25 of 25 Incident Response Jobs in the Thames Valley

energy operations within a Critical National Infrastructure (CNI) environment. This role is responsible for real-time security monitoring, alert triage, investigation, and early-stage incident response. You will work with industry-standard security monitoring and incident/event management platforms to identify suspicious activity, validate alerts, and escalate … helping tune detections, and strengthening operational procedures and documentation. Key Responsibilities Monitoring and Triage Monitor security events and alerts using industry-standard SIEM and incident/event management platforms (e.g., Elastic, Microsoft Sentinel, Splunk). Perform rapid triage to determine alert validity, severity, scope, and potential business or operational ...

energy operations within a Critical National Infrastructure (CNI) environment. This role is responsible for real-time security monitoring, alert triage, investigation, and early-stage incident response. You will work with industry-standard security monitoring and incident/event management platforms to identify suspicious activity, validate alerts, and escalate … helping tune detections, and strengthening operational procedures and documentation. Key Responsibilities Monitoring and Triage Monitor security events and alerts using industry-standard SIEM and incident/event management platforms (e.g., Elastic, Microsoft Sentinel, Splunk). Perform rapid triage to determine alert validity, severity, scope, and potential business or operational ...

improvement Lead security engagement within client Design Authority and Enterprise Architecture forums Manage integration with the client SOC, including security reporting, SIEM alignment, and incident response coordination Oversee security incident management in line with the client Cyber Security Incident Response Plan Own joiner/mover … Strong understanding of NCSC HMG IAS5, Cyber Assessment Framework (CAF), ISO 27001, and GDPR Hands-on experience integrating with a UK Government SOC, including incident response and security reporting Strong working knowledge of Oracle Cloud security (OCI IAM, Vault, network security, audit, PAM) Experience securing Oracle SaaS applications ...

Cyber Security Engineer, Cloud Security, SIEM, Incident Response, COR7555 An exciting opportunity has arisen for a Cyber Security Engineer to join a growing technology company based in Oxfordshire, working on a hybrid basis.This is a hands-on role focused on strengthening cyber security across cloud platforms, applications … business systems. Working closely with the CIO and development teams, the Cyber Security Engineer will play a key role in improving cloud security, incident response, vulnerability management, security monitoring and secure development practices, helping to enhance the organisation's overall cyber resilience.The company develops innovative software solutions ...

hands-on role in ensuring it is reliable, scalable, and observable. You will help establish and mature SRE practices, focusing on: Monitoring and observability Incident response Post-incident review Reliability testing and capacity planning Toil reduction Enabling development velocity We offer a hybrid working arrangement with … Milton Keynes office. Key Responsibilities: Support teams using ConnellsX and respond to incidents in a structured, blameless way Investigate root causes and drive post-incident actions to completion Define SLIs, contribute to SLOs, and monitor error budgets Build dashboards, alerts, and runbooks to improve visibility Automate repetitive tasks ...

hands-on role in ensuring it is reliable, scalable, and observable. You will help establish and mature SRE practices, focusing on: Monitoring and observability Incident response Post-incident review Reliability testing and capacity planning Toil reduction Enabling development velocity We offer a hybrid working arrangement with … Milton Keynes office. Key Responsibilities: Support teams using ConnellsX and respond to incidents in a structured, blameless way Investigate root causes and drive post-incident actions to completion Define SLIs, contribute to SLOs, and monitor error budgets Build dashboards, alerts, and runbooks to improve visibility Automate repetitive tasks ...

Protection department. Our team is responsible for designing, implementing, configuring, and maintaining security tools used across Elsevier Technology. You will collaborate with colleagues from Incident Response, Threat Engineering, Governance Risk & Compliance (GRC), and work closely with business users to ensure our security tools are effectively adopted throughout … DevOps methodologies. We value practical experience applying IT security principles across areas such as Network Security, Security Operations, Vulnerability Management, Risk Management, and Incident Response. Responsibilities Collaborate within the security engineering team to design and implement security tooling. Design, build, and maintain AWS cloud infrastructure using Infrastructure as Code ...

maintain security tooling across cloud environments Work with engineering teams to improve security, reliability, and operational resilience Implement monitoring, logging, and alerting solutions Support incident response, troubleshooting, and continuous improvement activities Contribute to automation initiatives and security-by-design practices Requirements Experience working with AWS cloud environments Hands ...

maintain security tooling across cloud environments Work with engineering teams to improve security, reliability, and operational resilience Implement monitoring, logging, and alerting solutions Support incident response, troubleshooting, and continuous improvement activities Contribute to automation initiatives and security-by-design practices Requirements Experience working with AWS cloud environments Hands ...

maintain security tooling across cloud environments Work with engineering teams to improve security, reliability, and operational resilience Implement monitoring, logging, and alerting solutions Support incident response, troubleshooting, and continuous improvement activities Contribute to automation initiatives and security-by-design practices Requirements Experience working with AWS cloud environments Hands ...

performance optimisation Oversee DNS migrations, upgrades, and transformations Implement and maintain DNS security (DNSSEC, DDoS protection, threat mitigation) Monitor performance, availability, and ensure robust incident response processes Act as escalation point for complex DNS/network issues and lead root cause analysis Drive automation using scripting (Python, PowerShell ...

into CI/CD pipelines and DevSecOps practices. Proven capability in risk assessments, threat modeling, and control gap analysis. Experience collaborating with SOC and Incident Response teams during security events. Working knowledge of security frameworks and regulations (NIST, ISO 27001, CIS, GDPR, etc.). Ability to translate technical ...

cyber security strategy and governance (aligned to various frameworks e.g. ISO27001, NIST, Cyber Essentials) overseeing security operations (SOC, threat detection, vulnerability management etc.), and incident response plans risk management and compliance, ensuring compliance with various standards and frameworks About you Applicants for the Cyber Security Engineer role will ...

fast-paced environment. What you'll be doing: Monitoring and investigating security alerts and incidents. Triaging and responding to security events. Supporting incident response activities. Improving detection rules and SOC processes. Producing incident reports and documentation. What we're looking for: Previous SOC Analyst experience. Experience with ...

environments into SIEM/SOC platforms Develop and tune OT threat detection rules Conduct OT security assessments, gap analysis, and remediation planning Support OT incident response and investigation activities Collaborate with engineering and operations teams to implement secure changes Produce governance documentation, standards, and reporting artefacts Track ...

duplication, and support maintainable, secure and high-performing systems. Improve delivery capability through platform reliability and DevOps maturity Continuously strengthen deployment pipelines, observability, alerting, incident response, recovery procedures and operational readiness across Field Ops engineering teams. Manage stakeholders and maintain clear communication Build trusted relationships across product, operations … data quality controls. Ability to produce both high-level and detailed design specifications. Experience leading DevOps practices, including CI/CD, observability, monitoring and incident management. Demonstrated capability leading multi-squad engineering delivery in a product-led organisation. Mindset & Ways of Working Comfortable working in iterative, outcome-focused agile ...

frameworks, and risk management processes. Develop and maintain the Group IT Security Risk Register. Lead cyber security risk assessments and remediation planning activities. Manage incident response, cyber investigations, and escalation procedures. Oversee annual penetration testing programmes and security audits. Support compliance initiatives including Cyber Essentials, Cyber Essentials Plus ...

decisions through credibility, judgement and impact. Strong delivery mindset with the ability to manage multiple complex initiatives simultaneously, demonstrating consistent outcomes across risk management, incident response, assurance and security improvement programmes. Advanced capability in the safe and responsible use of AI and emerging technologies, including enterprise ...

availability Implement self-service tooling to empower development teams Drive DevOps best practices across the digital product lifecycle Develop and enhance monitoring, observability, and incident response processes Support global engineering teams delivering high-traffic platforms Key Requirements Proven experience supporting digital product delivery in a DevOps or platform ...

Responsibilities Deliver security assessments, gap analyses, and improvement plans Support compliance (Cyber Essentials/Plus, ISO 27001) Provide GRC and vCISO advisory services Support incident response planning and deliver workshops Maintain ROCs ISMS and support internal compliance Conduct risk assessments and drive security awareness Contribute to cyber security ...

Define and deliver site‐level objectives aligned to Equinix standards and global priorities. Drive operational efficiency, resilience, and continuous improvement across all disciplines. Lead incident response as the senior escalation point, ensuring rapid resolution and strong post‐incident learning. Strategic & Director‐Level Accountability Translate broader operational strategy ...

operational leadership with technical awareness. The successful candidate will act as a central point of control, maintaining operational oversight across multiple domains while coordinating incident response and enabling effective decision-making. In simple terms, this role suits someone who can act as an operational commander with enough technical … reduce noise and structure incidents * Control escalation pathways and prioritisation of incidents * Coordinate across SOC, NOC, infrastructure, and security teams * Support or initiate major incident management activities * Maintain logs, dashboards, and accurate operational records * Deliver clear handovers and continuous situational awareness across shifts Capability Profile This role is intentionally ...

customers across multiple sectors. Youll act as an escalation point for Tier 1, owning investigations end-to-end triaging SIEM and EDR alerts, leading incident response, hunting threats using MITRE ATT&CK, and tuning detections to cut noise. Youll also mentor junior analysts and help mature playbooks ...

across multiple sectors. You’ll act as an escalation point for Tier 1, owning investigations end-to-end — triaging SIEM and EDR alerts, leading incident response, hunting threats using MITRE ATT&CK, and tuning detections to cut noise. You’ll also mentor junior analysts and help mature playbooks ...

other information security standards are beneficial Previous experience developing and implementing data protection frameworks, conducting audits/risk assessments and managing data breaches and incident response Personal Attributes Excellent communication skills Good literacy and numeracy skills Good attention to detail Excellent stakeholder management with technical and non-technical ...