126 to 150 of 240 Incident Response Jobs in the South East

full time in the office) Salary: £50,000 - £60,000Role and responsibilities Senior technical authority in Security Operations, improving security engineering, detection and response while supporting the wider team. Lead serious incidents, forensic investigations and root cause analysis. Develop detections, automation and orchestration; conduct proactive threat hunting. Engineer Sentinel … support compliance and mentor colleagues. Experience and qualifications Substantial SOC, cyber operations or security engineering experience. Hands-on Sentinel, Defender XDR and CrowdStrike expertise. Incident response, malware analysis, forensics and threat hunting. Advanced KQL; PowerShell and/or Python automation. Entra ID, Conditional Access, Intune and Microsoft ...

client of mine is looking for a hands-on Penetration Tester to support their cybersecurity function, with some responsibilities across security operations and incident response. The right candidate will have experience conducting infrastructure, Web Application, API, Cloud and Active Directory penetration tests within complex environments. Key Requirements: Proven commercial … such as Pentera, AppCheck, Microsoft Defender, Splunk, CrowdStrike or similar. Exposure to vulnerability management and working with technical teams to remediate findings. Comfortable supporting incident response activities, including triage, investigation and containment. Experience using SIEM and security monitoring tools for alert analysis and threat detection. Strong communication skills ...

/CD pipelines and drive adoption of GitOps practices Build self-service tooling that lets product teams ship without platform bottlenecks Improve observability, incident response and SLO tracking Lead infrastructure-as-code standards using Terraform Champion security and cost optimisation across the platform Essential Requirements 5+ years ...

across network and cloud environments. Manage and improve firewall, IDS/IPS, and vulnerability management solutions. Identify security weaknesses and drive remediation activities. Support incident response and security investigations. Improve infrastructure logging, monitoring, and threat detection capabilities. Partner with global teams to strengthen security standards and best practices. ...

differing technologies within the environment. Excellent command of Cybersecurity organization practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies. Ability to identify network attacks and systemic security issues as they relate to threats and vulnerabilities, with focus on recommendations for enhancements ...

Experience Experience preparing environments ahead of external penetration testing. Exposure to regulated, critical infrastructure or highly secure environments. Experience working alongside Security Operations or Incident Response teams. Microsoft or security certifications such as SC-200, SC-300, SC-400, AZ-500, CISSP or CCSP. Suitable Backgrounds This role ...

meet regulatory and business requirements. Identifying and mitigating cyber risks. Enabling secure cloud adoption and ensuring robust platform and integration security. Supporting governance, audits, incident response, resilience planning, and security assurance. Influencing senior stakeholders and helping organisations make informed security decisions. What You'll Bring: Proven experience leading ...

management. Putting AI or ML models into production, LLM features included. Infrastructure as code with Terraform, Ansible or similar, plus configuration management. Observability and incident response: metrics, logging, tracing. Message queues, event-driven architectures or data pipelines. Also Welcome Kubernetes. Deploying, running or debugging workloads, including K3s, RKE2 ...

security release plan. Monitoring, reliability and recovery. Own observability (Application Insights, Log Analytics), alerting, backups and disaster recovery, including periodic DR tests. Lead incident response for platform issues and run blameless root-cause reviews. Cost management. Monitor and optimise Azure spend across environments and clients; right-size resources ...

ready solutions and address architectural gaps using modern microservices and cloud-native patterns. Own production health for your services, contributing to on-call rotations, incident response, and post-incident reviews in a "you build it, you run it" environment. Identify, analyse, and resolve system availability, reliability ...

ready solutions and address architectural gaps using modern microservices and cloud-native patterns. Own production health for your services, contributing to on-call rotations, incident response, and post-incident reviews in a "you build it, you run it" environment. Identify, analyse, and resolve system availability, reliability ...

base articles in line with best practices Automate security tasks and toolchains using scripting (PowerShell, Batch, etc.) Collaborate with external SOC teams Prepare post-incident reports and root cause analyses Manage end-user device (EUD) security via MS Intune, Sophos and NinjaOne Schedule and assess vulnerability scans on critical … driven changes Produce weekly security operations reports Manage Cisco Umbrella web filtering and SSL inspection policies Requirements: Previous hands-on experience in SecOps or Incident Response Recognised Security certifications such as Security+, CEH, or Microsoft security certifications Strong knowledge of Microsoft Windows OS security and hardening Working PowerShell ...

storage and processing that underpins data across the organisation. Principal Data Engineers are expected to lead the data lifecycle from development to deployment, monitoring, incident response, performance optimisation, and deprecation in line with modern DevOps principles. Leading agile teams and supported by senior engineers, this role involves building … support the secure and scalable delivery of data. Maintain and operate data products, ensuring their availability, performance, and resilience through monitoring, alerting, patching, and incident resolution. Assure code and automation scripts to manage data flows. Lead service reviews, health checks, and root cause analyses to improve data processing reliability ...

storage and processing that underpins data across the organisation. Principal Data Engineers are expected to lead the data lifecycle from development to deployment, monitoring, incident response, performance optimisation, and deprecation in line with modern DevOps principles. Leading agile teams and supported by senior engineers, this role involves building … support the secure and scalable delivery of data. Maintain and operate data products, ensuring their availability, performance, and resilience through monitoring, alerting, patching, and incident resolution. Assure code and automation scripts to manage data flows. Lead service reviews, health checks, and root cause analyses to improve data processing reliability ...

compliance, including role-based access controls, change management, audit readiness, data protection, and adherence to organisational policies and best practices Lead system support, incident resolution, and service delivery, acting as an escalation point for complex issues, coordinating with stakeholders, and ensuring system availability, performance, and service excellence Oversee integrations … align technology solutions with business objectives across complex, multi-site organisations Strong governance, security, and service management knowledge, including access controls, compliance, audit requirements, incident, change, and problem management, and adherence to regulatory standards such as GDPR and ISO 27001 Excellent stakeholder, vendor, and communication skills, able to influence ...

Develop and implement Group-wide IT & Cyber Security strategy Own security policies, governance frameworks and risk registers Lead cyber risk assessments, remediation and incident response Oversee external security partners and supplier security audits Lead annual penetration testing and security awareness programmes Support Cyber Essentials, Cyber Essentials Plus … knowledge Experience with Cyber Essentials, Cyber Essentials Plus, ISO 27001 or similar Practical knowledge of security technologies and SIEM platforms Cyber security risk and incident management experience Excellent stakeholder and communication skills A commercially minded, proactive and solutions-focused approach Willingness to travel within Europe when required This ...

functional requirements and acceptance criteria for availability, recoverability, performance, security, accessibility and support. Ensure technical designs include suitable monitoring, alerting, backup, disaster recovery and incident response considerations. YOU ARE A MATCH IF... Education: A degree in Computer Science, Software Engineering or related discipline, or equivalent professional experience. Relevant … queues, API Management, Azure SQL, Cosmos DB, containers and monitoring services. Strong understanding of CI/CD, automated testing, code quality controls, observability, incident diagnosis, reliability engineering and DevSecOps practices. Knowledge of application security, identity and access management, OWASP guidance, threat modelling, privacy by design and relevant compliance requirements. ...

high-performing server, storage, and data centre environments. Owning disaster recovery, backup, and resilience capabilities, ensuring recovery objectives are achieved and regularly tested. Managing incident response, root cause analysis, capacity planning, and infrastructure service improvements. Driving infrastructure strategy, technology adoption, operational efficiency, and compliance with governance and cybersecurity ...

availability Implement self-service tooling to empower development teams Drive DevOps best practices across the digital product lifecycle Develop and enhance monitoring, observability, and incident response processes Support global engineering teams delivering high-traffic platforms Key Requirements Proven experience supporting digital product delivery in a DevOps or platform ...

processes to improve efficiency Contribute to infrastructure-as-code and DevOps pipelines Develop proactive monitoring strategies and support security best practices Participate in incident response, threat simulation and operational runbooks Collaborate with development teams to resolve technical issues and support deployments Design systems with high availability and disaster ...

acting as a subject matter expert Advise and collaborate with stakeholders across the business on maintaining secure business systems Contribute to production support and incident response activities as required Skills, Knowledge and Expertise Essential skills and experience: A degree in a relevant discipline or equivalent experience Demonstrable professional ...

product/vendor selection and Missional contract negotiation, to mitigate security threats and ensure ongoing contract compliance Take organisational responsibility for IT security incident response planning at security breach investigation, and assist with any associated disciplinary, public relations and legal matters, to enable recovery and legal compliance ...

platform(includes ML and LLM workloads) - model serving and inference infrastructure (GPU-backed endpoints, autoscaling, latency and cost tradeoffs), with SLOs, on-call, and incident response that cover models, not just services Observability(includes ML models) - drift and performance monitoring for ML, plus LLM-specific tracing, evals ...

next generation of cyber talent. Work directly with customers and stakeholders, becoming a trusted cyber security adviser. Build expertise in threat intelligence, content engineering, incident response, and security operations strategy. What You'll Be Doing As a Tier 3 Security Analyst, you'll play a pivotal role … protecting customer environments by: Developing innovative methods to detect threats and uncover anomalous behaviour. Leading complex security investigations and coordinating response activities during incidents. Driving proactive threat hunting activities across customer environments. Producing actionable cyber threat intelligence and sharing key findings with stakeholders. Acting as the technical escalation point ...

About the RoleThis AWS Security Engineer position involves securing AWS-hosted environments with a focus on identity and access management, vulnerability management, compliance, and incident response. The engineer will collaborate closely with internal technical teams and external stakeholders to mitigate security risks and maintain a strong cloud security posture … management controls in AWS environments* Conduct regular vulnerability assessments and manage remediation efforts* Ensure compliance with industry standards and regulatory requirements* Develop and execute incident response plans to address security incidents* Collaborate with cross-functional teams to enhance overall cloud security* Continuously monitor and analyze security logs ...