326 to 350 of 769 Incident Response Jobs in London

Conduct risk assessments, internal audits, compliance reviews and Data Protection Impact Assessments (DPIAs). Support the management of security incidents, business continuity planning and incident response exercises. Maintain ISO 27001 documentation, including the Statement of Applicability, and coordinate internal and external audits. Work closely with Cyber Security, Group ...

identify suspicious activities and anomalous behaviours. Recommend and implement improvements to security policies, procedures, and controls. Assist in the development and maintenance of incident response plans and playbooks. Maintain accurate and detailed records of security incidents and investigations. Prepare and present reports on security metrics, trends, and incidents ...

Security technologies. Understand threat modelling, attack paths, cloud misconfigurations, identity risks, vulnerabilities, and how to prioritise remediation based on exploitability and business impact. Understand incident response, cyber recovery, and how exposure management can reduce the likelihood and impact of security incidents. Understand security operations centre functions ...

CISSP, cloud security certs) is a plus Nice to Have Prior experience as a software engineer Hands-on cybersecurity background (SOC/detection engineering, incident response, offensive security, cloud security, security engineering) Experience in the UK or European security market Experience building technical sales motions in early-stage ...

requirements and controls to sprint cycles and platform roadmaps Provide technical security assurance for application deployments, third‐party integrations, and SaaS product onboarding Support incident response planning and contribute to cloud resilience and recovery design for client-hosted services Communicate security risks and remediation priorities clearly to technical ...

controls. Help establish governance and assurance from POC through to production. Address data access, permissions, IAM, DLP and non-human identity risks. Develop AI incident response and assurance approaches. Assess AI models, vendors and third-party risks. Lead client workshops and contribute to proposals and pre-sales. Develop ...

production. Implement and evolve Infrastructure as Code (IaC) using Terraform on AWS. Support live production AWS/EKS environments, including on-call rotation, incident response, root cause analysis, and blameless post-mortems. Automate provisioning, configuration, scaling, observability, and secure workload access across AWS services. Collaborate on improving system ...

will contribute to infrastructure decisions and service architecture within our Azure environment, support observability, monitoring and alerting for production services, and participate in incident response and root cause analysis when issues arise. You will take end-to-end ownership of features from technical design through to delivery ...

privileged access reviews and entitlement governance. Assist with audit evidence and remediation activities relating to SOX, PCI DSS, GDPR and other applicable requirements. Support incident response by providing identity information, access logs and technical assistance with containment activities. Contribute to reducing legacy authentication and unnecessary privileged access. Monitoring ...

team focused on high-value work rather t Continuously improve delivery and operational metrics (e.g. cycle time, deployment frequency, change failure rate, and incident response), using data to identify bottlenecks and raises the bar over time. Manage team engineers across various seniority levels and disciplines while staying hands ...

engineers and beyond to enable, support and accelerate their data needs, embracing a platform as product mindset Uphold operational excellence: building scalable services, leading incident response and root cause analysis, and continuously improving the health and performance of our data platform. Champion scalable best practices through automation, clear ...

. Relevant Google Cloud certifications , such as Developer, Solutions Architect or Security. Experience implementing cloud security practices including secure coding, threat modelling, compliance and incident response. Open-source contributions or a strong track record of technical knowledge sharing. Experience leading multi-team initiatives spanning infrastructure, application and platform engineering. ...

business; Receive mentoring, development, and training to ensure your skills are kept up to date; Have an opportunity to contribute to SRE and incident response. Who will you work with Lead Platform Engineer, Engineering Team etc. About you Hands‐on experience with running services in the cloud ...

Security Lead & Cyber Vulnerability Manager who will be responsible for leading the organisations operational cyber security capability, ensuring the delivery of security operations, cyber incident management and infrastructure and cloud vulnerability management across the enterprise. Providing operational leadership for the identification, assessment and remediation of cyber security risks … will drive the organisations security position across infrastructure, cloud services and third parties. This includes security monitoring, incident response, threat intelligence, vulnerability assessment and ensuring all risks are managed taking into account business priorities and regulatory requirements. This role works closely with the CISO and will ...

ready to scale. What you’ll do: Own and evolve platform strategy across Azure and AWS Drive operational resilience, disaster recovery, business continuity and incident readiness, including recovery objectives and resilience testing Design, build and modernise production infrastructure Champion Terraform and Infrastructure as Code Improve observability, service ownership, SLOs … incident response, on-call practices and reliability engineering Improve CI/CD, deployment workflows, developer environments and internal platform tooling Partner with the CISO on cloud security, access, secrets and infrastructure risk Improve cloud cost, capacity, performance and vendor management Lead major infrastructure migrations, platform modernisation and security ...

network infrastructure into a coherent detection stack Write, test, and maintain detection rules that reduce noise and measure coverage against real attacker behaviour Lead incident response from detection through containment, eradication, and post-mortem; own the IR runbooks and keep them tested through tabletop exercises Perform forensic analysis … initial access, persistence, privilege escalation, exfiltration) and can map an investigation to it Comfortable scripting in Python or similar to automate enrichment, triage, and response Strong ownership mindset: sees things through end-to-end with little guidance Desirable Deep familiarity with an EDR platform (CrowdStrike, SentinelOne, Defender ...

identify trends in team velocity, providing early warnings and performance feedback to the Product Lead, escalating concerns with capacity and velocity where necessary. Incident Response & Escalation: Monitor and oversee incident management, proactively driving engineering teams to escalation and follow through with stakeholder informing when necessary. Voice ...

management life cycle of code, third party and platform vulnerabilities, ensuring remediation paths are transparent, risk-based, and tracked to closure. Security Operations & Incident Response: Oversee detection engineering, continuous threat monitoring, and serve as the accountable executive for major incident escalations. 2. Platform & Infrastructure Engineering Cloud & Developer ...

auto-remediate global SaaS infrastructure. What you'll do Technical Leadership & Architecture: Define the technical roadmap and architecture for AI-assisted observability, automated incident response, and self-healing cloud infrastructure. Agentic Workflows & Tooling: Design and build production-grade AI agents, MCP tool integrations, and deterministic evaluation pipelines … quality guardrails. Reliability & Scalability Engineering: Partner with application and infrastructure teams to define SLIs/SLOs, handle error budgets, and lead deep-dive post-incident reviews (PIRs). Mentorship & Collaboration: Mentor senior and mid-level engineers, establish engineering best practices, and drive alignment across global development and operations teams. ...

managing SIEM systems, developing use cases, and refining security monitoring practices. Ensuring the integrity and performance of security infrastructure and collaborating closely with incident response teams to detect and respond to threats are key components of the role. Success hinges on delivering robust security solutions and continuously improving … Build and optimise security tools for detection, remediation, and orchestration. Design, implement, and maintain SIEM workspaces and develop custom queries for threat hunting and incident investigation. Develop, test, and deploy advanced threat detection use cases based on vulnerability insights. Analyse security controls and collaborate with the SOC team ...

environment Proactively identify risks, bottlenecks, and failure patterns before they impact users Define and track appropriate SLIs/SLOs for critical services Conduct post‐incident reviews and drive lasting improvements Supporting AI‐Augmented Development A large proportion of the solutions you will support are built rapidly using structured … scale Actively use AI tools (e.g. Claude, Copilot, or similar) to accelerate your own work: writing scripts, diagnosing issues, generating runbooks, reviewing configurations Diagnosis & Incident Response Take ownership of vague or ambiguous production issues (e.g. “it’s running slow”, “the server keeps falling over”) and drive them through ...

sound engineering trade‐offs around scalability, maintainability, performance, and product impact. Own reliability and operational excellence, including telemetry, SLOs, error budgets, on‐call rotations, incident response, and continuous service improvement. Champion DevOps practices, including CI/CD, deployment automation, monitoring, and application‐level operations. Collaborate with Platform Engineers … Experience designing and building scalable APIs, services, and cloud‐native applications. Strong understanding of DevOps practices, including CI/CD, deployment, monitoring, automation, and incident response. Experience delivering secure, observable, high‐quality production software. Strong focus on code quality, automated testing, documentation, performance, and maintainability. Ability to lead technical ...

security best practices across the business. Administer security tools, including multi-factor authentication (MFA), mail filtering and Anti-Virus software. Participate in vulnerability management, incident response coordination, and system security reviews. Help maintain system documentation, asset registers, and compliance records in line with IT policies and data protection … Process & Documentation Maintain up‐to‐date documentation of IT systems, configurations, procedures, and security protocols. Support the continuous improvement of IT operational processes and incident management workflows. Skills & Experience Required Proven experience in a Systems Analyst, IT Support Analyst, or Desktop Support role, ideally within a retail, luxury ...

also drives continuous improvement in third-party cyber risk processes, tooling and reporting, working closely with internal partners such as Procurement, Supplier Management and Incident Management, as well as key external providers and industry stakeholders.Role responsibilitiesAct as the FCA’s cyber lead for Third Party Risk Management, setting strategy … England Critical Third Party oversight regimeAct as the cyber lead for third-party incidents, providing risk assessment, technical advice and support for supplier engagement, incident response and senior decision-makingDrive continuous improvement of third-party cyber risk capabilities through process optimisation, tooling, horizon scanning, enhanced management information ...

monolith to microservices on EKS. Define standards for containers, runtime environments, observability, tenancy, security, and infrastructure automation. Lead SRE practices including SLI/SLOs, incident management, DR/BCP planning, post-mortems, and operational resilience. Own platform security, secure SDLC, CI/CD pipelines, IaC, and software supply chain … networking, KMS, RDS, and multi-account architecture. Hands-on Kubernetes, CI/CD, Terraform, and cloud security experience. Strong understanding of SRE, observability, incident response, and disaster recovery. Experience operating within regulated environments such as ISO 27001, SOC 2, or GxP. Comfortable balancing strategic leadership with hands ...