301 to 325 of 904 Incident Response Jobs in the UK excluding London

evidenced and delivered throughout the project lifecycle. It’s a broad role covering security assurance, technical design, certification, risk, penetration testing, supplier security and incident response. What You’ll Be Doing Provide assurance against contractual security obligations for product and service deliverables, including ISO 27001, CE+ and DCC. Deliver … Design principles and perform risk assessments for new technologies and business initiatives. Participate in Change Advisory Board (CAB) meetings to provide security assurance. Support incident and business continuity response plans and act as part of the incident response team when required. Contribute to security working groups ...

scenario testing. Coordinate disaster recovery, technology recovery and business continuity capabilities. Develop resilience reporting, governance and assurance frameworks for Executive and Board collaborators. Lead response activities during major operational disruptions and technology crises. Maintain responsibility for overall technology operational resilience maturity. 2. Cyber Security Leadership Own and evolve … Security and Cyber Security functions through the Chief Information Security Officer. Ensure effective security operations, vulnerability management, identity and access management, threat detection and incident response capabilities. Maintain alignment with recognised security frameworks including ISO 27001 and NIST. Maintain strong cyber resilience against evolving security threats. Lead executive ...

seeking an experienced Splunk Engineer to help design, build, and manage our Splunk SOAR service, with a strong focus on automation, security response, and service maturity. This role will be responsible for developing, reviewing, testing, and deploying Splunk SOAR playbooks into production environments, ensuring they are secure, reliable … Work closely with SOC analysts, security engineering teams, and stakeholders to optimise automation outcomes. Perform playbook tuning, troubleshooting, and enhancements to improve reliability and response times. Maintain clear technical documentation for playbooks, integrations, and processes. Support live security operations where SOAR automation is involved. Manage your own queue ...

business initiatives, as well as participate in Change Advisory Board (CAB) meetings to provide security assurance Support the implementation, delivery, and exercising of incident and business continuity response plans, and contribute to the lessons identified process Act as a member of the incident response team … event of a security incident Contribute to security working groups, security steering boards, Executive and Board level reports, and any other management material as required Own the management of Security Aspect Letters, compliance with them, and the creation of any flow down variations to suppliers and own the management ...

government security standards.Support risk treatment planning and remediation activities.Ensure alignment with NCSC, MoD, JSP, NIST, and Lockheed Martin security policies and standards where applicable.Support incident response investigations affecting classified systems.Assist with vulnerability management, patch management, and security monitoring activities.Participate in security reviews and technical investigations to identify root ...

identify weaknesses and recommend pragmatic remediations.Implement and improve AWS security monitoring, logging and alerting to detect misconfigurations, suspicious activity, and potential security incidents.Support incident response readiness by improving observability, evidence collection, recovery documentation, and operational playbooks for AWS platform services.Work closely with application teams, platform engineers and security ...

weaknesses and recommend pragmatic remediations. Implement and improve AWS security monitoring, logging and alerting to detect misconfigurations, suspicious activity, and potential security incidents. Support incident response readiness by improving observability, evidence collection, recovery documentation, and operational playbooks for AWS platform services. Work closely with application teams, platform engineers ...

security technologies including SIEM, EDR and vulnerability management tools is highly desirable, as is hands-on Linux administration, system hardening, patch management and security incident response. A solid technical background in networking technologies such as TCP/IP, DNS, firewalls and VPNs is essential. Exposure to Infrastructure-as-Code ...

/SLOs. You’ll help teams implement pragmatic observability—logging, metrics, and distributed tracing—with actionable alerting, and you’ll contribute to (or lead) incident response and post‐incident reviews that drive learning and measurable improvements. We are looking for experience in the following skills: Strong experience ...

Protection department. Our team is responsible for designing, implementing, configuring, and maintaining security tools used across Elsevier Technology. You will collaborate with colleagues from Incident Response, Threat Engineering, Governance Risk & Compliance (GRC), and work closely with business users to ensure our security tools are effectively adopted throughout … DevOps methodologies. We value practical experience applying IT security principles across areas such as Network Security, Security Operations, Vulnerability Management, Risk Management, and Incident Response.**Responsibilities*** Collaborate within the security engineering team to design and implement security tooling.* Design, build, and maintain AWS cloud infrastructure using Infrastructure as Code ...

resolve security incidents and infrastructure issues. Support backup, disaster recovery and business continuity processes. Participate in infrastructure projects, migrations and technology upgrades. Contribute to incident response activities and continuous security improvement. Requirements Experience 3+ years' experience in infrastructure, cybersecurity, DevSecOps or a similar role. Experience securing cloud platforms ...

applicable, and dependency scanning. Drive observability and production excellence by implementing logging, metrics, and tracing, creating actionable alerts, defining SLOs and SLIs, and leading incident response and post-incident improvement activities. Embed security by design through secure coding practices, threat modelling, role-based access control and least ...

cyber security analysts, the Senior Cyber Security Analyst will guide analysts in performing Business As Usual (BAU) activities, including daily checks, incident response (IR), event monitoring, and response etc. Additionally, they will work closely with team lead/manager to manage workloads, drive initiatives, uplift the team ...

Protection department. Our team is responsible for designing, implementing, configuring, and maintaining security tools used across Elsevier Technology. You will collaborate with colleagues from Incident Response, Threat Engineering, Governance Risk & Compliance (GRC), and work closely with business users to ensure our security tools are effectively adopted throughout … DevOps methodologies. We value practical experience applying IT security principles across areas such as Network Security, Security Operations, Vulnerability Management, Risk Management, and Incident Response.ResponsibilitiesCollaborate within the security engineering team to design and implement security tooling.Design, build, and maintain AWS cloud infrastructure using Infrastructure as Code (Terraform)Create ...

activities for the Tewkesbury site. Operate and maintain the site's Information Security Management System (ISMS). Monitor security events, investigate incidents, and coordinate response activities. Conduct risk assessments, vulnerability reviews, and security audits. Act as the primary point of contact for EASA regulators and auditors. Coordinate cybersecurity risks … consistency and continuous improvement. What We're Looking For Experience in cybersecurity, information security, governance, compliance, or risk management. Strong understanding of security operations, incident response, vulnerability management, and security best practices. Experience working within aerospace, manufacturing, defence, or other highly regulated environments. Knowledge of cybersecurity frameworks such ...

vulnerability scanners, and data encryption solutions. Manage vulnerability management programs, including regular scanning, penetration testing, and remediation of identified weaknesses. Lead and manage security incident response, including detection, analysis, containment, eradication, recovery, and post-incident review. Develop and maintain robust disaster recovery and business continuity plans related … NIST, Cyber Essentials), and best practices. Hands-on experience with security technologies such as firewalls, SIEM, IDS/IPS, vulnerability scanners, endpoint detection and response (EDR), and identity management solutions. Experience with cloud security (e.g., Azure Security). Proven experience in managing security incidents and conducting incident response. ...

line with agreed SLAs, following escalation processes as appropriate Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes Coordinate with incident & Technical managers, following incident management process during high-severity incidents Identify underlying ...

line with agreed SLAs, following escalation processes as appropriate Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes Coordinate with incident & Technical managers, following incident management process during high-severity incidents Identify underlying ...

line with agreed SLAs, following escalation processes as appropriate Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes Coordinate with incident & Technical managers, following incident management process during high-severity incidents Identify underlying ...

where you spot them. Support the lifecycle management of network hardware and software, including patching, firmware updates, and end-of-life replacement. Troubleshooting and incident response Act as a frontline responder for network incidents, carrying out initial investigation, troubleshooting, and remediation under time pressure. Diagnose and resolve issues … network health and performance, using observability tooling to spot issues before they become outages. Contribute to root-cause analysis and write up clear, accurate incident notes to support post-incident review. Wider systems and collaboration Pick up adjacent systems work as needed, such as server management, hypervisor ...

platform services (e.g. PAM, PKI, cross-domain solutions) in live environments Platform administration including patching, upgrades, configuration, and account management Monitoring, alerting, and incident response for platform services Incident and problem management, including troubleshooting and root cause analysis Networking concepts (TCP/IP, DNS, DHCP, firewalls) Automation … services, or cross-domain/secure transfer solutions Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms) ITIL-aligned service management practices (incident, problem, change) Automation of operational activities (scripts, scheduled jobs, runbooks) Experience working in high-availability or 24/7 service environments Integration with enterprise ...

with cloud environments, focusing on compliant, privacy‐aware design. Risk & Threat Management Conduct comprehensive risk assessments and threat modelling for cloud and AI systems.Support incident response, including issues involving AI‐driven systems and automated agents.Provide actionable mitigation strategies for cloud and AI threats. Stakeholder Engagement & Technical Leadership Provide ...

with cloud environments, focusing on compliant, privacy‐aware design. Conduct comprehensive risk assessments and threat modelling for cloud and AI systems. Support incident response, including issues involving AI‐driven systems and automated agents. Provide actionable mitigation strategies for cloud and AI threats. Stakeholder Engagement & Technical Leadership Provide expert ...

love to hear from you.What you'll be doingAs a senior member of our Information Security team, you'll:Lead the investigation and response to complex cyber security incidents across cloud, endpoint, identity, network, email and application environments.Drive improvements to our Security Operations capability through enhanced detections, playbooks, automation … into clear, practical recommendations that support informed business decisions.What you'll bringYou'll have experience in several of the following areas:Security Operations, Security Incident Response or Security Engineering.Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) technologies.Identity and Access Management, including MFA, Conditional Access ...

associated with Thales’ IS/IT networks, systems and applications, as per Customer (primarily HMG UK MOD) and Thales Group policy and mandatory requirements. Incident Response: Be responsible for the reporting, investigation and analysis of security incidents and potential breaches within classified environments, working with the Thales … Incident management team to ensure identified issues are resolved quickly. IS/IT Squad Engagement: Develop security requirements, epics and stories, along with guidance & governance to squads to ensure data protection and data security are included in the scope of new and existing IS/IT Squad activities, initiatives ...