401 to 425 of 901 Incident Response Jobs in the UK excluding London

endpoint skills across Azure, Microsoft 365, VMware, Intune, Autopilot, Entra ID and Conditional Access. Cyber security capability across security operations, vulnerability management, monitoring, incident response, Defender, Sentinel, Zero Trust, risk, compliance and governance. Professional strengths in PowerShell automation, documentation, problem solving, project delivery, vendor management, stakeholder engagement ...

Ireland, Canada and Aviva Investors. Your duties include designing, developing and maintaining automation playbooks that improve the speed, consistency and effectiveness of cyber incident response, working closely with cyber security teams, technology partners and business stakeholders to identify opportunities to automate manual processes, integrate security tools and deliver ...

measures into DevOps processes (DevSecOps) Maintain and improve cloud infrastructure, ensuring high availability, scalability, and security Participate in regular security audits, vulnerability assessments, and incident response activities Contribute to continuous improvement initiatives by evaluating new tools, techniques, and industry trends Benefits This role offers a comprehensive benefits package ...

architecture — including VPC design, VPC peering, shared VPC, Cloud Interconnect/VPN, Cloud NAT, firewall rules, and DNS Automate deployment pipelines, monitoring, alerting, and incident response using modern CI/CD and GitOps practices Monitor site stability and performance using GCP-native observability tooling (Cloud Monitoring, Cloud Logging ...

technical role (e.g. TAM, Security Consultant) Experience engaging senior stakeholders (CISO, Head of IT/Security) Strong understanding of SOC operations, threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability ...

Management (PAM) and privileged remote access solutions Data Loss Prevention (DLP) technologies and controls Exposure validation Identity and Access Management (IAM) Security monitoring and incident response and reporting Qualifications Degree-level qualification in an IT-related discipline or equivalent industry experience CompTIA Security+ CISSP Other recognised cyber security ...

security reviews for new architecture and significant features. Improve cloud security posture across AWS (primary) and Azure, partnering with platform/infra. Lead technical incident response for application‐layer incidents; coordinate with SOC and vCISO on cross‐domain incidents. Build security awareness and a security‐champions network ...

opportunity to support world-class cybersecurity programs for some of the largest organizations in the world, through a focus on rapid threat identification, incident response, cyber threat intelligence infusion, and mitigations to ensure defensive resiliency. You will work alongside Accenture's CrowdStrike Business Group as a trusted technical ...

access management, cloud services, private cloud environments, and Windows, Linux, and macOS operating systems. Strong understanding of cybersecurity technologies and strategies, including Security Operations, Incident Response, Security Frameworks, Vulnerability Management, SIEM, XDR, EDR/EPP, IPS/IDS/NDR, endpoint security, and cloud security. Hands‐on experience ...

Sentinel experience is highly desirable) Hands-on experience creating security use cases, analytics, and playbooks. Experience conducting security event triage and rapid incident response. Log analysis experience (Wireshark etc.). Strong understanding of information security principles, threat detection, and remediation processes. Knowledge of Microsoft and Linux technologies, networking, anti ...

workflows and automation.Site Reliability Engineering Design, implement, and maintain systems for high availability, scalability, and performance.Monitor and improve application reliability through proactive measures and incident response.Develop and maintain observability solutions (metrics, logging, tracing).Participate in on-call rotations and drive root cause analysis for incidents.Collaboration & Continuous Improvement Partner with ...

Kubernetes, etc.). Proficiency in observability tools (Prometheus, Grafana, ELK, OpenTelemetry). Security-first mindset with hands‐on experience in access control, encryption, and incident response. Solid networking knowledge - protocols, routing, firewalls, and cloud networking. Experience integrating and optimizing software delivery ecosystems (Git, Artifactory, Jenkins) as part ...

management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion hosts and MFA-enabled ...

including the development and mentoring of the Level 2 Analyst, monitoringnetworks to actively remediate unauthorised activities. Requirements Tasks: Developand integrate security event monitoring and incident management services. Respond tosecurity incidents as they occur as part of an incident response team. Implementmetrics and dashboards to give visibility … Enterprise infrastructure. Assistwith the leadership of a composite cyber response team during incidents andinvestigations Use of theSOAR platform to assist with playbook automation and case managementcapabilities to streamline team processes and tools. Produce documentationto ensure the repeatability and standardisation of security operatingprocedures. Developadditional investigative methods using the Authority ...

pragmatic, well‐understood patterns over those who lean on theory, jargon, or unnecessary complexity. A platform you've built and kept running, or an incident you've resolved and can clearly explain, will count for far more than a stack of certifications. Core Responsibilities Provision, configure, and harden … example CloudWatch) across services and infrastructure Maintain data pipelines, backup, and lifecycle management for Aurora PostgreSQL and other AWS‐native data tooling Platform Operations & Incident Response Act as first responder for infrastructure incidents, supporting root cause analysis and post‐incident review Coordinate patching, upgrades, and lifecycle management ...

including cybersecurity standards, cloud architecture guardrails and operational controls Lead DevOps and Site Reliability Engineering (SRE) maturity, embedding monitoring, observability, automated testing and structured incident response Drive adoption of automation and AI‐enabled tooling to improve anomaly detection, incident management, vulnerability management and operational efficiency Provide technical ...

Falcon. You will play a key role in ensuring services are efficient, resilient, and continuously improving - working closely with internal teams to evolve detection, response, and automation capabilities. What your days will look like Lead day‐to‐day operations across Analysis and Engineering teams delivering Managed Cyber Defence services. … ongoing client interactions related to service delivery and performance. Provide technical leadership, maintain awareness of relevant security technologies, and drive continuous improvements in detection, response, and key SOC metrics (MTTD, MTTR, automation coverage). The role is for you if: You have experience of embedding AI tooling within ...

people, platforms, and world‐class research. This is a hands‐on, impactful role at the centre of our cyber‐security function, combining monitoring, incident response, detection engineering, and continuous improvement of our security posture. You will work closely with IT, research computing, governance, and legal teams to ensure … accuracy. Investigate and triage security alerts, escalating and responding appropriately. Act as a responder for security incidents, supporting containment, eradication, and recovery. Produce clear incident documentation, including reports and root‐cause analysis. Develop and refine detection rules, automation workflows, and threat‐based use cases. Apply threat intelligence to improve ...

advertised to attract the right skills needed for the roleThe post of Security Officer has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 10 % per annum. Please … they are escalated and handled with the correct level of technical understanding for successful remediation by the affected organisations.In the event of a major incident, depending on your experience, you may also support the incident response activities and onwards more detailed investigations.The CSOC has an excellent training ...

Implement and manage robust security protocols and procedures, identifying potential threats and vulnerabilities across operational processes Oversee regular vulnerability assessments, ensuring rapid response and ongoing improvement of penetration testing plans and methodologies Ensure clear understanding within the team of the criticality of information and technology resources to enable effective … liaison for security-related matters, maintaining strong communication with the Cyber Team Collaborate closely with IT and Cyber teams to strengthen security posture, support incident response, and contribute to security policy development (including certificate and encryption key management governance) Provide oversight for Access Management capability, managing team workload ...

attract the right skills needed for the role The post of Security Officer has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 10 % per annum. Please be aware … escalated and handled with the correct level of technical understanding for successful remediation by the affected organisations. In the event of a major incident, depending on your experience, you may also support the incident response activities and onwards more detailed investigations. The CSOC has an excellent training ...

Security Operations team to proactively identify and address cybersecurity threats, drive operational excellence, and enhance our security posture. You'll lead strategic initiatives, supervise incident response, manage critical security projects, and foster a collaborative environment, ensuring top-tier system performance and adherence to security policies. Power without pause. … Provide hands-on expertise in the delivery of internal security projects and technical support for operational excellence. Act as a technical escalation point for incident management, ensuring prompt resolution and the consistent implementation of security processes and compliance. Collaborate closely with external suppliers and manage key security service forums ...

Security Lead & Cyber Vulnerability Manager who will be responsible for leading the organisations operational cyber security capability, ensuring the delivery of security operations, cyber incident management and infrastructure and cloud vulnerability management across the enterprise. Providing operational leadership for the identification, assessment and remediation of cyber security risks … will drive the organisations security position across infrastructure, cloud services and third parties. This includes security monitoring, incident response, threat intelligence, vulnerability assessment and ensuring all risks are managed taking into account business priorities and regulatory requirements. Key Accountabilities - Reduction of Cyber risk exposure through strong Security Operations ...

ability to thrive in a fast-paced Managed Service Provider (MSP) environment. Responsibilities: Utilize AI-enabled support tools and knowledge platforms to improve incident resolution times and service quality. Support Microsoft 365, Entra ID, Intune, Defender, Teams, SharePoint Online, and related cloud services. Assist with endpoint management, mobile device … established service metrics including SLA attainment, ticket quality, first-contact resolution, and customer satisfaction goals. Participate in after-hours support, escalation rotations, and major incident response activities as required. All other responsibilities delegated by the Management team. May be asked to provide on-site technical support to system ...

industry exposure with a depth of technical security knowledge and experience in cyber security, including cyber strategy, cyber risk management, security governance, cyber resilience, incident response, security operations, IAM and cyber threat management. Experience and knowledge of the regulatory, assurance and standards environment facing healthcare clients, including cyber … accept speculative CVs from agencies - you can see our policy on agencies here: Similar vacancies you might be interested in Cyber Response and Recovery - Assistant Manager (Proactive) Assistant Manager - Cyber and Digital Health Cyber Response and Recovery - Assistant Manager (Reactive) Cyber Response & Recovery - Manager (Remediation focus) #J ...