101 to 125 of 323 Incident Response Jobs in the UK excluding London

Security Engineer Scotland-OccasionaltraveltoofficeinEdinburgh Schedule: Rotating shift (includes nights/weekends) Salary up to £80,000 You will own incidents end-to-end across Incident, Major Incident, Change, Problem, and Service Request workflows (ITIL-aligned), leading real-time response to live DDoS attacks and complex network events … cybersecurity, or infrastructure Degree in Computer Science or a related field Strong networking fundamentals TCP/IP, routing, Layer 13 troubleshooting Proven experience in incident response and customer-facing technical roles The temperament to own and resolve incidents under real pressure Excellent communication skills clear, calm, customer-ready ...

expected to independently manage monitoring platforms, triage and resolve incidents, validate backup operations across both cloud and on-premises environments, and provide meaningful first-response support for critical P1 and P2 incidents. You will work within a dedicated five-person team participating in a weekly on-call rota … provide 24x7 P1 incident response coverage. The role demands strong technical foundations across both Microsoft Azure and VMware virtualisation platforms, along with a disciplined approach to ITSM processes, documentation, and patching support. WHAT WE EXPECT Minimum of 3-5 years of experience in enterprise infrastructure support roles, ideally ...

operations, improve cyber resilience and influence security awareness across a large and complex organisation. If you enjoy combining technical security expertise with threat intelligence, incident response and user engagement, this contract offers the opportunity to make a visible impact from day one. What's on Offer? £413.40 … Opportunity to work alongside experienced cyber security professionals within a mature security function. Broad, varied role covering Security Operations, Threat Intelligence, Security Awareness and Incident Response. A high-profile enterprise environment that will strengthen your CV. Immediate start with the potential for contract extension. The Role Working closely with ...

Security Operations capability. This is more than a leadership role. You'll remain hands-on in the fight against cyber threats, leading investigations, driving incident response, mentoring analysts, and strengthening our detection and response capabilities across multiple complex client environments. Whether you're already leading … operational discussions with stakeholders, partners and custom ers. What You'll Bring: Proven experience working within a Security Operations Centre (SOC). Strong incident detection, investigation and response experience. Deep understanding of network and host-based attack techniques. Hands-on experience with SIEM technologies such as Microsoft Sentinel ...

Azure DevOps Pipelines : Design, build, and maintain secure, high-speed CI/CD pipelines within Azure DevOps to automate code promotion and MLOps workflows. Incident Management : Lead the response, containment, and resolution of critical platform outages, serving as a primary escalation point for high-priority cloud and infrastructure … fixes to prevent recurrence. Third-Party Operational Coordination : Act as the direct engineering point of contact for external support teams, actively collaborating on active incident tickets, complex escalations, and day-to-day infrastructure maintenance. Cross-Functional Communication : Document complex technical architectures clearly and articulate system requirements, post-mortems ...

This is a unique hybrid position that combines operational leadership with technical awareness . You'll take ownership of the live operational picture, coordinating incident response across cyber, network, infrastructure and physical security teams while ensuring informed, timely decision-making. This role is ideal for someone who thrives … fast-paced control room environment and can confidently lead operational response without needing to be a deep technical specialist. Key Responsibilities Maintain a single operational view across cyber, network, service and physical security domains. Monitor live operational environments and assess alerts and incidents in real time. Perform initial triage ...

Support risk treatment planning and remediation activities. Ensure alignment with NCSC, MoD, JSP, NIST, and Lockheed Martin security policies and standards where applicable. Support incident response investigations affecting classified systems. Assist with vulnerability management, patch management, and security monitoring activities. Participate in security reviews and technical investigations ...

Analyse resource utilization, optimise for performance and cost, and implement automated scaling and rightsizing. Produce dashboards and reports for operational and business stakeholders. Lead incident response for cloud infrastructure issues, including root cause analysis and post-mortem documentation Develop and test disaster recovery and business continuity plans ...

limited to) Azure infrastructure failover, M365 backup/restore, network infrastructure failover. Act as one of the primary points of contact for incident response, and Major Incident Management (MiM). Participate in monthly continuous improvement meetings and collaborate with stakeholders to define recovery objectives, including Recovery Time ...

limited to) Azure infrastructure failover, M365 backup/restore, network infrastructure failover. Act as one of the primary points of contact for incident response, and Major Incident Management (MiM). Participate in monthly continuous improvement meetings and collaborate with stakeholders to define recovery objectives, including Recovery Time ...

This is a unique hybrid position that combines operational leadership with technical awareness . You'll take ownership of the live operational picture, coordinating incident response across cyber, network, infrastructure and physical security teams while ensuring informed, timely decision-making. This role is ideal for someone who thrives … fast-paced control room environment and can confidently lead operational response without needing to be a deep technical specialist. Key Responsibilities Maintain a single operational view across cyber, network, service and physical security domains. Monitor live operational environments and assess alerts and incidents in Real Time. Perform initial triage ...

helping keep everything running smoothly behind the scenes while we deliver for our customers. You’ll get hands-on with AWS, working across monitoring, incident response, automation, and CI/CD — all the good stuff that keeps modern platforms fast, reliable, and scalable. This isn’t a role … support across multiple applications. Monitor system health, including application environments, scheduled jobs, integrations, and message queues, and contribute to logging and alerting standards. Support incident management activities, including triage, troubleshooting, escalation, root cause analysis (RCA), and continuous improvement based on incident trends. Assist with routine maintenance tasks such ...

vulnerability scanners, and data encryption solutions. Manage vulnerability management programs, including regular scanning, penetration testing, and remediation of identified weaknesses. Lead and manage security incident response, including detection, analysis, containment, eradication, recovery, and post-incident review. Develop and maintain robust disaster recovery and business continuity plans related … NIST, Cyber Essentials), and best practices. Hands-on experience with security technologies such as firewalls, SIEM, IDS/IPS, vulnerability scanners, endpoint detection and response (EDR), and identity management solutions. Experience with cloud security (e.g., Azure Security). Proven experience in managing security incidents and conducting incident response. ...

programme supporting over 6,000 users. This role combines ownership of security awareness initiatives and KnowBe4 administration with hands-on cyber security operations, including incident investigation, threat analysis, vulnerability management, and Microsoft Defender-based security monitoring. Client Details This company operates within the property industry. Description Administer and manage … management information Develop engaging cyber awareness content across multiple communication channels Deliver security awareness training to technical and non-technical audiences Support security incident investigations and response activities Collaborate with internal and external SOC teams Investigate security alerts and indicators of compromise (IOCs) Conduct threat intelligence research ...

workflows. * Ensure cloud environments align with security, governance, compliance, and software lifecycle standards. * Monitor cloud platforms using SIEM, cloud security, and observability tools. * Support incident, problem, and change management processes. * Work with containerised environments and infrastructure-as-code technologies. Essential Skills & Experience * Strong commercial experience with AWS, Azure … understanding of IAM, RBAC, encryption, cloud governance, and access management. * Experience working with Windows Server and Red Hat Linux environments. * Knowledge of SIEM platforms, incident response, and operational support processes. Desirable Skills * Experience working within regulated or financial services environments. * Relevant cloud certifications (AWS, Microsoft Azure, or Google ...

first security stack already in place, it is an exciting time to join the business and learn your craft as we mature our detection, response, and automation capabilities across a global estate. You will work alongside the wider IT team - Infrastructure, Network, Development, DevOps, and Service Desk - gaining … understanding of how security supports the business. The purpose of this role is to build a working knowledge of security operations, protective monitoring, and incident handling by working closely with, and learning from, the wider InfoSec team. Reporting to the Associate Director - Cyber Security, with day-to-day guidance ...

Golden Path" templates and adoption Operational Oversight & Risk Management Oversee reliability, performance, and security of platforms and pipelines Lead vulnerability management and remediation Support incident response and post-incident reviews Integrate telemetry across Azure ecosystem (Defender, Entra, WAF) Collaboration Across Technology Act as a senior advisor ...

ensure data protection and business continuity] Ability to implement robust monitoring and logging solutions e.g., CloudWatch, to ensure system reliability, observability, and proactive incident response Comfortable working in Agile development teams, translating business requirements into technical solutions, and actively participating in sprint planning, retrospectives, and daily stand ...

make sure security is built into day-to-day operations, projects and technology change. The team monitors for threats and weaknesses, investigates incidents, leads response and recovery when issues arise, and helps strengthen resilience through planning, training, awareness and continual improvement. It also supports compliance with recognised frameworks, works … improvements. Monitor, triage and investigate security alerts/reports. Analyse security event data, including end-user reports, to identify incidents and support effective response and remediation. Identify, assess and prioritise security risks (current and emerging), evaluating impact and likelihood. Investigate, monitor, and audit system practices to ensure services ...

Desk Manager, ensure first and second line support provides timely and effective assistance to internal users across hardware, software, networking, and business applications, with incident, problem, and request management owned through to resolution. Define, monitor, and report on IT support metrics, KPIs, and SLAs, using insight, data, and root … drive continuous improvement initiatives. Take full ownership of key projects, delivering at pace while maintaining quality, in line with business objectives. Embed ITIL‐aligned incident, problem, change, and asset management processes, owning the ITSM toolset, service catalogue, and knowledge base. Own and manage all group IT infrastructure, including servers ...

KPIs, across incidents, service requests and change, reporting honestly on where things stand and what you are doing about it Chair or oversee incident, problem and change management processes, including major incident response and post-incident reviews Work with the functional consultants to prioritise and sequence … live, business-critical enterprise system, ideally Oracle Cloud (Fusion) or a comparable ERP/HCM/EPM platform Solid grounding in ITIL-based incident, problem and change management, and the judgement to know when to escape and when to let a process run Experience managing SLAs, service reporting ...

SIEM, EDR, Microsoft Defender, and vulnerability management tools. Experience securing Microsoft Azure environments. Strong analytical, problem-solving, and stakeholder management skills. Experience with security incident response and risk management. Desirable Industry certifications such as Microsoft SC-200, AZ-500, SC-100, or ISC2 SSCP, CCSP, or CISSP. This ...

best practice Driving automation and reducing manual processes Improving platform performance, reliability and observability Managing source control, deployment frameworks and engineering tooling Supporting incident response and continuous improvement initiatives Developing reusable patterns, templates and standards Promoting DevOps, DevSecOps and Site Reliability Engineering practices Required Skills & Experience ...

many of these technologies/areas as possible is highly desirable: Security Frameworks (NIST, CIS etc.) PAM Tools and Technologies AWS Security Incident Response Endpoint Security (including mobile devices, Windows and Linux) Job Benefits We have a high-performance culture which is balanced evenly with world-class well ...

delivery of changes. Collaborate with product, delivery and architecture colleagues to ensure platform services meet user and business needs. Support live service operations, including incident response, troubleshooting and problem management. Share knowledge and provide coaching and mentoring across the engineering community. Contribute to improving security, resilience and compliance ...