151 to 175 of 323 Incident Response Jobs in the UK excluding London

with security, governance and regulatory requirements. Optimise platform performance, scalability and cost efficiency. Develop tooling and self-service capabilities that improve engineering productivity. Support incident response, troubleshooting and root cause analysis activities. Produce and maintain platform standards, documentation and operational runbooks. Collaborate with engineering, architecture and security teams ...

experience in cloud security, automation and security operations . Working within a collaborative cyber team, you'll help secure cloud environments, enhance detection and response capabilities, and drive automation across security processes. We're particularly interested in individuals who enjoy solving problems through automation, have experience integrating tools … security solutions, this role offers the opportunity to make a real impact. Key Responsibilities Design and implement security automation workflows to improve efficiency and response times. Develop scripts and integrations using Python, PowerShell and APIs. Manage and optimise security tooling including SIEM, EDR/XDR and monitoring platforms. Support ...

Security Analyst, youll act as a senior technical escalation point within the SOC, supporting the wider analyst team while leading the investigation and response to sophisticated cyber threats and incidents. Youll work closely with internal security teams, customers, and stakeholders to continuously evolve detection capabilities, improve operational maturity … work, candidates must have current SC clearance and be eligible to obtain UK Government DV clearance. What Youll Be Doing Lead the investigation and response to complex cyber security incidents across high-security customer environments Act as a senior escalation point for Tier 1 and Tier 2 analysts during ...

growing cyber security team based in South Manchester. You will play a key role in protecting critical systems, improving security posture, and supporting incident response across a modern hybrid IT environment. This is a hands-on technical role where youll work closely with infrastructure, cloud, and SOC teams … respond to security alerts across SIEM and EDR platforms Manage and tune security tools including firewalls, WAFs, and endpoint protection Investigate and support response to security incidents Perform vulnerability assessments and remediation tracking Support implementation of security controls across cloud and on-prem environments Contribute to security policies, standards ...

that supports precision medicine Key Responsibilities Design and develop threat-led detections using threat intelligence and threat-hunting outputs Create novel analytic techniques for incident detection Collaborate with an MSP SOC to maintain and tune the detection catalogue Build automated reporting dashboards using Microsoft Sentinel workbooks Support security initiatives … Employment Business and an Employment Agency as defined within The Conduct of Employment Agencies & Employment Businesses Regulations 2003. Keywords: Cyber Threat Engineer, Detection & Response Engineer, SIEM Engineer, Security Detection Engineer,T hreat Hunting Engineer, Security Automation Engineer, SOC Engineer, Incident Response Engineer, Cloud Security Engineer, Network Security ...

Group Policy environments in line with recognised security standards. Apply CIS Benchmarks, STIGs and other system-hardening standards. Support security monitoring, logging, alerting and incident response using Elastic Stack and Elastic Security. Contribute to vulnerability management, root-cause analysis and remediation activity. Support security controls across VMware Cloud … Benchmarks or similar hardening standards. Knowledge of zero-trust, network segmentation, IAM, encryption and secure architecture. Experience with vulnerability management, SIEM, logging and incident response. Strong TCP/IP networking knowledge, including routing, VPNs and secure connectivity. Experience with Elastic Stack or Elastic Security would be highly advantageous. Exposure ...

ability to thrive in a fast-paced Managed Service Provider (MSP) environment. Responsibilities: Utilize AI-enabled support tools and knowledge platforms to improve incident resolution times and service quality. Support Microsoft 365, Entra ID, Intune, Defender, Teams, SharePoint Online, and related cloud services. Assist with endpoint management, mobile device … established service metrics including SLA attainment, ticket quality, first-contact resolution, and customer satisfaction goals. Participate in after-hours support, escalation rotations, and major incident response activities as required. All other responsibilities delegated by the Management team. May be asked to provide on-site technical support to system ...

compliance and engagement with Qualified Security Assessors (QSAs).* Drive cyber awareness programs and phishing simulations to embed a security-aware culture.* Manage security incident response planning and coordinate with Security Operations Centre (SOC).* Report regularly to PayTech Executive Leadership and Edenred Group CISO on security program … Azure, GCP).* Excellent communication skills, able to convey complex security topics to non-technical stakeholders.* Pragmatic, calm, and resilient under pressure during incident management.**Why Join Us?** Be part of a dynamic and strategic security leadership team within a pioneering FinTech environment. Influence the protection of critical technologies ...

Directory, Firewalls, Network Infrastructure, Vulnerability Management, Patch Management, Endpoint Security, Security Operations, Governance, Risk & Compliance, GRC, Security Assurance, Security Audits, Business Continuity, Disaster Recovery, Incident Response, Cyber Essentials. ...

observability and operational tooling to improve platform reliability. Working closely with Site Reliability Engineering and Operations teams to ensure high availability and resilience. Supporting incident response, root cause analysis and continuous improvement initiatives. Acting as a technical mentor, promoting engineering standards and best practice across the team. Collaborating ...

including Catalyst switching, Layer 2/3, OSPF and VPNs. Network security controls including Cisco ISE, TACACS, IPS and endpoint protection. Security monitoring and incident response within SIEM environments. Vulnerability management and penetration testing. Security governance aligned to ISO 27001, NIST and risk management frameworks. Developing security policies ...

Work closely with development teams to support application deployments Improve automation, monitoring and operational efficiency Optimise cloud performance and spend across multiple environments Support incident response, troubleshooting and root cause analysis Implement networking, security and disaster recovery best practices Produce clear technical documentation and infrastructure standards ...

vulnerability management, and compliance controls into engineering workflows. Collaborate with software development teams to improve secure coding practices. Develop and maintain monitoring, logging, and incident response automation. Support threat modelling and secure architecture reviews. Drive DevSecOps best practices across engineering teams. Contribute to platform engineering and cloud-native ...

vulnerability management, and compliance controls into engineering workflows. Collaborate with software development teams to improve secure coding practices. Develop and maintain monitoring, logging, and incident response automation. Support threat modelling and secure architecture reviews. Drive DevSecOps best practices across engineering teams. Contribute to platform engineering and cloud-native ...

with security teams to implement infrastructure hardening and vulnerability management Optimise infrastructure costs, energy efficiency and environmental impact Support operational readiness, performance monitoring and incident response planning Customer & Stakeholder Engagement Serve as technical authority for infrastructure discussions with senior customer stakeholders Present architecture recommendations to customer leadership ...

with security teams to implement infrastructure hardening and vulnerability management Optimise infrastructure costs, energy efficiency and environmental impact Support operational readiness, performance monitoring and incident response planning Customer & Stakeholder Engagement Serve as technical authority for infrastructure discussions with senior customer stakeholders Present architecture recommendations to customer leadership ...

industry standardsWork with security teams to implement infrastructure hardening and vulnerability managementOptimise infrastructure costs, energy efficiency and environmental impactSupport operational readiness, performance monitoring and incident response planningCustomer & Stakeholder EngagementServe as technical authority for infrastructure discussions with senior customer stakeholdersPresent architecture recommendations to customer leadership and defence programme teamsManage ...

controls and governance approaches for cloud environments, with an understanding of how compliance requirements apply in AWS, Azure, or GCP contexts. Working knowledge of incident response planning - establishing policies, assessing team readiness, and mentoring others on preparedness - ideally in a government or regulated environment. Experience conducting or leading ...

reliability Be the single accountable owner for the health of the live client service; define and hold SLAs/SLOs and a mature incident, problem, and change‐management practice. Own major‐incident response and the out‐of‐hours/on‐call model for the live service, acting … prem or hybrid) that depends on third‐party providers you do not control (carriers, networks, exchanges, or payment rails), with deep monitoring, capacity, and incident discipline. Hands‐on and technical: able to set direction and make architectural trade‐offs yourself, and to run support and DevOps directly until ...

resilient, large‐scale security capabilities that protect the UK’s largest digital bank. Provide strategic direction for cyber defence, detection engineering, threat hunting and incident response. Drive continuous improvement across security operations platforms, tooling and processes. Lead a high‐performing team, strengthening operational resilience and coordinating effective response … world‐class security operation that enables the Group to go faster, safely. Qualifications Deep technical understanding of cyber defence, security operations, detection engineering and incident response. Proven experience leading and enhancing security operations across complex enterprise environments. Strong security operations management experience, including Continuous Detection and Continuous Response ...

cyber security strategy. Provide executive leadership on information and cyber security matters. Lead security governance, risk management and assurance activities. Oversee cyber resilience, incident response and security operations. Ensure compliance with recognised security frameworks, standards and regulatory requirements. Advise senior stakeholders on emerging threats, risks and security best ...

/integration platforms. Security isn't all on you: there's a 24/7 SOC in place, so you're not carrying incident response alone. CyberEssentials and/or ISO27001 exposure is a strong plus. Three days a week in the Leicester office, the rest remote. Standard ...

/integration platforms. Security isn't all on you: there's a 24/7 SOC in place, so you're not carrying incident response alone. CyberEssentials and/or ISO27001 exposure is a strong plus. Three days a week in the Leicester office, the rest remote. Standard ...

monitoring, and operational insights across multiple environments. Improve deployment processes, reduce friction, and enable self-service capabilities for development teams. Support cloud and infrastructure incident response, ensuring rapid service restoration. Develop solutions that provide visibility into cloud costs, resource utilisation, and FinOps metrics. Maintain infrastructure currency, supporting upgrades ...

implementing security controls, conducting threat modelling and architecture reviews, and defining secure configurations and standards. The role also ensures systems include robust monitoring, detection, incident response, and recovery capabilities, while supporting overall resilience. Additionally, as the Cyber Security Lead you will contribute to Change Advisory Board decisions, assessing ...