26 to 50 of 75 Incident Response Jobs in the South East

Protection department. Our team is responsible for designing, implementing, configuring, and maintaining security tools used across Elsevier Technology. You will collaborate with colleagues from Incident Response, Threat Engineering, Governance Risk & Compliance (GRC), and work closely with business users to ensure our security tools are effectively adopted throughout … DevOps methodologies. We value practical experience applying IT security principles across areas such as Network Security, Security Operations, Vulnerability Management, Risk Management, and Incident Response. Responsibilities Collaborate within the security engineering team to design and implement security tooling. Design, build, and maintain AWS cloud infrastructure using Infrastructure as Code ...

large enterprise or manufacturing environment. Applicants should possess extensive technical knowledge across a broad range of security technologies, including enterprise firewalls, endpoint detection and response (EDR), security information and event management (SIEM), network detection and response (NDR), Secure Access Service Edge (SASE), network access control (NAC) and enterprise … email security platforms. Candidates should have proven experience managing organisation-wide patching strategies, vulnerability management programmes and incident response processes, alongside strong knowledge of Active Directory, Windows Server environments, virtualisation platforms and enterprise networking technologies. Experience securing operational technology (OT) environments or manufacturing infrastructure would be highly advantageous ...

other passenger-facing devices that are critical to daily service delivery. You will lead a multi-disciplinary team responsible for ensuring high availability, rapid incident response, and seamless customer experience across all front office technology. Key Responsibilities Lead the end-to-end support and operation of front office … major incidents affecting ticketing systems, gates, validators, kiosks, and associated platforms , coordinating rapid resolution with engineering and field teams. Drive operational excellence across: Incident management Ticket prioritisation and queue management Root cause analysis (RCA) Service performance and uptime Work closely with field engineers, maintenance teams, and operational stakeholders ...

maintain security tooling across cloud environments Work with engineering teams to improve security, reliability, and operational resilience Implement monitoring, logging, and alerting solutions Support incident response, troubleshooting, and continuous improvement activities Contribute to automation initiatives and security-by-design practices Requirements Experience working with AWS cloud environments Hands ...

maintain security tooling across cloud environments Work with engineering teams to improve security, reliability, and operational resilience Implement monitoring, logging, and alerting solutions Support incident response, troubleshooting, and continuous improvement activities Contribute to automation initiatives and security-by-design practices Requirements Experience working with AWS cloud environments Hands ...

maintain security tooling across cloud environments Work with engineering teams to improve security, reliability, and operational resilience Implement monitoring, logging, and alerting solutions Support incident response, troubleshooting, and continuous improvement activities Contribute to automation initiatives and security-by-design practices Requirements Experience working with AWS cloud environments Hands ...

performance optimisation Oversee DNS migrations, upgrades, and transformations Implement and maintain DNS security (DNSSEC, DDoS protection, threat mitigation) Monitor performance, availability, and ensure robust incident response processes Act as escalation point for complex DNS/network issues and lead root cause analysis Drive automation using scripting (Python, PowerShell ...

into CI/CD pipelines and DevSecOps practices. Proven capability in risk assessments, threat modeling, and control gap analysis. Experience collaborating with SOC and Incident Response teams during security events. Working knowledge of security frameworks and regulations (NIST, ISO 27001, CIS, GDPR, etc.). Ability to translate technical ...

standards. Reviewing and enhancing information security policies, procedures and controls. Responding to potential security incidents in collaboration with the wider IT team. Assisting with incident response, investigation, containment and recovery activities. Developing and improving cyber security monitoring, detection and alerting capabilities. Monitoring internal and external threat landscapes … tools and controls. Good understanding of ISO27001 and/or other recognised Information Security frameworks. Experience in risk assessment, threat detection, vulnerability management and incident response. Strong analytical and problem-solving skills with the ability to perform under pressure. Excellent communication skills with the ability to explain technical concepts ...

experience assessing security risks, processes, controls, and vulnerabilities to determine appropriate mitigation actions. Technical Security Expertise. Strong understanding of defensive cyber security principles, monitoring, incident response, vulnerability management, and security best practice. Governance and Accountability. Experience of owning security outcomes and ensuring compliance with organisational policies, standards ...

experience assessing security risks, processes, controls, and vulnerabilities to determine appropriate mitigation actions. Technical Security Expertise. Strong understanding of defensive cyber security principles, monitoring, incident response, vulnerability management, and security best practice. Governance and Accountability. Experience of owning security outcomes and ensuring compliance with organisational policies, standards ...

vulnerability management — focused on outcomes and automation • Data Loss Prevention and Identity Lifecycle controls (JML) in Entra ID and key SaaS platforms • Supporting incident response and triage of alerts requiring business context • Influencing engineering, product, and senior stakeholders on security direction What We're Looking ...

Security Analyst, youll act as a senior technical escalation point within the SOC, supporting the wider analyst team while leading the investigation and response to sophisticated cyber threats and incidents. Youll work closely with internal security teams, customers, and stakeholders to continuously evolve detection capabilities, improve operational maturity … work, candidates must have current SC clearance and be eligible to obtain UK Government DV clearance. What Youll Be Doing Lead the investigation and response to complex cyber security incidents across high-security customer environments Act as a senior escalation point for Tier 1 and Tier 2 analysts during ...

organisation maintains a robust, resilient, and compliant security posture. Key Responsibilities Lead and manage the delivery of Security Operations services, ensuring effective monitoring, detection, response, and remediation of cyber threats. Provide oversight and governance of network infrastructure security, availability, resilience, and performance. Lead, develop, and mentor a multidisciplinary team … aligned to recognised frameworks including ISO 27001, NIST Cybersecurity Framework, CIS Controls, and other relevant standards. Manage security incidents, major cyber events, and crisis response activities. Build strong relationships with internal stakeholders, ensuring security requirements support business objectives. Oversee third-party suppliers, SOC providers, and security partners, ensuring service ...

organisation maintains a robust, resilient, and compliant security posture. Key Responsibilities Lead and manage the delivery of Security Operations services, ensuring effective monitoring, detection, response, and remediation of cyber threats. Provide oversight and governance of network infrastructure security, availability, resilience, and performance. Lead, develop, and mentor a multidisciplinary team … aligned to recognised frameworks including ISO 27001, NIST Cybersecurity Framework, CIS Controls, and other relevant standards. Manage security incidents, major cyber events, and crisis response activities. Build strong relationships with internal stakeholders, ensuring security requirements support business objectives. Oversee third-party suppliers, SOC providers, and security partners, ensuring service ...

ability to thrive in a fast-paced Managed Service Provider (MSP) environment. Responsibilities: Utilize AI-enabled support tools and knowledge platforms to improve incident resolution times and service quality. Support Microsoft 365, Entra ID, Intune, Defender, Teams, SharePoint Online, and related cloud services. Assist with endpoint management, mobile device … established service metrics including SLA attainment, ticket quality, first-contact resolution, and customer satisfaction goals. Participate in after-hours support, escalation rotations, and major incident response activities as required. All other responsibilities delegated by the Management team. May be asked to provide on-site technical support to system ...

cyber security strategy and governance (aligned to various frameworks e.g. ISO27001, NIST, Cyber Essentials) overseeing security operations (SOC, threat detection, vulnerability management etc.), and incident response plans risk management and compliance, ensuring compliance with various standards and frameworks About you Applicants for the Cyber Security Engineer role will ...

issues Maintain and configure observability platforms such as Datadog Proactively monitor production and other environments to ensure stability, availability, security and integrity Participate in incident response, troubleshooting, and root cause analysis to mitigate and prevent future issues Work closely with engineering, support and operations teams to upskill ...

skills develop. The core focus of the role is AWS-hosted environment security, complemented by identity and access management, vulnerability management, compliance support and incident response. You will work closely with their Engineering, Platform, Infrastructure and Support teams, as well as external stakeholders. A starting salary of around ...

fast-paced environment. What you'll be doing: Monitoring and investigating security alerts and incidents. Triaging and responding to security events. Supporting incident response activities. Improving detection rules and SOC processes. Producing incident reports and documentation. What we're looking for: Previous SOC Analyst experience. Experience with ...

Platform, Fabric) Drive Infrastructure as Code and automation (Azure/Terraform/Bicep) Improve release, deployment, and environment management Own monitoring, logging, alerting, and incident response Support secure access and identity (Entra ID) Work with engineering teams to take solutions into live production Champion DevOps culture and continuous … Hands-on CI/CD with Azure DevOps and/or GitHub Infrastructure as Code experience (Terraform or Bicep) Experience supporting production systems and incident management Understanding of cloud security and governance Strong communication and stakeholder skills This is a fully remote role with an excellent opportunity to build ...

environments into SIEM/SOC platforms Develop and tune OT threat detection rules Conduct OT security assessments, gap analysis, and remediation planning Support OT incident response and investigation activities Collaborate with engineering and operations teams to implement secure changes Produce governance documentation, standards, and reporting artefacts Track ...

analysis. Oversee security operations including vulnerability scanning, penetration testing, and assessments. Manage and optimise security tooling (Firewalls, VPNs, IDS/IPS, EDR). Lead incident response activities, ensuring swift mitigation and root cause analysis. Collaborate across engineering, architecture, and compliance teams to embed security-by-design. What youll ...

duplication, and support maintainable, secure and high-performing systems. Improve delivery capability through platform reliability and DevOps maturity Continuously strengthen deployment pipelines, observability, alerting, incident response, recovery procedures and operational readiness across Field Ops engineering teams. Manage stakeholders and maintain clear communication Build trusted relationships across product, operations … data quality controls. Ability to produce both high-level and detailed design specifications. Experience leading DevOps practices, including CI/CD, observability, monitoring and incident management. Demonstrated capability leading multi-squad engineering delivery in a product-led organisation. Mindset & Ways of Working Comfortable working in iterative, outcome-focused agile ...

frameworks, and risk management processes. Develop and maintain the Group IT Security Risk Register. Lead cyber security risk assessments and remediation planning activities. Manage incident response, cyber investigations, and escalation procedures. Oversee annual penetration testing programmes and security audits. Support compliance initiatives including Cyber Essentials, Cyber Essentials Plus ...