351 to 375 of 903 Incident Response Jobs in the UK excluding London

Matter Expert (SME) forthe cyber security analysts, the Senior Cyber Security Analyst willguide analysts in performing Business As Usual (BAU) activities,including daily checks, incident response (IR), event monitoring,and response etc.Additionally, they will work closelywith team lead/manager to manage workloads, drive initiatives,uplift ...

real-world attack techniquesMap customer log sources to detection use cases to assess coverage and identify gapsDesign and implement SOAR automations, integrations and response workflowsDevelop and document customer incident response playbooks aligned to detection outputsTranslate threat intelligence and operational learnings into improved detections and automationsDeliver detection … MITRE ATT&CK, including use case design, ruleset development and coverage assessmentLog source mapping and normalisation to support detection use casesNetwork Detection and Response technologies such as Vectra AI, Corelight or similarCloud security and telemetry, particularly within Azure environmentsThreat intelligence integration and enrichment to support detection and responseDevelopment ...

pipelines for database provisioning, schema changes, migrations, and configuration management. Partner with product engineering, SRE, security, and cloud teams to define SLAs/SLOs, incident response, root cause analysis, and risk mitigation. Establish monitoring, alerting, and observability for database health and performance. Drive proactive incident prevention. Define … access, security, backups, and compliance. Participate in design reviews, capacity planning, and product inception to translate feature requirements into scalable data solutions. Lead post-incident reviews and continuous improvement initiatives to reduce mean time to detect and recover. Represent the database platform across cross-functional initiatives and influence long ...

Head of Information Security & Continuity, the role plays a key part in embedding a strong security culture, managing security risk, and ensuring effective response to cyber incidents. The Information Security Manager works closely with Technology, Risk, Compliance, and business teams to ensure that security controls are proportionate, effective … track remediation of vulnerabilities and audit findings Monitor the threat landscape and coordinate responses to emerging risks and vulnerabilities Lead the investigation and response to information security incidents, ensuring lessons learned and improvements are implemented Support internal and external audits, including ISO 27001 certification and surveillance activities Manage third ...

remotely. Investigating performance issues, outages, and monitoring alerts. Managing escalations and working closely with third-party suppliers and vendors. Maintaining accurate technical documentation and incident records. Participating in major incident response and structured 24/7 shift handovers. Delivering excellent customer service while maintaining SLA performance. Essential … Skills Previous experience in a 2nd Line Network Support, Connectivity Engineer, NOC Engineer or Service Desk role. Strong troubleshooting and incident management skills. Experience supporting: Cisco Routing & Switching (ISR, ASR, Catalyst, Nexus) Cisco security and firewall technologies Cisco Wireless Solutions Broadband, WAN and connectivity services VLANs and VPNs Experience ...

early warning on hardware, storage and content delivery. Improve alerting quality and escalation logic so that attention is directed where it is needed. Lead incident response and post‐incident review, ensuring findings are fed back into the platform. Infrastructure Automation & Tooling Maintain and grow the code that … Java, Python or similar — alongside shell scripting Willingness to participate in an on‐call rota — shared, with a paid standby allowance Sound judgement under incident pressure, with strong written documentation and communication skills Proxmox or comparable virtualisation Working knowledge of AWS Monitoring and inventory tooling such as PRTG ...

Lead vulnerability management, patching, endpoint protection, SIEM, and threat monitoring activities. Manage identity and access controls, MFA, privileged access, and conditional access policies. Lead incident response activities and coordinate remediation efforts. Conduct risk assessments and support audit and compliance activities. Drive improvements in data security, governance, and cyber … with ISO27001 principles and broader governance or quality frameworks such as ISO9001. Experience with backup, disaster recovery, and business continuity planning. Strong troubleshooting and incident management capability. Experience managing third‐party suppliers and service providers. Excellent communication, stakeholder management, and relationship‐building skills. Ambition and capability to progress toward ...

prompt and configuration changes, with automated eval and regression checks before promotion. Reliability engineering: Define and track SLOs and SLAs for platform services, run incident response and root cause analysis, and write post-mortems people will read. On-call and runbooks: Take part in the programme … GitLab CI, Argo CD, Jenkins or similar. Observability: Hands‐on with Datadog, Prometheus, Grafana or OpenTelemetry, and opinionated about what's worth alerting on. Incident management: Calm, methodical instincts under pressure, and a habit of fixing the class of problem rather than the instance. AI and ML operations: Experience ...

prompt and configuration changes, with automated eval and regression checks before promotion. Reliability engineering: Define and track SLOs and SLAs for platform services, run incident response and root cause analysis, and write post-mortems people will read. On-call and runbooks: Take part in the programme … GitLab CI, Argo CD, Jenkins or similar. Observability: Hands‐on with Datadog, Prometheus, Grafana or OpenTelemetry, and opinionated about what's worth alerting on. Incident management: Calm, methodical instincts under pressure, and a habit of fixing the class of problem rather than the instance. AI and ML operations: Experience ...

prompt and configuration changes, with automated eval and regression checks before promotion. Reliability engineering: Define and track SLOs and SLAs for platform services, run incident response and root cause analysis, and write post-mortems people will read. On-call and runbooks: Take part in the programme … GitLab CI, Argo CD, Jenkins or similar. Observability: Hands‐on with Datadog, Prometheus, Grafana or OpenTelemetry, and opinionated about what's worth alerting on. Incident management: Calm, methodical instincts under pressure, and a habit of fixing the class of problem rather than the instance. AI and ML operations: Experience ...

Security, SOC, Infrastructure, Cloud, IAM, Network and Service Management teams. Drive the implementation and enhancement of Security Operations capabilities, including SOC, SIEM, detection and response, vulnerability management and incident response. Manage the transition of new security capabilities into live operational services. Work closely with security architects and technical … within enterprise environments. Strong understanding of Security Operations and the delivery of operational cyber capabilities. Experience delivering programmes involving areas such as SOC, SIEM, incident response, threat detection, vulnerability management, security tooling or security service transformation. Proven experience transitioning security capabilities from project delivery into BAU operations. Strong ...

Essential: 3+ years' experience in a cyber security role. Experience with Microsoft 365, Entra ID, Purview, endpoint security, SIEM, and vulnerability management. Experience in incident response and security monitoring. Knowledge of ISO 27001, GDPR, and financial services regulatory requirements. Advanced security certifications such as CISSP, CISM, CCSP, GIAC ...

patching and security updates. Create and maintain technical documentation and operational procedures. Collaborate with development teams to improve deployment processes and automation. Participate in incident response and on-call support activities. Work within established engineering standards, security controls and operational processes. Support a 24/7 operational environment ...

desirable extras include certifications such as GWAPT, GWEB, OSCP or AWS Security Specialty, Security Champions or developer training experience, and exposure to SOC or Incident Response environments. What's in it for you? Enjoy a generous market salary, along with fantastic growth opportunities and a vibrant work environment ...

Knowledge of security frameworks and standards including: - ISO 27001 - NIST Cybersecurity Framework - NIST 800-53 - CIS Controls - SABSA - TOGAF Understanding of security operations concepts, incident response, and detection capabilities. Knowledge of application security principles, including secure coding practices and OWASP guidance. Experience with DevSecOps practices and security automation. ...

C#, Angular, SQL Server Stay hands-on when needed: design, code, pair, review PRs, unblock the team Drive quality, reliability and security: testing approach, incident response, post-incident improvements Hire, onboard and develop engineers (including onshore/offshore collaboration) What we need from you 8+ years building ...

outsourced Security Operations Centre and govern vulnerability management practice, holding providers and suppliers to account for service performance. Own the council’s cyber incident response plans and lead the response to security incidents, keeping our services and our residents’ information safe. Lead security compliance and assurance activity … knowledge of security operations, vulnerability management and security compliance frameworks such as PSN, Cyber Essentials, PCI DSS and UK GDPR. Experience of leading the response to cyber security incidents, including coordination with major incident management and external agencies. A genuine passion for developing people, building inclusive teams ...

high‐quality production code, and reviews and debugs code written by others. Adds to team culture of diversity, opportunity, and respect. Develops and maintains incident response procedures, including root cause analysis and postmortem documentation. Required Qualifications, Capabilities, and Skills Experience with formal training or certification on software engineering … concepts. Strong understanding of SRE principles, including SLIs, SLOs, error budgets, and incident management. Ability to manage highly technical team of Site Reliability Engineers. Experience leading teams in the safe use of enterprise-authorized AI capabilities within the work environment for reliability engineering workflows, including validation habits and awareness ...

successful candidate will work closely with engineering, architecture, and product teams to implement modern reliability practices, automate operational workflows, and establish robust monitoring and incident management frameworks. Key Responsibilities Collaborate with engineering teams to modernize IT operations by improving observability, automation, and operational efficiency. Design and implement observability platforms … enhance operational intelligence and automation. Automate repetitive operational tasks (toil reduction) using scripting, orchestration tools, and automation frameworks. Implement self‐healing systems and automated incident response mechanisms to support autonomous operations. Collaborate with cross‐functional teams to ensure systems are scalable, resilient, and maintainable. Lead incident management ...

cybersecurity perspective. Support secure implementation of Industrial IoT (IIoT), cloud-connected industrial systems, and remote access solutions. Develop and maintain OT-specific cyber incident response procedures. Lead investigations and response activities for cybersecurity incidents impacting OT systems. Coordinate with IT Security Operations, engineering teams, and third-party ...

Relationships: CTTO — Direct line manager. Governance, infrastructure risk, and FinOps accountability. CISO (Head of Security) — Close working relationship. Security operations implementation, IAM policy, and incident escalation. Director of Platform Engineering — Coordinates on DevSecOps integration and CI/CD infrastructure requirements. • Head of Infrastructure & Cloud — Direct report. Hosting strategy, cloud … internal IT operations across a distributed estate — multiple sites or subsidiaries Commercial awareness: has owned cloud cost management and FinOps outcomes with measurable results Incident management and on-call leadership — has run major incident response at group level Strong vendor management: MSP relationships, colocation contracts, cloud provider ...

management lifecycle for the UK estate, scanning, triage, prioritisation, patching and reporting, working with global colleagues to drive risk down and evidence progress. Security Incident Response: Act as a senior responder for security alerts and incidents, leading investigation, containment and post-incident review alongside the global ...

compliance and engagement with Qualified Security Assessors (QSAs). Drive cyber awareness programs and phishing simulations to embed a security-aware culture. Manage security incident response planning and coordinate with Security Operations Centre (SOC). Report regularly to PayTech Executive Leadership and Edenred Group CISO on security program … Azure, GCP). Excellent communication skills, able to convey complex security topics to non-technical stakeholders. Pragmatic, calm, and resilient under pressure during incident management. Why Join Us? Be part of a dynamic and strategic security leadership team within a pioneering FinTech environment. Influence the protection of critical technologies ...

tooling, and platform controls. On the information security side, you'll provide the technical expertise that underpins our ISO 27001 and Cyber Essentials certifications, incident response, and day-to-day governance. If you've always wanted to work somewhere that treats security as a first-class concern rather … first point of contact for infrastructure queries across the team, maintaining clear and current documentation accessible to all colleagues. Information Security Provide the technical response to security incidents, including containment, eradication, and recovery, escalating to the CFO and Head of Engineering as required. Conduct DPIA technical reviews ...

frameworks and standards (e.g. ISO 27001, NIST Cyber Security Framework) Experience in conducting risk assessments and implementing effective security controls Hands-on experience in incident response, investigation, and resolution Experience supporting internal and external audits and compliance activities Experience managing third-party security risk or supplier assurance processes ...