151 to 175 of 240 Incident Response Jobs in the South East

lead detection engineering and automation for its customers. This is a hands-on, customer-facing role. You'll design and deliver detection and response capabilities across SIEM, XDR and SOAR platforms, working alongside a dedicated SOC engineering team. You'll also own a "detection as code" approach, so detections … SIEM and XDR platforms Design use cases aligned to MITRE ATT&CK and assess coverage against customer log sources Develop SOAR automations, integrations and incident response playbooks Deliver detection as code pipelines with structured versioning Lead customer workshops on detection strategy and SOC maturity Produce clear deliverables such ...

resolution of complex and business-critical IT incidents. The role provides technical leadership, mentoring, and guidance to Service Desk colleagues while supporting major incident management, problem management, and continual service improvement. Working closely with infrastructure teams, End User Computing (EUC) engineers, and third-party suppliers, the post holder ensures … Microsoft 365, Windows operating systems, Active Directory, and enterprise technologies. Proven experience leading technical investigations and resolving complex IT incidents. Experience supporting major incident response, root cause analysis, and problem management activities. Strong leadership, mentoring, and coaching skills with the ability to support and develop technical colleagues. Experience ...

with Europe cloud market (hyperscalers, local data centers, partner programs, marketplace motions) * Hands-on understanding of the observability landscape (APM, infra monitoring, logs, tracing, incident response) and how buyers evaluate these tools * Comfortable selling to technical and enterprise buyers (IT, DevOps, Engineering, SecOps) * Strong executive presence, communication ...

industrial control systems. Experience working in highly regulated industries such as utilities, energy or critical national infrastructure. Familiarity with secure operation, monitoring, logging and incident response integration. Our client is at the forefront of transforming Britains water industry, investing significantly to enhance resilience, sustainability, and service excellence. With ...

transformation logic, while proactively monitoring latency, throughput and data fidelity to prevent data loss. We'd love you to have: Knowledge and understanding of incident Response frameworks such as NIST CSF, SOC2 or equivalentKnowledge and understanding of information security architecture and IT security policies relevant to logging (secure ...

improve division’s (and the departments that sit within them) security posture while enabling divisionalobjectives. The role will also support audits, assurance activity, incident response follow-up, and continuous improvement in cyber maturity. This role will manage the divisions cyber security team/resources ...

continuity requirements are met. Cyber Security Support the implementation of infrastructure security best practices. Drive vulnerability remediation and patch governance activities. Support security monitoring, incident response and risk reduction initiatives. Ensure technology services align with organisational security and compliance requirements. Infrastructure Security Working closely with the Head ...

with security teams to implement infrastructure hardening and vulnerability management. Optimise infrastructure costs, energy efficiency and environmental impact. Support operational readiness, performance monitoring and incident response planning. Customer & Stakeholder Engagement Serve as technical authority for infrastructure discussions with senior customer stakeholders. Present architecture recommendations to customer leadership ...

improve division’s (and the departments that sit within them) security posture while enabling divisional objectives. The role will also support audits, assurance activity, incident response follow-up, and continuous improvement in cyber maturity. This role will manage the divisions cyber security team/resources ...

tool landscape and managing lifecycles from sandbox to standardization or retirement. Implement platform-wide observability (metrics, logs, traces), SLOs, cost and performance instrumentation, and incident response processes. Partner with AI Gateway, governance owners, hyperscalers, AI frontier labs for regulated industry features, terms of service and roadmap influence. Optimize ...

drive SRE strategy, including SLAs, SLOs, error budgets and reliability standards Provide technical leadership across complex Kubernetes and OpenShift environments Drive automation across monitoring, incident response, recovery and remediation Shape observability, capacity management and operational readiness practices Act as a senior technical escalation point for major incidents … high-risk releases Lead reliability reviews, toil reduction and blameless post-incident improvements Govern reliability-focused IaC, GitOps and CI/CD practices Mentor Senior SREs and engineers, raising engineering standards across multiple teams and suppliers What we're looking for Strong commercial experience with Kubernetes and OpenShift Proven ...

into platform and service design. Lead the adoption of core SRE practices including reliability reviews, operational readiness and toil reduction. Drive automation across monitoring, incident response, recovery and remediation. Govern reliability-focused Infrastructure as Code, CI/CD pipelines and operational tooling. Identify and remove systemic causes … overhead while improving scalability, resilience and operability. Act as the senior technical escalation point for major incidents and high-risk releases. Lead blameless post-incident reviews and ensure measurable service improvements. Define and oversee observability, monitoring and capacity management practices. Ensure SRE approaches align with security, governance and compliance ...

Line Security Analyst to help ensure the security of clients’ infrastructure and applications. The role involves providing high-quality technical support and leading security incident management, with a requirement to work in the office for training and three days a week thereafter. Candidates should have significant experience, strong communication ...

reports to support governance forums, regulatory reporting and senior decision-making.Maintaining resilience policies, standards, procedures and documentation, helping embed business continuity, crisis management and incident response practices across the organisation.Working closely with Important Business Service Owners, Technology, Operations, Risk and third-party suppliers to coordinate workshops, governance activities … Experience documenting important business services, business processes, critical dependencies and operational risks.An understanding of Business Impact Analysis, impact tolerances, resilience testing, business continuity and incident response.Knowledge of operational resilience frameworks and standards, including ISO 22301 and PRA/FCA operational resilience guidance.Experience supporting risk assessments, issue management, resilience reporting ...

support governance forums, regulatory reporting and senior decision-making. Maintaining resilience policies, standards, procedures and documentation, helping embed business continuity, crisis management and incident response practices across the organisation. Working closely with Important Business Service Owners, Technology, Operations, Risk and third-party suppliers to coordinate workshops, governance activities … documenting important business services, business processes, critical dependencies and operational risks. An understanding of Business Impact Analysis, impact tolerances, resilience testing, business continuity and incident response. Knowledge of operational resilience frameworks and standards, including ISO 22301 and PRA/FCA operational resilience guidance. Experience supporting risk assessments, issue management ...

Operational readiness for new releases Safe production access and change coordination Production is a high-discipline environment. You make sure it stays that way. Incident Management You own the full lifecycle: High‐signal alerting and fast detection Structured incident response Clear internal and customer communication Blameless postmortems … Escalations are fast and predictable. Monitoring & Reliability Define SLIs/SLOs for critical systems Improve visibility across availability, latency, errors, and saturation Track MTTR, incident frequency, and escalation trends Drive reliability roadmap initiatives We measure reliability, and improve it continuously. Team Leadership Lead and grow the Operations team ...

Operational readiness for new releases Safe production access and change coordination Production is a high-discipline environment. You make sure it stays that way. Incident Management You own the full lifecycle: High‐signal alerting and fast detection Structured incident response Clear internal and customer communication Blameless postmortems … Escalations are fast and predictable. Monitoring & Reliability Define SLIs/SLOs for critical systems Improve visibility across availability, latency, errors, and saturation Track MTTR, incident frequency, and escalation trends Drive reliability roadmap initiatives We measure reliability, and improve it continuously. Team Leadership Lead and grow the Operations team ...

Operational readiness for new releases Safe production access and change coordination Production is a high-discipline environment. You make sure it stays that way. Incident Management You own the full lifecycle: High‐signal alerting and fast detection Structured incident response Clear internal and customer communication Blameless postmortems … Escalations are fast and predictable. Monitoring & Reliability Define SLIs/SLOs for critical systems Improve visibility across availability, latency, errors, and saturation Track MTTR, incident frequency, and escalation trends Drive reliability roadmap initiatives We measure reliability, and improve it continuously. Team Leadership Lead and grow the Operations team ...

Operational readiness for new releases Safe production access and change coordination Production is a high-discipline environment. You make sure it stays that way. Incident Management You own the full lifecycle: High‐signal alerting and fast detection Structured incident response Clear internal and customer communication Blameless postmortems … Escalations are fast and predictable. Monitoring & Reliability Define SLIs/SLOs for critical systems Improve visibility across availability, latency, errors, and saturation Track MTTR, incident frequency, and escalation trends Drive reliability roadmap initiatives We measure reliability, and improve it continuously. Team Leadership Lead and grow the Operations team ...

maintain our IT and security policies, then turn them into working processes, technical controls and training that sticks: access reviews, vulnerability management, external testing, incident processes and an easy way to report concerns. Trust, assurance and compliance Customers increasingly want evidence that we take security seriously. You’ll make … make sure we respond well: clear ownership, good communication, recorded decisions, and the underlying issue actually fixed. We already have an established incident process for our product; you’ll extend it to everything else. What this role doesn’t own It covers corporate IT and security, not the platform ...

maintain our IT and security policies, then turn them into working processes, technical controls and training that sticks: access reviews, vulnerability management, external testing, incident processes and an easy way to report concerns. Trust, assurance and compliance Customers increasingly want evidence that we take security seriously. You’ll make … make sure we respond well: clear ownership, good communication, recorded decisions, and the underlying issue actually fixed. We already have an established incident process for our product; you’ll extend it to everything else. What this role doesn’t own It covers corporate IT and security, not the platform ...

maintain our IT and security policies, then turn them into working processes, technical controls and training that sticks: access reviews, vulnerability management, external testing, incident processes and an easy way to report concerns. Trust, assurance and compliance Customers increasingly want evidence that we take security seriously. You’ll make … make sure we respond well: clear ownership, good communication, recorded decisions, and the underlying issue actually fixed. We already have an established incident process for our product; you’ll extend it to everything else. What this role doesn’t own It covers corporate IT and security, not the platform ...

maintain our IT and security policies, then turn them into working processes, technical controls and training that sticks: access reviews, vulnerability management, external testing, incident processes and an easy way to report concerns. Trust, assurance and compliance Customers increasingly want evidence that we take security seriously. You’ll make … make sure we respond well: clear ownership, good communication, recorded decisions, and the underlying issue actually fixed. We already have an established incident process for our product; you’ll extend it to everything else. What this role doesn’t own It covers corporate IT and security, not the platform ...

maintain our IT and security policies, then turn them into working processes, technical controls and training that sticks: access reviews, vulnerability management, external testing, incident processes and an easy way to report concerns. Trust, assurance and compliance Customers increasingly want evidence that we take security seriously. You’ll make … make sure we respond well: clear ownership, good communication, recorded decisions, and the underlying issue actually fixed. We already have an established incident process for our product; you’ll extend it to everything else. What this role doesn’t own It covers corporate IT and security, not the platform ...

element of the role is advancing cyber security and data quality, ensuring compliance with national standards and safeguarding sensitive patient information. You will lead incident response, risk management, and continuous improvement, while shaping policies and strategies that strengthen the Trust's digital maturity. We are looking … dealing with disciplinary matters Desirable ITIL 3/4 Specialist training in areas such as: o Cyber Security o Risk Management o Certified Incident Manager o PRINCE2/agile project management qualifications o MSP Previous experience of working in digital in the NHS or a healthcare setting. Skills Essential ...