You will work within a vibrant engineering culture with 350+ engineers across software, infrastructure, operations and security. The role emphasizes proactive monitoring, detections, and automation to safeguard data and drivers on our platform. ...

primarily remote role with occasional on-site visits to London. You will be working within a security operations function, supporting the monitoring, detection and response to security threats across the organisation's estate. You will bring solid hands-on experience across SIEM and log management tooling, working independently … following: Hands-on experience with Splunk in a SOC environment Cribl experience for log management and data pipeline optimisation Security monitoring, threat detection and incident response Working within a security operations centre at a mid-senior level SC clearance held or ability to pass Interested? Please apply below. ...

autonomy while encouraging responsible AI adoption, experimentation, and innovation. We are seeking a Senior Software Engineer, Cloud to join our Threat Detection and Incident Response (TDIR) team and help revolutionize security management with our AI-native Falcon Next-Gen SIEM platform, enabling customers to detect, investigate, and hunt … scale. You’ll design, architect, and develop world-class case management and investigation capabilities in Go, building workflows that connect detections, evidence, and response actions into cohesive cases. You’ll leverage advanced correlation, contextual enrichment, and AI/ML-powered insights to help security teams prioritize threats and automate ...

growth and innovation. You’ll define and lead our security strategy, establish governance and compliance frameworks, strengthen cloud and third‐party security, and drive incident response and resilience planning across the organisation. About You Experience & Expertise 10+ years’ experience in information security, including leadership‐level responsibility Proven experience … building and scaling security and privacy programmes within growing organisations Strong hands‐on knowledge of GDPR, PCI‐DSS, incident response, and resilience planning Experience working within cloud‐first environments, ideally AWS Strong understanding of security within e‐commerce, fintech, or customer‐data‐led businesses Comfortable operating as both ...

United Kingdom. The role focuses on defining and overseeing information security strategy, policies and governance to protect critical assets. The successful candidate will drive incident response, risk management and regulatory compliance, while partnering with executive leadership to align security with business goals and deliver measurable security improvements. #J ...

cyber security function spanning both on-premises and cloud environments. This role is ideal for a security leader with expertise in SecOps and Incident Response, dedicated to managing a skilled team and overseeing the delivery of strategic security operations. Offering a competitive day rate ...

coding practices are integrated throughout the SDLC Track, analyse, and manage application vulnerabilities, using AI-assisted triage and prioritisation to guide remediation efforts Support incident response by investigating application-related security incidents Stay current on the latest security threats, vulnerabilities, and technologies to enhance our security posture Your … genuine interest in going deeper into application security Comfortable with secure coding practices and at least one of: threat modelling, risk assessments, or incident response, with appetite to grow across the rest Proficiency in programming languages such as TypeScript, Python, or similar Experience with cloud and cloud security ...