1 to 25 of 45 Incident Response Jobs in Scotland

Senior SOC Engineer A leading organisation is seeking a Senior SOC Engineer to strengthen its security operations capability and drive continuous improvement across detection, response, and automation. This pivotal role requires deep expertise in IBM QRadar, with a strong focus on playbook development, analytical rule creation, and threat modelling. … Senior SOC Engineer will play a key role in building and optimising detection and response strategies, ensuring robust protection against evolving threats. Key Responsibilities SIEM Engineering & Management Deploy, configure, and maintain the QRadar SIEM platform. Onboard and normalise log sources across on-premises and cloud environments. Develop and optimise ...

company grows. You'll build our IT security function from the ground up — covering device management, identity and access, infrastructure controls, and incident response — while also owning the compliance and AI governance work that keeps enterprise customers confident in how we operate. It's a hands‐on, build … tools like Okta. Own infrastructure and cloud security controls across our environment (e.g. AWS), working closely with Engineering to keep systems hardened. Security Operations & Incident Response Lead security incident response — full lifecycle investigations, coordinating with internal teams and external partners (e.g. SOCaaS providers), and running post ...

backed schemes including Tax-Free Childcare, Help to Save, Court Funds Office and Help to Buy. Be at the centre of decision-making Lead incident response activities, work directly with senior stakeholders and clients, and drive service recovery during high-profile operational events. Grow your career Develop expertise … incident management, stakeholder engagement, service improvement and data analytics, with opportunities to influence strategic decisions and progress into senior service management and leadership roles. Role Purpose The Business Incident Manager is responsible for the end-to-end management of business incidents impacting the NS&I B2B account, supporting ...

learning products. As the team takes end-to-end ownership of the platforms it runs, you will build the CI/CD, observability, and incident-management practices that keep those services stable, secure, and performant across international markets. This is a Vice President-level role and an integral part … evolves the team's CI/CD pipelines, release automation, and deployment tooling Establishes reliability practices (SLOs, error budgets, runbooks) and leads production incident response and post-incident review Builds and operates observability across the team's AI/ML services (metrics, logging, tracing, alerting) Automates infrastructure ...

learning products. As the team takes end-to-end ownership of the platforms it runs, you will build the CI/CD, observability, and incident-management practices that keep those services stable, secure, and performant across international markets. This is a Vice President-level role and an integral part … evolves the team's CI/CD pipelines, release automation, and deployment tooling Establishes reliability practices (SLOs, error budgets, runbooks) and leads production incident response and post-incident review Builds and operates observability across the team's AI/ML services (metrics, logging, tracing, alerting) Automates infrastructure ...

support). Monitor, analyse, and investigate network traffic and emerging threats, including active DDoS activity. Support customer maintenance, upgrades, and technical communications. Contribute to incident response and post-incident reviews that sharpen our detection and mitigation playbooks. Work within ITIL processes (Incident, Change, Problem, Service Requests … A+, Network+, Security+, CySA+, or CyberOps. If youre early in your career and hungry to build deep expertise in network security, traffic analysis, and incident response, this role was designed for you. Bright Purple is an equal opportunities employer: we are proud to work with clients who share ...

production at scale, with deep instrumentation and strong operational rigor. You will partner across engineering to deliver secure software, improve stability, and lead incident response and continuous improvement. Job Responsibilities Design, develop, troubleshoot, and deliver secure, high-quality production software and services for AI infrastructure Build backend services … parallelism, speculative decoding) Lead reliability engineering for LLM endpoints through capacity planning, load/soak testing, safe rollouts (blue/green, canary), failover, and incident response for outages and model-quality regressions Participate in an on-call rotation, lead incident triage and mitigation, and produce clear post ...

production at scale, with deep instrumentation and strong operational rigor. You will partner across engineering to deliver secure software, improve stability, and lead incident response and continuous improvement. Job responsibilities Design, develop, troubleshoot, and deliver secure, high-quality production software and services for AI infrastructure Build backend services … quantization, parallelism, and speculative decoding Lead reliability engineering for large language model endpoints through capacity planning, load and soak testing, safe rollouts, failover, and incident response for outages and model-quality regressions Participate in on-call rotations, lead incident triage and mitigation, and produce clear post-incident ...

production at scale, with deep instrumentation and strong operational rigor. You will partner across engineering to deliver secure software, improve stability, and lead incident response and continuous improvement. Job responsibilities Design, develop, troubleshoot, and deliver secure, high-quality production software and services for AI infrastructure Build backend services … quantization, parallelism, and speculative decoding Lead reliability engineering for large language model endpoints through capacity planning, load and soak testing, safe rollouts, failover, and incident response for outages and model-quality regressions Participate in on-call rotations, lead incident triage and mitigation, and produce clear post-incident ...

information security programmes. Ability to provide credible cyber security advice to both technical and non-technical stakeholders. Experience working across security architecture, cyber engineering, incident response or closely related cyber security disciplines. Strong understanding of information security controls, risk management and security governance principles. Excellent communication and presentation … solutions. Commitment to continuous professional development and staying current with evolving cyber threats and technologies. Experience in a cyber security architecture, senior engineering or incident response role. Professional certifications such as CISSP, CISM, C-CISO, CISA or equivalent industry-recognised accreditation. Experience delivering virtual CISO (vCISO) services. Experience ...

defend Morgan Stanley Network. The Cyber, Data, Risk and Resilience (CDRR) division provides first-line defences for information and cyber security, fraud, resilience, response and recovery, and technology risk and controls. The organization also includes Morgan Stanley's Firmwide Data Office, International Technology offices, and the Non-Financial Risk … bring to the role: 3-5 years of experience directly in Cybersecurity related fields (Hunt, Intelligence, Detection Engineering, Blue Teaming, Pen testing, Incident Response, SOC Operations, Cyber Risk) or relevant educational experience. Ability to work with customers, gather requirements and distil them into complete solutions. Detailed understanding ...

Technical Support Manager, you will lead the operational support, maintenance and resilience of high-availability Operational Technology systems. You will oversee service delivery and incident response while ensuring that patching, vulnerability remediation and planned maintenance activities are managed effectively. The role will also involve workforce planning, capability development … leadership of a technical support team. Key responsibilities Lead the operational support and maintenance of high-availability OT systems. Manage incident response, fault diagnosis, system recovery and operational resilience. Oversee service delivery across the supported OT environment. Coordinate OT patching, maintenance and vulnerability remediation activities. Plan and allocate ...

hundred real tickets a month alongside a monthly patching cycle. The service runs inside the customer's own ServiceNow platform and their ITIL-aligned incident, request and change processes. You won't be introducing our tooling — you'll be making our delivery work well inside theirs, and evidencing that … named Service Delivery Manager, accountable for service governance, performance reporting and escalation Own attainment of the contracted service levels and KPIs, including incident response and resolution SLAs, patch compliance, backup and restore success, DR test compliance and repeat incident rate Manage the service credit regime — track exposure ...

Engineer Scotland/Hybrid Schedule: Rotating shift (includes nights/weekends) Salary up to £80,000 You will own incidents end-to-end across Incident, Major Incident, Change, Problem, and Service Request workflows (ITIL-aligned), leading real-time response to live DDoS attacks and complex network events … cybersecurity, or infrastructure Degree in Computer Science or a related field Strong networking fundamentals TCP/IP, routing, Layer 13 troubleshooting Proven experience in incident response and customer-facing technical roles The temperament to own and resolve incidents under real pressure Excellent communication skills clear, calm, customer-ready ...

high-quality production code, and reviews and debugs code written by others. Adds to team culture of diversity, opportunity, and respect. Develops and maintains incident response procedures, including root cause analysis and postmortem documentation. Required Qualifications, Capabilities, and Skills: Experience with formal training or certification on software engineering … concepts. Strong understanding of SRE principles, including SLIs, SLOs, error budgets, and incident management. Ability to manage highly technical team of Site Reliability Engineers. Experience leading teams in the safe use of enterprise-authorized AI capabilities within the work environment for reliability engineering workflows, including validation habits and awareness ...

prompt and configuration changes, with automated eval and regression checks before promotion. Reliability engineering: Define and track SLOs and SLAs for platform services, run incident response and root cause analysis, and write post-mortems people will read. On-call and runbooks: Take part in the programme … GitLab CI, Argo CD, Jenkins or similar. Observability: Hands‐on with Datadog, Prometheus, Grafana or OpenTelemetry, and opinionated about what's worth alerting on. Incident management: Calm, methodical instincts under pressure, and a habit of fixing the class of problem rather than the instance. AI and ML operations: Experience ...

particularly across Kubernetes and container images Triage and validate vulnerabilities, including developing PoCs where appropriate Manage IAM and key management controls Support product security incident response, root-cause analysis and remediation Develop detection engineering capabilities, IDS/IPS rules and technical runbooks Monitor emerging threats and continuously improve ...

Kubernetes, etc.). Proficiency in observability tools (Prometheus, Grafana, ELK, OpenTelemetry). Security-first mindset with hands‐on experience in access control, encryption, and incident response. Solid networking knowledge - protocols, routing, firewalls, and cloud networking. Experience integrating and optimizing software delivery ecosystems (Git, Artifactory, Jenkins) as part ...

Falcon. You will play a key role in ensuring services are efficient, resilient, and continuously improving - working closely with internal teams to evolve detection, response, and automation capabilities. What your days will look like Lead day‐to‐day operations across Analysis and Engineering teams delivering Managed Cyber Defence services. … ongoing client interactions related to service delivery and performance. Provide technical leadership, maintain awareness of relevant security technologies, and drive continuous improvements in detection, response, and key SOC metrics (MTTD, MTTR, automation coverage). The role is for you if: You have experience of embedding AI tooling within ...

Security Operations team to proactively identify and address cybersecurity threats, drive operational excellence, and enhance our security posture. You'll lead strategic initiatives, supervise incident response, manage critical security projects, and foster a collaborative environment, ensuring top-tier system performance and adherence to security policies. Power without pause. … Provide hands-on expertise in the delivery of internal security projects and technical support for operational excellence. Act as a technical escalation point for incident management, ensuring prompt resolution and the consistent implementation of security processes and compliance. Collaborate closely with external suppliers and manage key security service forums ...

facilitate seamless product feature releases, adhering to established TechOps peer-review processes. Monitor application-level health within the cluster, collaborating with TechOps on incident response and driving post-mortems for engineering-led deployments. Maintain clear documentation, deployment runbooks, and developer self-service guides to streamline the engineering onboarding ...

scalability, performance and security Responding to production incidents, diagnosing complex technical issues and restoring services Carrying out root cause analysis and contributing to post-incident reviews Building automation to reduce manual and repetitive operational tasks Using Infrastructure as Code to improve the consistency and scalability of environments Working closely … solid background within Site Reliability Engineering, DevOps, Platform Engineering or a similar environment Terraform and Infrastructure as Code experience Strong production troubleshooting and incident response experience Experience supporting highly available production environments A strong understanding of reliability, scalability and automation Experience with scripting or programming, ideally PowerShell ...

environments, and state management Improve operability of services by adding and using observability tooling including logs, metrics, traces, dashboards, and alerts, and participate in incident response and root-cause analysis Leverage enterprise-authorized AI coding assist tools within the work environment to improve code quality, delivery speed … through test strategy improvements, refactoring, static analysis, and dependency hygiene Experience with deployment and operational best practices including safe releases, rollbacks, environment configuration, and incident readiness Familiarity with common architecture patterns such as event‐driven designs, async processing, caching, API versioning, and backward compatibility Experience collaborating effectively in agile ...

Technical Support Manager to lead the operational support, maintenance and resilience of high-availability operational technology (OT) systems, with a focus on incident response, service delivery, patching and vulnerability remediation. This is a hands-on operational leadership role covering the day-to-day support and operational management … core OT platforms, including DMS, SCADA, data historians, telemetry and communications systems. The successful candidate will own incident management, fault diagnosis and recovery within a high-availability environment, lead OT patching and vulnerability remediation activity, and manage resourcing, capability and development across a technical team. This role suits ...

Experience serving, scaling, and monitoring ML models or data-intensive services in production (MLOps) Practical experience with observability tooling (metrics, logging, tracing) and production incident response Experience operating ML/LLM workloads in production (LLMOps, inference reliability, cost/performance management) Strong communication skills and the ability ...