276 to 300 of 739 Incident Response Jobs in London

What You'll Be Doing Protect and secure Windows and Linux environments across corporate and production infrastructure Enhance endpoint security controls, monitoring, detection, and response capabilities Help design, implement, and maintain cloud security controls across Azure and other cloud environments Partner with software engineers to embed security throughout … remediation Build and improve DevSecOps capabilities within CI/CD pipelines Lead vulnerability management activities, including scanning, prioritisation, risk assessment, and remediation tracking Support incident response investigations and security monitoring activities Develop security automation to improve operational efficiency and reduce risk Contribute to security architecture reviews and technology ...

What You'll Be Doing Protect and secure Windows and Linux environments across corporate and production infrastructure Enhance endpoint security controls, monitoring, detection, and response capabilities Help design, implement, and maintain cloud security controls across Azure and other cloud environments Partner with software engineers to embed security throughout … remediation Build and improve DevSecOps capabilities within CI/CD pipelines Lead vulnerability management activities, including scanning, prioritisation, risk assessment, and remediation tracking Support incident response investigations and security monitoring activities Develop security automation to improve operational efficiency and reduce risk Contribute to security architecture reviews and technology ...

Monitor and triage security alerts within Splunk SIEM. Investigate security incidents including phishing attacks, credential abuse, malicious process activity, and suspicious network traffic. Support incident response activities through containment and escalation procedures. Maintain detailed security case documentation and investigation notes. Contribute towards operational metrics including MTTD and MTTR … detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with Windows, Linux, authentication systems, and endpoint security logs. Strong communication and stakeholder engagement skills. Desirable Skills ...

report directly to the CTO and have broad scope across the platform (from CI/CD pipelines to multi‐tenant APIs to incident response on authentication flows). Responsibilities Own the secure SDLC: drive SAST, dependency scanning, secrets detection, and PR‐blocking standards across every repository. Harden … Threat‐model product features before they ship, new Auth provider, expanded multi‐tenant APIs, connector executions, agent tool‐calling paths etc. Build detection and response capability around credential and authentication flows, with observability that closes incidents fast. Partner with engineering to raise the bar day‐to‐day: architecture reviews ...

Server, and NAT Gateway. Support hybrid connectivity, including site-to-site and point-to-site VPN and ExpressRoute, monitoring gateway health and assisting with incident response alongside the Network Operations team and carriers. Maintain name resolution across Azure and on-premises using Azure DNS, Private DNS zones … troubleshooting, scripting, and documentation, validating all outputs for accuracy and security. Document runbooks, troubleshooting guides, and known-issue write-ups, and communicate ticket and incident status clearly to technical and non-technical stakeholders. Required Qualifications: Hands-on experience in network, cloud, or platform engineering, including at least 4 years ...

clients on applying AI to modernise IAM — including intelligent access governance, anomalous behaviour detection, AI-driven privileged access controls, and identity threat detection and response (ITDR) — and on securing the identities within AI systems themselves, including machine identities, non-human principals, and access to models, training data, and inference … driven security and the security of AI systems Architect AI-powered security solutions spanning threat detection, SIEM/SOAR modernisation, anomaly detection, automated incident response, and predictive risk modelling Define security architectures for AI pipelines, data platforms, model registries, and inference environments, embedding security from design through ...

performance and resource consumption. Improve metrics, logs, dashboards and alerts so the team can spot trouble coming. When something goes wrong, lead the technical response, root‐cause analysis and preventative actions. Ensure we can recover as effectively as we can run. Help maintain and test our backup, resilience … generation, and software supply‐chain security. You use Python or Bash regularly and can demonstrate tooling you've developed and maintained. You understand observability, incident response, root‐cause analysis and production reliability. You've helped engineers grow through collaboration and shared problem‐solving. You lead by example ...

Microsoft Defender and Microsoft Sentinel, integrating infrastructure and security tooling for monitoring and detection. When incidents happen, you’ll coordinate and technically lead the response alongside our external Security Operations Centre (SOC). You’ll drive our compliance and accreditation work for ISO 27001, Cyber Essentials, NIST and CMMC … infrastructure, including Microsoft Defender and Sentinel. You’ll have solid networking fundamentals, including VLANs, switches, firewalls, routing and VPNs, and experience supporting security incident response and vulnerability management. You’ll also have working knowledge of security frameworks such as ISO 27001, NIST and Cyber Essentials, with experience supporting ...

testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct incident response planning and tabletop exercises Advise C-level executives on security strategy and risk management Requirements 8+ years in information security with consulting ...

enforce security and technical standards * Lead Infrastructure as Code (IaC) practices across teams and environments * Drive observability, monitoring, logging and audit controls * Support incident response, patching, compliance reporting and technical debt remediation * Partner with developers and delivery teams to improve engineering quality and security * Document security processes, controls ...

observability capabilities. * Ensure platform resilience, availability and operational readiness. * Manage configuration, secrets and environment controls. * Embed security best practice throughout the delivery lifecycle. * Support incident response, troubleshooting and continuous improvement activities. * Work across engineering and assurance teams to ensure environments meet security and operational requirements. * Drive automation ...

with developers, business analysts and client stakeholders to deliver timely solutions. Contributing to ongoing improvements in system reliability, monitoring and support processes. Participating in incident response and out-of-hours support activities when required. What You'll Bring You'll ideally hold a relevant technical qualification and have ...

atdifferent stagesof their careers, from developing practitioners through to experienced specialists. Candidates with strengths in Threat Hunting , Detection Engineering , SOC Operations , or Security Monitoring & Incident Response are encouraged to apply. You do not need to meet every requirement listed below. If you have strong experience ...

maintain disaster recovery, backup and failover strategies Strengthen infrastructure security across areas including network policies, secrets management and platform hardening Establish and improve incident response processes, on‐call practices, runbooks and blameless post‐mortems Work with our Data team to support reliable and scalable PostgreSQL and MongoDB environments ...

particular focus on access controls across the environments and data within the cloud infrastructure. Monitor solutions for critical security events and build investigation and incident response plans, including aiding the configuration and use of logging and SIEM tools. Offer consultancy as an SME to all business units ...

controls for internal versus external (client-facing) views of agent behaviour, including how outputs are reviewed, sanitised or gated before release. Define rollback and incident-response procedures for agentic systems, so a compromised or misbehaving agent can be safely withdrawn or reverted. Track emerging regulatory expectations relevant ...

high-bar requirements of frontier model providers, so that compliance accelerates the research agenda rather than slowing it. Own the cluster-side incident response capability. When something happens to the compute cluster, CI/CD pipelines, or model artefacts — a credential leak, a suspicious training job, an anomalous ...

incidents and make informed operational decisions. What we're looking for: Strong hands on experience with Microsoft Defender XDR. Experience working within Security Operations, Incident Response or Detection & Response environments. Ability to explain technical concepts clearly to operational teams. Confidence delivering training and facilitating discussions. Commercial ...

reliability, performance, and scalability of our platforms Set technical direction through design reviews, architecture proposals, and clear written documentation Participate in and improve incident response, and drive the follow-through that keeps the same incident from recurring Improve the cost effectiveness of our cloud footprint through visibility ...

restore testing and recovery readiness across critical platformsSupport high availability solutions and service resilience initiativesImplement proactive monitoring, alerting and observability for database servicesParticipate in incident response, problem management and post-incident reviewsDrive continual improvement through automation, root cause analysis and operational learningReduce operational toil through self-healing … observability experience within enterprise environmentsAutomation experience using PowerShell, Python or similar scripting languagesStrong understanding of database security, access control and governanceExperience working within structured incident, problem and change management processesStrongly PreferredPostgreSQL administration and engineering experienceExperience supporting enterprise data warehouse environmentsDatabricks administration or integration experienceAzure cloud platform experienceInfrastructure-as-Code ...

planning, code reviews, architecture sessions, and retrospectives to drive delivery outcomes Establishes reliability goals and implements observability, resilience patterns, and operational readiness practices Leads incident response and post-incident reviews to improve production stability and performance; identifies recurring issues and drives automation/remediation Upholds secure ...

such as GPS)–which are increasingly vulnerable to disruption from solar storms,jammingand spoofing. This will underpin essential services, including: Telecommunications, Online banking, Emergency response, Transport networks,and Wider digitaland data-drivenoperations. Together, these services form the backbone of modern society-and your leadership will help ensure theyremainsecure,reliableand … robust evenifglobal navigation satellite systems fail. Key Responsibilities: Manage the monitoring of services, networks and applications , ensuring timely response to operational events, alerts and incidents. Coordinate incident management activities , driving investigations, escalations and service restoration. Lead Change Enablement activities , ensuring requests are appropriately assessed, reviewed and implemented. Manage ...

part of this role is leading our adoption of AI within operations — using LLM-based tooling, agentic workflows, and automation to reduce toil, accelerate incident response, and raise the operational leverage of the whole department. We're not looking for someone to write a strategy deck about … engineering teams********SRE & reliability***** ****Define and drive SLOs, error budgets, and observability standards (metrics, logging, tracing) across the platform***** ****Take part in post-incident reviews and help with the resulting reliability work to completion***** ****Continuously reduce toil through automation — if we've done it manually twice, you're already ...

services and minimises the impact of technical incidents. Technical problem‐solving – Diagnoses and resolves faults efficiently, demonstrating sound technical judgement and attention to detail. Response and resolution times – Meets agreed service levels for incident response, escalation, and resolution. Operational support – Provides effective support to production, newsroom … supporting live outside broadcasts and remote productions. Knowledge of audio, video, encoding, streaming and transmission technologies. Experience with system monitoring tools, observability platforms and incident management processes. Understanding of cybersecurity principles within broadcast and media environments. Experience participating in engineering projects, upgrades, system implementations or technology deployments. Relevant technical ...

Research in London is seeking a Senior CSIRT Analyst to join the Cyber Security Incident Response Team, specialising in cloud detection and response across AWS and hybrid environments. You will investigate, respond and proactively hunt for threats across a diverse technology landscape. As a senior member … mentor junior analysts, contribute to automation initiatives, support the on-call escalation rota, and work with Elastic, Azure and AWS to strengthen detection and response #J-18808-Ljbffr ...