76 to 100 of 856 Incident Response Jobs in the UK excluding London

play a key role in a growing SecOps function protecting a modern Microsoft and cloud environment. This is a highly technical role focused on incident response, SIEM optimisation, vulnerability management, and security engineering, helping drive a Zero Trust journey and supporting ISO 27001 & CIS controls. What … doing: Lead and support incident response, threat monitoring and root-cause analysis Tune and optimise SIEM & CrowdStrike EDR for maximum effectiveness Drive vulnerability management, remediation and risk reduction Secure cloud and infrastructure across Intune, Entra ID, Palo Alto, Cisco, Mimecast and more Implement key security controls including ...

operational responses that improve reliability and reduce downtime. What You'll Be Working On Monitor live systems, triage operational alerts and provide first-line incident response to maximise system availability. Develop and maintain dashboards that deliver clear visibility into system health, trends and operational performance. Analyse recurring incidents … tooling and operational processes. Define monitoring thresholds, alerting strategies and operational metrics that support reliable live quantum computing services. Produce documentation covering monitoring processes, incident response, escalation procedures and operational handovers. Contribute to automation and continuous improvement initiatives that reduce manual intervention and improve service reliability. What ...

with ITIL v4, enabled by ServiceNow, automation, and the practical use of generative and agentic AI. Our 24x7 Operations squads provide proactive management and incident response across infrastructure, cloud and modern workplace services. What You Will Do As a Senior Systems Engineer within our 24x7 Operations function … squad's senior technical escalation point on the day shift Squad (Mon-Fri, office hours), taking ownership of complex incidents, major incident response and problem management across both core infrastructure and Microsoft Modern Workplace services. You will combine deep technical capability with sound judgement under pressure, and play ...

objectives, while also helping achieve their sustainability goals.Role SummaryWe are seeking an experienced cybersecurity professional to provide technical leadership across security operations, vulnerability management, incident response, threat hunting, risk mitigation, and compliance activities. You will act as a trusted advisor to senior stakeholders, lead enterprise security initiatives … help strengthen and mature security capabilities across the organisationResponsibilitiesAs Senior IT Security Principal, you will provide technical leadership across security operations, incident response, threat hunting, vulnerability management, security architecture, identity and access governance, and compliance activities. You will lead the response to complex cybersecurity incidents, drive enterprise ...

Group plc is seeking a DFIR Managing Consultant to lead incident response engagements and manage a team of DFIR consultants. The role requires extensive experience in incident response and digital forensics, providing critical guidance during complex situations. Key responsibilities include coordinating teams, delivering thorough investigations ...

week. We are happy to discuss flexible working! Top 3 skills needed for this role: Highly experienced Cyber Security Operations expertise Advanced security incident response capability Proven security tooling and threat management knowledge What this role is all about: We're looking for a Senior Security Operations Engineer … strong relationships with internal stakeholders, vendors and technology partners to support effective security operations You'll develop and maintain security documentation, operational procedures and incident response playbooks Support penetration testing activities and coordinate the remediation of identified findings Contribute to the ongoing enhancement of monitoring, detection and response ...

Unilever is seeking a Regional CERT Manager to lead cyber incident response across the region. Hybrid role based in Manchester, with 3 days in the office weekly. You will guide the CERT, manage end-to-end incident response, and partner with SOC teams to strengthen detection ...

Enablement Your Background/Skills: 3rd Line Engineering, IT Infrastructure, Cyber Security, Azure, Google Workspace, Networking, CrowdStrike, Cisco, VMware vSphere, Windows Server, Jamf, Intune, Incident Response, Cyber Essentials, AI Tooling Who We Are BulkTM is on an incredible journey, with a mission to evolve from a manufacturing … security aspects of AI integration and take a leading role in our Cyber Essentials project next year. You'll also oversee infrastructure, security tooling, incident response, budgeting and contracting, while becoming a Tier 3 escalation point for complex issues that need deeper technical expertise. ...

Enablement Your Background/Skills: 3rd Line Engineering, IT Infrastructure, Cyber Security, Azure, Google Workspace, Networking, CrowdStrike, Cisco, VMware vSphere, Windows Server, Jamf, Intune, Incident Response, Cyber Essentials, AI Tooling Who We Are Bulk™ is on an incredible journey, with a mission to evolve from a manufacturing … security aspects of AI integration and take a leading role in our Cyber Essentials project next year. You'll also oversee infrastructure, security tooling, incident response, budgeting and contracting, while becoming a Tier 3 escalation point for complex issues that need deeper technical expertise. ...

OIDC) . Implement Role-Based Access Control (RBAC) and least-privilege access models across enterprise applications and platforms. Support identity threat detection, security monitoring, incident response, and IAM/PAM automation initiatives. Required Skills Strong experience in Identity & Access Management (IAM) , Privileged Access Management (PAM) , or cybersecurity operations. … governance . Strong understanding of RBAC, least-privilege principles, and Zero Trust security models . Experience with identity threat monitoring, threat detection, and security incident response . Proficiency in PowerShell scripting and automation for IAM/PAM administration and integration activities. Experience Required BeyondTrust Password Safe ...

critical infrastructure. This is a hands-on role , focused on alert triage, initial investigations, and working closely with an outsourced SOC to ensure effective incident response and escalation. What you’ll be doing: Monitoring and triaging security alerts in a live SOC environment Conducting initial investigations and validating … potential threats Escalating incidents in line with defined processes and playbooks Working closely with internal teams and external SOC providers Supporting incident response and contributing to continuous improvement of security operations What they’re looking for: Experience in a SOC or Security Operations environment Hands-on exposure ...

Training's government-funded Cyber Security course is your shortcut to breaking into the cyber security industry. Learn the essentials - threat intelligence, security testing, incident response and legislation - in an interactive online format and earn an NCFE-accredited Level 3 Certificate in Cyber Security Practices. Course details Duration … cyber security principles and threat intelligence Identifying malicious software, vulnerabilities and social engineering tactics Applying effective security testing methods and cyber security controls Developing incident response plans for security breaches Understanding legislation, information security standards and ethical practice in cyber security Potential roles Information Security Analyst Incident ...

Permanent Your Background/Skills: 3rd Line Engineering, IT Infrastructure, Cyber Security, Azure, Google Workspace, Networking, CrowdStrike, Cisco, VMware vSphere, Windows Server, Jamf, Intune, Incident Response, Cyber Essentials, AI Tooling The Opportunity As our ISenior/3rd Line IT Engineer, you'll take ownership of Bulk's infrastructure … security aspects of AI integration and take a leading role in our Cyber Essentials project next year. You'll also oversee infrastructure, security tooling, incident response, budgeting and contracting, while becoming a Tier 3 escalation point for complex issues that need deeper technical expertise. ...

hands‐on role in ensuring it is reliable, scalable, and observable. You will help establish and mature SRE practices, focusing on: Monitoring and observability Incident response Post‐incident review Reliability testing and capacity planning Toil reduction Enabling development velocity We offer a hybrid working arrangement with … Milton Keynes office. Key Responsibilities Support teams using ConnellsX and respond to incidents in a structured, blameless way Investigate root causes and drive post‐incident actions to completion Define SLIs, contribute to SLOs, and monitor error budgets Build dashboards, alerts, and runbooks to improve visibility Automate repetitive tasks ...

configured, resilient, secure, and performant. Beyond day-to-day operational responsibilities, the role carries explicit accountability for network architecture, strategic design, and cross-functional incident response. This role also attracts a market pay supplement of £6650 per annum (to be reviewed in February 2027). Main duties … routing, switching, wireless, WAN, load balancing, IPAM, DNS and DHCP services, alongside Extreme Networks Fabric Engine, Site Engine and wireless platforms. Network Security, Resilience & Incident Management Provide technical leadership for network security and operational resilience across the UKHSA estate. Administer Palo Alto NGFW, Panorama, VPN, micro-segmentation ...

Security Operations team, supporting customers across sectors including finance, manufacturing, utilities and retail. Your work will involve helping maintain security tooling, improve visibility, support incident response and automate security operations across critical infrastructure. The Role Operate, maintain and tune security monitoring and alerting platforms. Manage and optimise … ingestion and telemetry pipelines. Work with SOC Analysts to develop detection rules, alerts and playbooks. Support security incident investigation, response and containment. Automate repetitive SOC processes using scripting and automation. Onboard new systems and infrastructure into SOC monitoring. Support internal and customer cyber security engineering requirements. Maintain accurate ...

backed schemes including Tax-Free Childcare, Help to Save, Court Funds Office and Help to Buy. Be at the centre of decision-making Lead incident response activities, work directly with senior stakeholders and clients, and drive service recovery during high-profile operational events. Grow your career Develop expertise … incident management, stakeholder engagement, service improvement and data analytics, with opportunities to influence strategic decisions and progress into senior service management and leadership roles. Role Purpose The Business Incident Manager is responsible for the end-to-end management of business incidents impacting the NS&I B2B account, supporting ...

responsible for safeguarding our natural environment, supporting our world-leading food and farming industry, and sustaining a thriving rural economy. The Head of Security Incident and Response will provide operational leadership of the Defra Group Security Incident Response Management capability, ensuring readiness to respond to incidents ...

define pragmatic remediation roadmaps aligned to business priorities. Lead and support security architecture reviews across cloud, applications, infrastructure, IAM, data protection and detection/response domains. Provide expert consulting to customers on security strategy, risk reduction, control design, and security operating model improvements. Challenge weak security assumptions with confidence … guardrails. Partner with engineering, platform, DevOps and operations teams to embed security into delivery pipelines and infrastructure as code practices. Support threat detection, incident response readiness, use-case tuning, and post-incident improvement activities. Contribute to security standards, policies, patterns, reusable accelerators, and client-facing deliverables including ...

Starling is seeking a passionate Incident Responder to join the Security Operations team and protect customers, assets and systems with 24/7 coverage. You will report to the Information Security Lead - SecOps Response and own incident handling from detection through recovery. The role requires 3+ years … cyber incident response and digital forensics, strong communication skills, and the ability to mentor colleagues. We offer hybrid working across UK offices, including Cardiff. #J-18808-Ljbffr ...

fleet reliability and SLOs. This role is weighted toward hands‐on technical depth. You should be as credible in a design review or an incident bridge as you are in a planning session with senior stakeholders. Key Responsibilities Technical direction The technical roadmap for the estate. We want someone … availability and disaster recovery, patching, and backup and recovery Senior escalation point for complex L3 work: performance and query tuning, replication and failover, major incident response and post‐incident review Automation, infrastructure as code and database CI/CD, with everything in GitHub under proper change management ...

expertise to help maintain the availability, performance, and reliability of our critical SaaS applications. In this role, you will own and drive automation, monitoring, incident response, and infrastructure improvements across our multi-cloud, multi-region environment, working closely with senior engineering and cross-functional teams. What …/node failures, deployment rollbacks, ingress and networking issues, and resource/autoscaling problems. Participate in an on-call rotation (including weekends) and drive incident response from detection through resolution, with a primary focus on customer experience and minimizing impact. Drive improvements to disaster recovery, failover, and incident ...

strengthen our security posture. You will support the implementation of Zero Trust security principles across the organisation. You will enhance threat prevention, detection, and response capabilities through security engineering best practices. Cloud Security You will design and implement security controls within Microsoft Azure and hybrid cloud environments. You will … Operations & Threat Detection You will engineer and maintain SIEM, SOAR, and security monitoring platforms. You will develop and optimise security alerts, detections, and automated response processes. You will collaborate with internal teams and SOC providers to improve threat detection and incident response capabilities. You will support security ...

backed schemes including Tax-Free Childcare, Help to Save, Court Funds Office and Help to Buy. Be at the centre of decision-making – Lead incident response activities, work directly with senior stakeholders and clients, and drive service recovery during high-profile operational events. Grow your career – Develop expertise … incident management, stakeholder engagement, service improvement and data analytics, with opportunities to influence strategic decisions and progress into senior service management and leadership roles.Role PurposeThe Business Incident Manager is responsible for the end-to-end management of business incidents impacting the NS&I B2B account, supporting key services ...

runtime platforms that make AI services reliable, secure, observable and supportable at Arm scale. You will work across Kubernetes, cloud, identity, secrets, networking, telemetry, incident management and automation to provide the production foundation for Arm's AI platform. Participate in production support and our paid on-call rota … high impact incident response. Production AI runtime platforms: Build/deploy and operate the infrastructure for centrally hosted AI platform services, including MCP server infrastructure, model gateway services and supporting control-plane components. Design runtime patterns for isolation, scalability, secure execution, capacity management and cost-aware operation. Automate provisioning ...