26 to 50 of 210 Incident Response Jobs in the UK excluding London

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

Technical Consultant - Threat Detection, Response & Intelligence Location: Hursley - On-site Security clearance: UK national with a minimum of 5 years' UK residency required Certification: Microsoft Certified: Security Operations Analyst Associate We are seeking a technically strong and proactive Technical Consultant - Threat Detection, Response & Intelligence to join our security … investigate security alerts and events across SIEM and wider security tooling. Identify suspicious activity, indicators of compromise and potential security incidents. Conduct initial incident investigations, assess severity and impact, and escalate appropriately with clear supporting evidence. Support the full incident response lifecycle, including containment, remediation and post ...

looking for a Cyber Security Lead to provide day-to-day leadership across its cyber security function. You'll lead the team, oversee incident response and vulnerability management, support the organisation's cloud security journey and act as a senior security contact across the wider IT department. This … vulnerability remediation and system hardening. Act as the escalation point for security incidents both in and outside normal working hours. Own the cyber security incident process and lead incident simulations and war-game exercises. Manage post-incident forensic investigations and reporting, engaging third-party specialists where appropriate. ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. This … analysis and identifying potential threats or areas requiring further investigation. Working closely with external security service providers to ensure effective monitoring, alert management, and incident handling. Supporting cyber incident response activities as a technical security specialist. Analysing security metrics and trends, providing recommendations to improve security controls ...

Security Analyst to strengthen their security operations and enhance their cyber security posture. This is a hands-on technical role focused on threat detection, incident response, security controls, and continuous improvement. The successful candidate will act as a Subject Matter Expert (SME), providing technical guidance, mentoring junior analysts … collaborating with global teams to ensure effective security operations. Key Responsibilities of the Senior Cyber Security Analyst: Lead the monitoring, investigation, and response to security alerts and incidents using SIEM and other security technologies Analyse security logs, network traffic, and threat intelligence to identify potential threats and vulnerabilities Manage ...

Information Security to define and deliver an integrated security strategy across IT, OT and Digital environments, covering security architecture, risk and assurance, cyber defence, incident response and supply chain security. You will build a modern, outcome-driven function that improves resilience, enables safe transformation and gives the executive … Architecture and engineering: Establish a strong central security architecture capability, embedding standardised patterns and reusable controls into programmes, design and procurement. Security operations and incident management: Strengthen detection, response and recovery across IT and OT, aligned to regulatory reporting and crisis management processes. Supply chain and segmentation: Lead ...

company's cyber security posture. This is an excellent opportunity for someone who enjoys a varied role spanning security operations, infrastructure security, compliance, incident response and security improvement projects. This position is predominantly remote, with occasional travel to the company's Essex office when required. Key Responsibilities Manage … Strong hands-on experience with Microsoft security technologies including: Microsoft 365 Security Microsoft Entra ID Microsoft Defender Microsoft Purview Intune Azure Security Experience with incident response, threat detection and remediation. Knowledge of SIEM technologies and security monitoring. Vulnerability management experience and familiarity with related tooling. Understanding of security ...

environment. This is a senior technical position within an established Information Security function, combining hands-on security expertise with responsibility for improving threat detection, incident response and the effectiveness of security controls. You'll act as a technical specialist within the team, taking the lead on more complex … your technical expertise to investigate incidents, understand their underlying causes and introduce improvements that reduce the likelihood of similar issues occurring again. Beyond incident management, you'll work closely with the wider IT team to assess vulnerabilities, strengthen security controls and ensure new technologies are introduced securely. ...

system hardening baselines, and vulnerability management processes. Review OT network architecture, segmentation, data flows, and security dependencies. Enhance security monitoring, logging, threat detection, and incident escalation processes. Develop and maintain incident response, backup, recovery, business continuity, and cyber resilience arrangements. Coordinate restoration testing, cybersecurity exercises, and lessons … security control improvement programmes. Practical knowledge of OT asset management, privileged access, network segmentation, system hardening, vulnerability management, and security monitoring. Experience with incident response, disaster recovery, backup verification, and operational resilience. Understanding of legacy OT environments and the challenges of implementing security controls across unsupported or business ...

help protect systems that matter. Apply today and take your cyber security career to the next level. If you're passionate about threat detection, incident response, and staying one step ahead of attackers, we'd love to hear from you. Office based: Farnborough. Clearance: You do need … triage and investigate security incidents across critical client environments. Analyse network traffic, logs and security events to identify threats and vulnerabilities. Lead and support incident response activities, providing expert guidance on containment, eradication and recovery. Enhance detection rules and use cases using MITRE ATT&CK and threat-informed ...

Leeds (Hybrid) About the role You'll protect key business assets by monitoring, detecting, analysing and responding to security incidents, owning threat detection and incident response at real scale. What you'll be doing SIEM ownership: Oversee the day-to-day running of the SIEM, working closely with … Infrastructure, Networks, DevOps and an outsourced SOC. Detection rules: Define and fine-tune SIEM rules, and investigate alerts and incidents through to completion. Incident response: Gather and analyse data, then contain and respond to cyber security incidents as part of a dynamic monitoring and response capability. Threat ...

ISMS), policies, standards and governance processes. Lead compliance with NIS Regulations, GDPR and DB Group security requirements. Manage cyber security operations including threat monitoring, incident response, threat intelligence and vulnerability management. Develop Microsoft Sentinel, Microsoft Defender XDR and associated security monitoring capabilities. Provide governance across Azure, AWS, Microsoft … senior leadership reporting. What We Are Looking For: Demonstrable experience in cyber security, information security or IT risk management. Experience of security operations, incident response and security monitoring. Knowledge of governance, risk management, compliance frameworks and assurance processes. Experience securing cloud, endpoint and identity platforms, ideally within Microsoft ...

teams across the organisation to secure new, existing and legacy infrastructure. Define, implement, maintain and improve security measures, policies and controls. Support cyber incident response, including communications with internal stakeholders, customers and suppliers. Work with third parties to ensure systems are patched, hardened and remediated appropriately. Create … Server, Linux, Citrix, Cisco networking and backup technologies. Understanding of security principles including ISMS, risk assessment, the CIA triad, attack vectors, cryptography and incident response practices such as triage and chain of custody. Strong analytical, troubleshooting and problem-solving skills, with the ability to identify patterns and trends ...

across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing vulnerability scan results … working with technical teams to prioritise fixes. Keeping accurate incident records and producing clear reports on findings and recommended actions. Supporting access reviews, security procedures and staff awareness initiatives. Staying informed about emerging threats and identifying opportunities to improve security. About you Youll bring a curious mind, a methodical ...

across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing vulnerability scan results … working with technical teams to prioritise fixes. Keeping accurate incident records and producing clear reports on findings and recommended actions. Supporting access reviews, security procedures and staff awareness initiatives. Staying informed about emerging threats and identifying opportunities to improve security. About you Youll bring a curious mind, a methodical ...

across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing vulnerability scan results … working with technical teams to prioritise fixes. Keeping accurate incident records and producing clear reports on findings and recommended actions. Supporting access reviews, security procedures and staff awareness initiatives. Staying informed about emerging threats and identifying opportunities to improve security. About you Youll bring a curious mind, a methodical ...

across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing vulnerability scan results … working with technical teams to prioritise fixes. Keeping accurate incident records and producing clear reports on findings and recommended actions. Supporting access reviews, security procedures and staff awareness initiatives. Staying informed about emerging threats and identifying opportunities to improve security. About you Youll bring a curious mind, a methodical ...

across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing vulnerability scan results … working with technical teams to prioritise fixes. Keeping accurate incident records and producing clear reports on findings and recommended actions. Supporting access reviews, security procedures and staff awareness initiatives. Staying informed about emerging threats and identifying opportunities to improve security. About you Youll bring a curious mind, a methodical ...

across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing vulnerability scan results … working with technical teams to prioritise fixes. Keeping accurate incident records and producing clear reports on findings and recommended actions. Supporting access reviews, security procedures and staff awareness initiatives. Staying informed about emerging threats and identifying opportunities to improve security. About you Youll bring a curious mind, a methodical ...

across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing vulnerability scan results … working with technical teams to prioritise fixes. Keeping accurate incident records and producing clear reports on findings and recommended actions. Supporting access reviews, security procedures and staff awareness initiatives. Staying informed about emerging threats and identifying opportunities to improve security. About you Youll bring a curious mind, a methodical ...

across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing vulnerability scan results … working with technical teams to prioritise fixes. Keeping accurate incident records and producing clear reports on findings and recommended actions. Supporting access reviews, security procedures and staff awareness initiatives. Staying informed about emerging threats and identifying opportunities to improve security. About you Youll bring a curious mind, a methodical ...