276 to 300 of 904 Incident Response Jobs in the UK excluding London

/7 operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance … using the Protective Monitoring platform and Internet resources to identify cyber-attacks/security incidents. Categorise all suspected incidents in line with the Security Incident policy Recognise potential, successful and unsuccessful intrusion attempts and compromises through reviews and further analysis of relevant event detail and incident summary information. ...

proactive Senior Cyber Security Analyst to help protect the university’s systems, services, data and cloud environments. You will lead the detection, investigation and response to cyber threats, strengthen security controls, manage cyber risks and support the secure delivery of digital services. Working across technical and business teams … will ensure security is embedded into projects, operations and service delivery. Main Duties and Responsibilities You will: Lead investigation, containment and response to cyber security incidents. Identify, assess and mitigate threats and vulnerabilities. Manage and optimise security tools and controls, including EDR and vulnerability management platforms. Monitor the evolving ...

proactive Senior Cyber Security Analyst to help protect the university’s systems, services, data and cloud environments. You will lead the detection, investigation and response to cyber threats, strengthen security controls, manage cyber risks and support the secure delivery of digital services. Working across technical and business teams … will ensure security is embedded into projects, operations and service delivery. Main Duties and Responsibilities You will: • Lead investigation, containment and response to cyber security incidents. • Identify, assess and mitigate threats and vulnerabilities. • Manage and optimise security tools and controls, including EDR and vulnerability management platforms. • Monitor the evolving ...

proactive Senior Cyber Security Analyst to help protect the university’s systems, services, data and cloud environments. You will lead the detection, investigation and response to cyber threats, strengthen security controls, manage cyber risks and support the secure delivery of digital services. Working across technical and business teams … will ensure security is embedded into projects, operations and service delivery. Main Duties and Responsibilities You will: • Lead investigation, containment and response to cyber security incidents. • Identify, assess and mitigate threats and vulnerabilities. • Manage and optimise security tools and controls, including EDR and vulnerability management platforms. • Monitor the evolving ...

Senior Network Security EngineerScotland/HybridSchedule: Rotating shift (includes nights/weekends)Salary up to 80,000You will own incidents end-to-end across Incident, Major Incident, Change, Problem, and Service Request workflows (ITIL-aligned), leading real-time response to live DDoS attacks and complex network events … networking, cybersecurity, or infrastructureDegree in Computer Science or a related fieldStrong networking fundamentals — TCP/IP, routing, Layer 1–3 troubleshootingProven experience in incident response and customer-facing technical rolesThe temperament to own and resolve incidents under real pressureExcellent communication skills — clear, calm, customer-readyScripting and automation ability ...

Engineer Scotland/Hybrid Schedule: Rotating shift (includes nights/weekends) Salary up to £80,000 You will own incidents end-to-end across Incident, Major Incident, Change, Problem, and Service Request workflows (ITIL-aligned), leading real-time response to live DDoS attacks and complex network events … cybersecurity, or infrastructure Degree in Computer Science or a related field Strong networking fundamentals TCP/IP, routing, Layer 13 troubleshooting Proven experience in incident response and customer-facing technical roles The temperament to own and resolve incidents under real pressure Excellent communication skills clear, calm, customer-ready ...

initial 12-month contract, based in Glasgow with a hybrid work pattern (3 days in the office). The role covers security incident detection, response, and improvements across both OT and IT environments, aligned with SPEN's cyber security transformation programme. You will coordinate across in-house … outsourced SOC teams, configure SIEM tools, oversee post-incident reviews, and ensure compliance with policy and SLAs while driving #J-18808-Ljbffr ...

Trust and least privilege principlesCyber Threat & Risk ManagementAssess cyber threat landscapes and design threat-informed security architecturesLead security risk assessments and vulnerability management programmesDesign incident response, threat intelligence and cyber defence capabilitiesArchitect security monitoring, detection and response solutionsDevelop cyber resilience and business continuity frameworksCloud & Security SolutionsDesign cloud ...

Investigation of phishing, malware, credential compromise and suspicious activity. Supporting containment, eradication and recovery. Developing and improving detection rules and playbooks. Producing high-quality incident documentation and reports. Supporting and mentoring Tier 1 analysts. Tier 3 SOC Analyst As a Tier 3 Analyst, you’ll provide advanced technical investigation … senior escalation point for complex incidents: Leading complex and high-severity security investigations. Advanced threat hunting and incident response. Malware, endpoint, network and forensic investigation. Developing advanced detections and response capabilities. Root-cause analysis and post-incident investigation. Supporting major incident response. Working closely with security ...

Professional Services role within our Security Engineering function, focused on detection engineering and automation. You will lead the design and delivery of detection and response capabilities across SIEM, XDR and SOAR platforms. This includes building detection rules, developing automations, and creating operational playbooks that support effective SOC outcomes.A … Working directly with customers, you will define detection strategies, design use cases aligned to MITRE ATT&CK, and guide improvements in visibility, coverage and response maturity. You will work closely with platform onboarding and engineering teams, supplementing them with specialist expertise in detection engineering and automation, rather than focusing ...

Investigation of phishing, malware, credential compromise and suspicious activity. Supporting containment, eradication and recovery. Developing and improving detection rules and playbooks. Producing high-quality incident documentation and reports. Supporting and mentoring Tier 1 analysts. Tier 3 SOC Analyst As a Tier 3 Analyst, you'll provide advanced technical investigation … senior escalation point for complex incidents. Responsibilities include: Leading complex and high-severity security investigations. Advanced threat hunting and incident response. Malware, endpoint, network and forensic investigation. Developing advanced detections and response capabilities. Root-cause analysis and post-incident investigation. Supporting major incident response. Working closely ...

deliver a modern, resilient cyber security function. What you’ll be doing: Lead and develop a Cyber Security Operations team Take ownership of incident detection, response, and recovery Drive SOC maturity improvements and tool optimisation Deliver security insights and risk reporting to senior stakeholders Partner with vendors, forensic … delivery of the security strategy and roadmap What we’re looking for: Proven experience leading SOC/Cyber Security Operations teams Strong background in incident response and threat management Experience with SIEM, monitoring, and detection engineering Knowledge of frameworks such as ISO27001, NIST, GDPR Ability to operate ...

world attack techniques Map customer log sources to detection use cases to assess coverage and identify gaps Design and implement SOAR automations, integrations and response workflows Develop and document customer incident response playbooks aligned to detection outputs Translate threat intelligence and operational learnings into improved detections … including use case design, ruleset development and coverage assessment Log source mapping and normalisation to support detection use cases Network Detection and Response technologies such as Vectra AI, Corelight or similar Cloud security and telemetry, particularly within Azure environments Threat intelligence integration and enrichment to support detection and response ...

tracking. Ensure all projects, solutions, and business changes are delivered using Secure by Design principles, identifying control weaknesses and managing associated risks. Lead security incident and breach response activities between Technology and the business, participating in the Cyber Security Incident Response Team (CSIRT) where required. Drive ...

remediation tracking.Ensure all projects, solutions, and business changes are delivered using Secure by Design principles, identifying control weaknesses and managing associated risks.Lead security incident and breach response activities between Technology and the business, participating in the Cyber Security Incident Response Team (CSIRT) where required.Drive assurance ...

tracking. Ensure all projects, solutions, and business changes are delivered using Secure by Design principles, identifying control weaknesses and managing associated risks. Lead security incident and breach response activities between Technology and the business, participating in the Cyber Security Incident Response Team (CSIRT) where required. Drive ...

operational efficiency. Security Operations & Risk Management Monitor and analyse browser security events, policy violations and suspicious user activity to support threat detection and incident response activities. Support investigations involving browser session activity, data protection events and secure application access controls. Monitor, analyse, and respond to network security incidents … vulnerabilities, and emerging threats. Support threat detection, containment, remediation, and post-incident reviews. Ensure network security controls remain effective, compliant, and aligned with evolving cyber threats. Conduct security assessments, rule reviews, and network segmentation activities. Security Architecture & Standards Ensure network architectures comply with security standards, secure-by-design principles ...

coverage across on-site and offshore support hours. Use SQL scripting, automation, monitoring, and observability tools to improve operational resilience, service health, reliability, and incident response. To be successful in this role, were seeking the following: Excellent SQL scripting skills. Strong scripting and automation skills using languages such … Proven skills and track record in AI automation, including the use of intelligent automation capabilities to reduce manual effort, improve operational efficiency, and enhance incident response workflows. Experience applying AI and automation solutions for alert correlation, anomaly detection, predictive monitoring, and service optimisation. Strong understanding of Site Reliability ...

Office. Full time, 35 hours per week. We are happy to discuss flexible working!Top 3 skills needed for this role:Security Operations Leadership & Incident ResponseRisk, Governance & Regulatory ComplianceTechnical Depth in Monitoring & Security EngineeringWhat this role is all about:You will be joining a vibrant, exciting environment to lead … team of security analysts and a service delivery manager with specific skill sets. This role provides cyber security leadership through risk management, threat monitoring, incident response, resilience planning, training, and CSIRT team support.In addition to your daily responsibilities, you will be playing a part in the longer-term ...

Security Operations capability. This is more than a leadership role. You'll remain hands-on in the fight against cyber threats, leading investigations, driving incident response, mentoring analysts, and strengthening our detection and response capabilities across multiple complex client environments. Whether you're already leading … operational discussions with stakeholders, partners and custom ers. What You'll Bring: Proven experience working within a Security Operations Centre (SOC). Strong incident detection, investigation and response experience. Deep understanding of network and host-based attack techniques. Hands-on experience with SIEM technologies such as Microsoft Sentinel ...

security policies, standards and control frameworks. Deliver security reporting and risk updates to Executive Leadership Teams, Boards, Audit Committees and key stakeholders. Lead security incident preparedness, response oversight and resilience planning. Drive cyber maturity improvements across people, process and technology. Manage security risk assessments and remediation programmes. Ensure … leading enterprise-wide cyber security programmes. Strong background covering: Operational Security Security Governance Cyber Risk Management Cyber Assurance Security Strategy Third-Party Security Management Incident Response & Cyber Resilience Experience overseeing or working alongside managed SOC services. Strong stakeholder management skills with the ability to engage both technical ...

security policies, standards and control frameworks. Deliver security reporting and risk updates to Executive Leadership Teams, Boards, Audit Committees and key stakeholders. Lead security incident preparedness, response oversight and resilience planning. Drive cyber maturity improvements across people, process and technology. Manage security risk assessments and remediation programmes. Ensure … leading enterprise-wide cyber security programmes. Strong background covering: Operational Security Security Governance Cyber Risk Management Cyber Assurance Security Strategy Third-Party Security Management Incident Response & Cyber Resilience Experience overseeing or working alongside managed SOC services. Strong stakeholder management skills with the ability to engage both technical ...

applicable, and dependency scanning. Drive observability and production excellence by implementing logging, metrics, and tracing, creating actionable alerts, defining SLOs and SLIs, and leading incident response and post‐incident improvement activities. Embed security by design through secure coding practices, threat modelling, role‐based access control and least ...

runtime platforms that make AI services reliable, secure, observable and supportable at Arm scale. You will work across Kubernetes, cloud, identity, secrets, networking, telemetry, incident management and automation to provide the production foundation for Arm’s AI platform.Participate in production support and our paid on-call rota for high … impact incident response.Production AI runtime platforms:Build/deploy and operate the infrastructure for centrally hosted AI platform services, including MCP server infrastructure, model gateway services and supporting control-plane components.Design runtime patterns for isolation, scalability, secure execution, capacity management and cost-aware operation.Automate provisioning, configuration, upgrades and lifecycle ...

reports and updates for senior management * Monitor regulatory developments and create appropriate compliance roadmaps * Support cybersecurity awareness and training across the organisation * Participate in incident response and post-incident reviews * Help develop and implement corrective measures following security incidents * Provide credible cybersecurity guidance to stakeholders across ...