376 to 400 of 901 Incident Response Jobs in the UK excluding London

Bash, or Python.Experience with CI/CD pipeline implementation and support.Strong understanding of Azure networking, security, and governance.Experience with cloud monitoring, logging, and incident response.Good understanding of backup, disaster recovery, business continuity, and high availability architecture.Strong analytical, troubleshooting, and problem-solving skills.Excellent communication and collaboration skills. #J-18808-Ljbffr ...

strategies to ensure data protection and business continuity]Ability to implement monitoring and logging solutions e.g., CloudWatch, to ensure system reliability, observability, and proactive incident responseComfortable working in Agile development teams, translating business requirements into technical solutions, and actively participating in sprint planning, retrospectives, and daily stand-upsFamiliarity ...

management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion hosts and MFA-enabled ...

management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion hosts and MFA-enabled ...

management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion hosts and MFA-enabled ...

management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion hosts and MFA-enabled ...

management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion hosts and MFA-enabled ...

risk mitigation strategies and security controls to reduce and manage identified risksMonitor compliance with applicable laws, regulations, and contractual obligations related to information securityLead incident response and breach management, including executive communications, regulatory coordination, and post incident remediationPartner with IT and Digital teams to embed secure ...

understanding of how they operate and identifying opportunities to improve reliability, performance and maintainability. Troubleshoot and resolve complex technical and operational issues. Participate in incident response and post-incident learning activities. Support architectural decisions that improve scalability and resilience. Collaborate with Product, Engineering and Operational stakeholders. Contribute ...

internal developer platform* Collaborate with **DevSecOps** to integrate security, compliance, and resilience practices* Contribute to cross-team initiatives that improve reliability across the stack### **Incident & Operational Excellence*** Play a key role in **incident response**, particularly within your specialism* Contribute to **on-call rotations** and continuous improvement ...

. This is a key role within our Managed Security Services Provider (MSSP) environment, where you will lead on the analysis and response to security incidents across multiple client environments. Working closely with the SOC Team Lead, you will support day‐to‐day monitoring and investigation activities, engage directly … helping to shape the future direction of our security services. Key Responsibilities Monitor, triage and investigate security alerts across multiple platforms Conduct in-depth incident analysis and support ongoing client investigations Act as deputy to the SOC Team Lead when required Review and assess escalated Tier 2 alerts ...

driven automation and blameless postmortems. Champion AI‐enabled operations using AWS Bedrock/SageMaker and Model Context Protocol (MCP) for log analysis, anomaly detection, incident triage, and workflow orchestration; establish adoption guardrails. Define and enforce cloud guardrails and security controls (SCPs/IAM boundaries, OPA policies, tagging, centralized logging … core infrastructure fundamentals (networking, storage, DNS) and APM/telemetry tooling. What Would Make You Stand Out: Practical experience with agentic AI for operations—incident triage, runbooks, and change management—with clear guardrails, auditability, and human-in-the-loop controls. Supporting AI/ML workloads at scale: SageMaker endpoints ...

driven automation and blameless postmortems. Champion AI‐enabled operations using AWS Bedrock/SageMaker and Model Context Protocol (MCP) for log analysis, anomaly detection, incident triage, and workflow orchestration; establish adoption guardrails. Define and enforce cloud guardrails and security controls (SCPs/IAM boundaries, OPA policies, tagging, centralized logging … core infrastructure fundamentals (networking, storage, DNS) and APM/telemetry tooling. What Would Make You Stand Out: Practical experience with agentic AI for operations—incident triage, runbooks, and change management—with clear guardrails, auditability, and human-in-the-loop controls. Supporting AI/ML workloads at scale: SageMaker endpoints ...

environment rather than bolted on afterwards. You’ll be involved in 3rd line support, system hardening, vulnerability remediation, patching, access controls, monitoring and incident response , alongside infrastructure upgrades and wider technology projects. We’re looking for someone with around 3–5+ years’ experience across infrastructure, security engineering …/IP, DNS, firewalls, VPNs and proxies Terraform, Ansible, Python or Bash Docker and Kubernetes NIST, CIS Benchmarks and/or ISO 27001 Security incident investigation and remediation You don’t need to tick every box. What matters is a strong infrastructure background, credible hands-on security experience ...

environment rather than bolted on afterwards. You’ll be involved in 3rd line support, system hardening, vulnerability remediation, patching, access controls, monitoring and incident response , alongside infrastructure upgrades and wider technology projects. We’re looking for someone with around 3–5+ years’ experience across infrastructure, security engineering …/IP, DNS, firewalls, VPNs and proxies Terraform, Ansible, Python or Bash Docker and Kubernetes NIST, CIS Benchmarks and/or ISO 27001 Security incident investigation and remediation You don’t need to tick every box. What matters is a strong infrastructure background, credible hands-on security experience ...

laptops, mobile) are configured securely.Vulnerability Management: Run and remediate vulnerability scans; don’t just report the issues; help figure out how to fix them.Incident Response: Be a key part of our incident response team, investigating alerts and refining our "playbooks" for future threats.Identity & Access: Manage the lifecycle ...

Improving detection rules, correlation logic and SOC playbooks Investigating recurring alerts and reducing false positives Supporting vulnerability management and remediation activity Contributing to post-incident reviews and lessons learned Producing incident, vulnerability and SOC reporting Working closely with wider infrastructure, network, architecture and development teams Sharing knowledge … years' experience within a SOC or security operations environment, with solid hands-on exposure to areas such as: Security monitoring and alert triage Incident response SIEM platforms EDR technologies Threat analysis/threat intelligence Vulnerability management Detection engineering or SIEM tuning I'm particularly interested in speaking with ...

endpoint infrastructure Take ownership of complex technical problems through to resolution, coordinating with internal teams and third-party suppliers where required Participate in major incident management, providing technical expertise and supporting rapid service restoration Provide technical input into projects, migrations, upgrades and new technology deployments Identify opportunities to improve … security technologies Cyber Essentials best practices Endpoint protection and device security Email security and threat protection Backup and disaster recovery solutions Ransomware protection and incident response principles Infrastructure & Networking Windows Server administration Active Directory and Group Policy Server virtualisation (Hyper-V, VMware or similar) Firewalls and VPN technologies ...

Conditional Access, Identity Protection and privileged access Supporting vulnerability management and remediation Implementing data protection controls using Microsoft Purview Supporting threat monitoring, detection and incident response Providing security input into technology projects and architecture decisions Supporting security frameworks including NCSC CAF, ISO 27001, NIST CSF and CIS Controls ...

security controls Managing Entra ID security, including Conditional Access, Identity Protection and privileged access Supporting vulnerability management and remediation Supporting threat monitoring, detection and incident response Providing security input into technology projects and architecture decisions Supporting security frameworks including NCSC CAF, ISO 27001, NIST CSF and CIS Controls ...

proposed technology changes and provide recommendations to stakeholders. Promote security awareness and influence teams to adopt security best practices. Assist with cyber security incident response by identifying architectural weaknesses and recommending improvements. Continuously monitor emerging cyber threats, vulnerabilities, technologies, and regulatory changes to improve the organisation's security ...

patterns. Implement monitoring, logging and observability solutions to improve platform visibility and operational performance. Drive infrastructure resilience, scalability, security and cost optimisation initiatives. Support incident response, troubleshooting and root cause analysis activities. Collaborate with cross-functional engineering teams to ensure successful delivery of platform and application services. Promote ...

primary technical contact for our outsourced Security Operations Centre (SOC), ensuring an effective partnership is in place to support monitoring, threat detection and incident response activities. In addition, you will help foster a strong security culture across the business through cyber security awareness initiatives, guidance and training. This ...

third‐party risk assessments. Practical vulnerability management experience – you're used to judging the real-world risks, not just looking at baseline CVSS scores. Incident response experience, including investigation, remediation, and root cause analysis. Working knowledge of Microsoft Sentinel, Defender, and KQL. A background in sys admin ...

pipelines and automated delivery workflows Implement monitoring, logging, tracing and observability best practices Optimise cloud environments for performance, reliability and cost efficiency Support incident response, troubleshooting and root cause analysis Apply cloud security best practices and governance controls Contribute to platform automation and developer self‐service capabilities Help ...