351 to 375 of 769 Incident Response Jobs in London

also drives continuous improvement in third-party cyber risk processes, tooling and reporting, working closely with internal partners such as Procurement, Supplier Management and Incident Management, as well as key external providers and industry stakeholders. Role responsibilities Act as the FCA’s cyber lead for Third Party Risk Management … Critical Third Party oversight regime Act as the cyber lead for third-party incidents, providing risk assessment, technical advice and support for supplier engagement, incident response and senior decision-making Drive continuous improvement of third-party cyber risk capabilities through process optimisation, tooling, horizon scanning, enhanced management information ...

detection content that security operation teams depend on, and hunt proactively for threats that existing controls do not catch, working alongside threat intelligence, incident response, and red team functions to keep coverage grounded in real adversary behavior. Responsibilities Detection Engineering - Design, build, test, and maintain detection content across … evaluate their output Malware analysis, digital forensics, or reverse engineering fundamentals Specific Technologies SIEM platforms including Splunk and Elasticsearch. Endpoint detection and response platforms including Tanium, CrowdStrike, and SentinelOne. Network detection and response tooling and network traffic analysis. MITRE ATT&CK. Scripting and automation in Python or PowerShell. ...

requires a credible engineering background. The successful candidate is expected to work directly across Azure platform engineering, CI/CD, Bicep/ARM, automation, incident response and operational controls, while leading the team and setting standards. They must be able to challenge technical decisions, understand operational risk … mode, rollback and supportability thinking; involve senior engineers and technical leadership where specialist authority is required. Own platform SLAs/SLOs, service health, major-incident command, root-cause analysis, disaster recovery, business continuity testing and continuous service improvement. Operational Controls, Standards & Compliance Take day-to-day ownership within ...

Knowledge of automation, API integrations, telemetry pipelines, and security orchestration. Experience scripting with PowerShell, Python, or Bash. Strong understanding of SOC operations, detection engineering, incident response, and attacker methodologies. Excellent stakeholder engagement skills with the ability to communicate technical concepts to both technical and non-technical audiences. Experience … architecture roles. This is a fantastic opportunity for an experienced SOC Engineer who wants to shape the future of a modern Managed Detection & Response service while working with one of the industry's leading security platforms. ...

configurations, owners, evidence and testing methods. * Act as the senior technical escalation point for complex or high-severity incidents and participate in the major incident on-call arrangements. * Design and strengthen identity security using Microsoft Entra ID, Conditional Access, Privileged Identity Management, identity governance, workload identities, access reviews … identity security, Zero Trust, cloud security, data security, endpoint security, network security, application and API security, secure software development and DevSecOps. * Strong experience in incident response, detection engineering, threat hunting, vulnerability or exposure management and security automation. * Ability to automate security and assurance processes using technologies such ...

maintain and debug reproducible multi-language CI pipelines, and optimize CI performance across large compute clusters. Build and maintain infrastructure observability, alerting, runbooks, and incident response workflows for Fractile's infrastructure. IaC TODO Scale and maintain Fractile's Bazel monorepo as we continue growing across Python, C++, Rust … Pulumi) Experience with monitoring and observability tooling (Prometheus, Grafana, or similar) Working knowledge and practice of DevOps/SRE principles: SLOs, alerting design, incident management, and on‐call practice Strong proficiency in at least one systems or scripting language used for tooling (Python preferred; Go or Rust also relevant ...

infrastructure. You’ll be responsible for the reliability, scalability, and operability of our systems. That means CI/CD pipelines, infrastructure‐as‐code, observability, incident response, and the day‐to‐day health of production. You’ll make sure we can ship with confidence and sleep at night. Shape … code (we use Terraform, SST/CDK) A strong grasp of what it takes to keep production systems reliable: CI/CD, observability, incident management, capacity planning Experience designing systems that scale – and debugging them when they don’t Enough breadth across the stack to understand how infrastructure decisions ...

securely generated, stored, and used. Execution of audits to monitor, identify and assess vulnerabilities in the banks infrastructure/software and support the response to potential security breaches. Identification of advancements in to support the innovation and adoption of new cryptographic technologies and techniques. Collaboration across the bank, including … Ping Identity platforms (PingGateway, PingAM, PingIDM) is a plus Experience in using AI-assisted security scanning tools and automated security testing frameworks Background in incident response, security monitoring, and building threat detection capabilities for identity-related threats Security certifications such as CISSP, CEH, OSCP, or equivalent demonstrating deep ...

Prometheus and Grafana Understanding of OS patching for Windows Server and RHEL as part of governance practices Background in risk management, compliance frameworks and incident response processes Excellent leadership, communication and stakeholder management skills #J-18808-Ljbffr ...

remediation Improving IT policies, processes, security awareness and governance Leading infrastructure upgrades, migrations and continuous improvement projects Supporting backup, disaster recovery, business continuity and incident response Maintaining compliance with security frameworks including Cyber Essentials Plus and ISO 27001 Managing relationships with IT suppliers, licensing providers and third-party ...

differing technologies within the environment. Excellent command of Cybersecurity organization practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies. Ability to identify network attacks and systemic security issues as they relate to threats and vulnerabilities, with focus on recommendations for enhancements ...

proportionate, practical controls Challenging network, infrastructure and cloud configurations constructively with engineers and suppliers Providing expertise and oversight across vulnerability management, security monitoring and incident response Explaining security risk and its business impact clearly to Executives Seeing improvements through to implementation with teams who do not report ...

throughout the software delivery lifecycle Optimise Azure environments for performance, scalability, reliability and cost efficiency Support model-serving infrastructure and AI observability capabilities Lead incident response and drive continuous improvement across production environments Work closely with engineering teams delivering microservices and distributed cloud-native applications Required Experience Significant ...

including least‐privilege access controls, secrets management, encryption, network segmentation, and auditability Improve platform reliability through observability tooling — logging, metrics, and tracing — alongside alerting, incident response practices, and performance and cost optimization Collaborate with stakeholders to translate business and technical requirements into scalable platform designs, and document standards ...

Developing endpoint security standards for Windows and macOS platforms. Automating security processes, reporting and evidence collection using PowerShell, Microsoft Graph and related technologies. Supporting incident response, threat investigations and vulnerability remediation activities. Contributing to Zero Trust initiatives and the secure onboarding of newly acquired businesses. ...

Gateway, CloudWatch) Own both application code and infrastructure (Infrastructure as Code, e.g., Terraform) Design and maintain CI/CD pipelines for reliable deployments Support incident response and continuous reliability improvements Mentorship & Team Enablement Provide technical mentorship and architectural guidance Support hiring and onboarding of engineers Encourage thoughtful adoption ...

risk, governance, and control teams to support audit evidence collection, reporting, and policy adherenceSupport runtime security tooling for production risk visibility and contribute to incident response activities including triage, investigation, and runbook development Leverages enterprise-authorized AI coding assist tools within the work environment to improve code quality ...

self-service networking and platform engineering capabilities that improve consistency, reliability, and speed of delivery. Develop AI-enabled operational capabilities that support network investigation, incident response, change validation, observability, and workflow automation. Define architecture standards, engineering patterns, and technology roadmaps for enterprise-wide adoption. Partner with cloud, security ...

into the pipeline, managing secrets, enforcing least‐privilege access, and working with engineering teams to remediate vulnerabilities early. Build and improve monitoring, alerting, and incident response so issues are caught and resolved before they become outages. Mentor other engineers, contribute to architecture decisions, and help shape the team ...

automation that let engineers focus on code, not friction. Pioneer AI-assisted DevOps — explore and implement ways AI can streamline builds, deployments, monitoring, and incident response. Drive CI/CD excellence: fast builds, safe deployments, quality gates, and the ability for product teams to ship independently. Own cloud security ...

business intelligence tools and data-driven KPIs. Cybersecurity & Governance Background in implementing cybersecurity strategies across enterprise and operational domains. Experience in threat detection, and incident response. Knowledge of regulatory requirements and governance frameworks (e.g., ISO 27001, NIST). Budgeting & Resource Allocation Strong financial management skills, including budgeting, forecasting ...

active SC Clearance to own and manage a critical ServiceNow platform within a secure enterprise environment. The role combines technical platform ownership, service management, incident leadership and stakeholder engagement, ensuring the ServiceNow service remains secure, stable and continuously improved. Participation in an on-call rota for major incidents … Responsibilities Own the ServiceNow platform and associated services. Manage service performance, availability, SLAs and continual improvement initiatives. Provide ServiceNow Development expertise when required Lead Incident, Problem and Change Management activities. Coordinate and lead major incident response and resolution. Act as the technical authority for ServiceNow enhancements, upgrades ...

debugging workflows. Build observability for GPU utilization, memory pressure, queue depth, saturation, token throughput, request latency, failed workloads, capacity pressure, and spend. Drive reliability, incident response, alerting, runbooks, and post-incident improvements for always-on AI compute infrastructure. Evaluate and integrate new hardware, cloud instance families, specialized … optimizing compute costs while maintaining clear performance, reliability, and availability expectations. Experience building observable systems with useful metrics, logs, traces, dashboards, alerts, and incident workflows. Comfortable working in high-stakes, always-on environments where uptime, throughput, correctness, and operational discipline are critical. Clear communicator who can translate infrastructure tradeoffs ...

Y TREE is seeking a security-focused analyst to join the Technology team in London. You will monitor, detect, respond to threats, and remediate vulnerabilities while coordinating with an externally managed SOC. The role emphasizes ...

analysts to watch dashboards, we're building the AI-driven system that does the watching: it triages alerts, investigates, and takes the first response action, so the humans on the team spend their time on the work that needs a human. Our goal is to automate every event … both the Blue Team's software and the team itself. This is an engineering leadership role first. The team writes software: detection pipelines, automated response, the agents, and the integrations that tie them into Clio's products and infrastructure. You'll lead that team, set its technical direction ...