76 to 100 of 210 Incident Response Jobs in the UK excluding London

Security Incident Management Analyst (x3) Onsite in Inverness or Preston £450 per day (negotiable) inside ir35 6 months duration Active SC clearance We are looking for Security Incident Management Analysts to join a major secure programme, supporting the governance and coordination of security incidents across a complex multi … security stakeholders to ensure incidents are effectively tracked, escalated, reported and evidenced. Key responsibilities: Track security incidents from identification through to closure Coordinate incident updates across multiple suppliers Monitor SLAs, resolution performance and escalation trends Produce incident reports, dashboards and governance packs Identify gaps in supplier reporting, ownership ...

Security Operations Centre (CSOC). You'll take incidents escalated from Tier 1 and Tier 2 analysts, assess their business impact, and recommend the response and escalation path. You'll triage threat intelligence (IOCs and TTPs) from multiple sources, run threat hunts across the SIEM, and help organisations identify … Identity and Defender for Cloud. Key responsibilities Handle security incidents escalated by L1 and L2 analysts, carry out business impact analysis and recommend response actions and escalation paths Perform advanced event and incident analysis, including baselining and trend analysis Conduct intelligence-led threat hunting using IOCs and TTPs ...

play an important role in protecting clients from evolving cyber threats. You will work with a range of security technologies, analyse security events, support incident response activities and contribute to the ongoing development and improvement of security services. This is an excellent opportunity for someone looking to build … doing Analyse security events, investigate alerts and identify potential cyber threats. Perform log analysis and correlate events across multiple security platforms. Support incident investigation, response and remediation activities. Deploy, manage, maintain and improve security tooling, including SIEM, EDR and vulnerability management platforms. Develop and implement automation to improve ...

prioritising, and managing security risks using industry-leading security tools. Planning and delivering security patching and system hardening initiatives. Investigating security events and supporting incident response activities. Collaborating with engineering teams to embed security controls into CI/CD pipelines and infrastructure automation. Improving monitoring, threat detection … response capabilities. Driving security improvement projects across cloud, endpoint, identity, and network security domains. Supporting compliance, assurance, and audit requirements within a regulated environment. Promoting secure engineering practices and mentoring technical teams on security best practices. What We're Looking For Essential Experience Experience in Security Operations, Security Engineering ...

prioritising, and managing security risks using industry-leading security tools. Planning and delivering security patching and system hardening initiatives. Investigating security events and supporting incident response activities. Collaborating with engineering teams to embed security controls into CI/CD pipelines and infrastructure automation. Improving monitoring, threat detection … response capabilities. Driving security improvement projects across cloud, endpoint, identity, and network security domains. Supporting compliance, assurance, and audit requirements within a regulated environment. Promoting secure engineering practices and mentoring technical teams on security best practices. What We're Looking For Essential Experience Experience in Security Operations, Security Engineering ...

coverage across on-site and offshore support hours. Use SQL scripting, automation, monitoring, and observability tools to improve operational resilience, service health, reliability, and incident response. To be successful in this role, were seeking the following: Excellent SQL scripting skills. Strong scripting and automation skills using languages such … Proven skills and track record in AI automation, including the use of intelligent automation capabilities to reduce manual effort, improve operational efficiency, and enhance incident response workflows. Experience applying AI and automation solutions for alert correlation, anomaly detection, predictive monitoring, and service optimisation. Strong understanding of Site Reliability ...

configuration changes, integrations and automation to improve efficiency and consistency. Monitoring service health, capacity, performance and security, proactively addressing risks and vulnerabilities. Leading complex incident resolution, root-cause analysis and security investigations. Coordinating patching, upgrades, backups, recovery testing and business continuity arrangements. Maintaining technical documentation, operational procedures, asset records … tasks and improve efficiency. Cloud services, SaaS applications, collaboration tools and development-support services. IT security, vulnerability management, patching, monitoring, backups and disaster recovery. Incident management, root-cause analysis and security incident response, ideally involving SIEM tools. IT service management covering incidents, problems, changes and assets. Strong ...

capabilities across a range of technical environments. You will play a key role in designing, implementing and maintaining security solutions, proactively identifying risks, supporting incident detection and response, and ensuring compliance with recognised security standards and best practices. Key Responsibilities Design, implement and maintain security tools, systems … using tools and frameworks such as CIS Benchmarks. Identify vulnerabilities, assess risks and support the implementation of effective remediation measures. Contribute to security monitoring, incident detection, response and threat intelligence activities. Skills and Experience The ideal candidate will have experience in several of the following areas: Strong understanding ...

This is an exciting opportunity to take on a varied, hands-on role at the heart of security operations, combining proactive threat monitoring and incident investigation with wider infrastructure support. You will work across cloud, network and endpoint security technologies, helping to identify risks, respond to emerging threats … Analyst/Engineer role Experience in a Service Desk, IOC, NOC, or managed services environment. Strong knowledge of cyber security principles, security monitoring and incident response. Experience with SIEM, endpoint security and security event investigation (Microsoft security or ELK stack preferred but not required) Experience with digital forensics ...

streaming, ETL/ELT, batch and real-time pipelines, data contracts, lineage, cataloguing, quality rules, and scalable cloud storage. Cybersecurity: SOC workflows, threat hunting, incident response, detection engineering, vulnerability and exposure management, IAM/PAM, Zero Trust, cloud security, and security control mapping. Security standards: Practical … service accounts, roles, entitlements, devices, applications, and cloud resources. Threat-intelligence fusion linking indicators, malware, campaigns, threat actors, observed telemetry, vulnerabilities, and affected assets. Incident investigation timelines, alert correlation, root-cause analysis, blast-radius assessment, and recommended containment evidence. Risk-based vulnerability prioritization using exploit context, asset criticality, exposure ...

SIEM, EDR, Microsoft Defender, and vulnerability management tools. Experience securing Microsoft Azure environments. Strong analytical, problem-solving, and stakeholder management skills. Experience with security incident response and risk management. Desirable Industry certifications such as Microsoft SC-200, AZ-500, SC-100, or ISC SSCP, CCSP, or CISSP. This ...

maintenance and updates to roll out new features and keep the platform secure. Participate in a 24/7, on-call rotation for incident response escalation within response and on-site Service Level Agreements (SLA). Provide technical implementation support in customer environments, including guidance on implementation ...

pipelines to support safe, consistent delivery across environments. Maintaining and improving observability across the platform estate, including monitoring, logging, alerting, and dashboards. Supporting technical incident response and post-incident reviews, contributing to problem management and long-term remediation. Maintaining platform security standards, including access control reviews, vulnerability … Elemental services such as MediaLive, MediaConvert, and MediaPackage. Supporting live events and broadcast-critical streaming services, including monitoring, quality assurance, and incident response. Income-generating platform work Contributing to the development and operation of server-side ad insertion capability and other income-generating platform initiatives. Supporting the technical delivery ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

technical expertise with strategic client guidance, you will help Trident and its clients identify threats, reduce risk and strengthen their security posture. Lead complex incident investigations, forensic analysis and root-cause determination. Monitor and analyse security events using SIEM platforms, threat intelligence and security tooling. Conduct proactive threat hunting … enrich alerts to identify sophisticated threats and indicators of compromise. Coordinate containment, eradication, recovery and post-incident review activity across clients, internal teams and third parties. Provide clear risk assessments, incident reports and practical security recommendations to technical and non-technical stakeholders. Support security governance and compliance requirements ...

remotely. Investigating performance issues, outages, and monitoring alerts. Managing escalations and working closely with third-party suppliers and vendors. Maintaining accurate technical documentation and incident records. Participating in major incident response and structured 24/7 shift handovers. Delivering excellent customer service while maintaining SLA performance. Essential … Skills Previous experience in a 2nd Line Network Support, Connectivity Engineer, NOC Engineer or Service Desk role. Strong troubleshooting and incident management skills. Experience supporting: Cisco Routing & Switching (ISR, ASR, Catalyst, Nexus) Cisco security and firewall technologies Cisco Wireless Solutions Broadband, WAN and connectivity services VLANs and VPNs Experience ...

Identity Management and Zero Trust principles. Support Cyber Essentials Plus, ISO 27001, DSPT and NHS security compliance activities. Participate in penetration testing, security audits, incident response and root cause analysis. Promote cyber security awareness and best practice across the organisation. Drive innovation through automation, AI and modern technology ...

security assurance frameworks. Enterprise and security architecture approaches including TOGAF and SABSA. Cloud security and secure digital transformation programmes. Security operations, vulnerability management and incident response. Secure software development and DevSecOps practices. ICT service management approaches including ITIL. Additional Requirements Must be eligible and willing to obtain UK Government ...

practices within the work environment to improve code quality, delivery speed, and operational outcomes (e.g., AI-assisted code review/refactoring, test strategy acceleration, incident/root-cause analysis support), while establishing consistent validation standards (secure coding, peer review, automated testing) and promoting reuse of effective patterns across … Helm, Kustomize, Argo CD, Flux, or continuous integration systems Experience with observability stacks and site reliability engineering practices, including service level indicators and objectives, incident response, and post-incident reviews Exposure to regulated environments and implementing security and compliance controls without compromising developer experience ABOUT ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

management lifecycle for the UK estate, scanning, triage, prioritisation, patching and reporting, working with global colleagues to drive risk down and evidence progress. Security Incident Response: Act as a senior responder for security alerts and incidents, leading investigation, containment and post-incident review alongside the global ...

Monitor and triage security alerts within Splunk SIEM. Investigate security incidents including phishing attacks, credential abuse, malicious process activity, and suspicious network traffic. Support incident response activities through containment and escalation procedures. Maintain detailed security case documentation and investigation notes. Contribute towards operational metrics including MTTD and MTTR … detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with Windows, Linux, authentication systems, and endpoint security logs. Strong communication and stakeholder engagement skills. Desirable Skills ...

endpoint infrastructure Take ownership of complex technical problems through to resolution, coordinating with internal teams and third-party suppliers where required Participate in major incident management, providing technical expertise and supporting rapid service restoration Provide technical input into projects, migrations, upgrades and new technology deployments Identify opportunities to improve … security technologies Cyber Essentials best practices Endpoint protection and device security Email security and threat protection Backup and disaster recovery solutions Ransomware protection and incident response principles Infrastructure & Networking Windows Server administration Active Directory and Group Policy Server virtualisation (Hyper-V, VMware or similar) Firewalls and VPN technologies ...

Logic Apps or SOAR experience Detection-as-Code and CI/CD pipeline experience PowerShell or Python scripting skills Experience supporting Threat Hunting or Incident Response activities Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have ...