101 to 125 of 503 Incident Response Jobs in the UK

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

Starling SOC team, you will be working with the industries brightest SecOps professionals to protect Starling customers, assets, and systems using the latest technologies. Incident Triage, Response, and Investigations based on Alerts received from multiple sources which include: Cloud Infrastructure/Security. Endpoint Detection and Response. Perimeter detection … tooling. Investigating and responding to security alerts raised by Users. Enhancing and creating analytic triggers to enhance alert efficacy. Continuous development of incident handling and readiness processes. Proactive threat hunting based on threat intelligence. Documentation of incidents and investigations. RequirementsAbout your SkillsWe're open-minded when it comes ...

three global functions and hold global accountability for client support and SLA performance across every client and region: Client Support (incl. Incident & Problem Management) - our client-facing service desk, owning triage and first-contact resolution, incident response and the client/product-team relationship. Kaluza Platform Performance … steady, credible presence clients and colleagues rely on - from a board-level service review to a live Sev1. Specifically, you'll: Client Support, Incident & Problem ManagementOwn incident response end to end - severity, Major Incident command, root cause analysis, client communication and resolution within contractual SLAs. Manage ...

will play a key role in identifying, analysing, and communicating cyber threats that could impact government systems and services. Working closely with Security Operations, Incident Response, and wider Cyber Security teams, you will help build situational awareness, develop actionable intelligence, and support the detection and response … Malware indicators Support identification of threat actor behaviours, tactics, techniques, and procedures (TTPs). Develop recommendations to strengthen defensive controls and improve detection capabilities. Incident Response Support Support cyber incident investigations throughout the intelligence lifecycle. Work alongside Incident Responders and Security Operations teams to enrich investigations ...

seeking an experienced Senior Security Engineer (Cloud & SecOps) to join our Information Security team. In this role, you will take ownership of threat detection, response and prevention across our AWS-hosted SaaS platform. As part of our continued investment in security operations, you will serve as the internal owner … managed Security Operations Centre (SOC). You will define our detection strategy, hold our service provider to the highest standards and lead our response to security incidents. You will also be accountable for the run-time security of our AWS estate. You will join a small, collaborative team based ...

Technical Consultant - Threat Detection, Response & Intelligence Location: Hursley - On-site Security clearance: UK national with a minimum of 5 years' UK residency required Certification: Microsoft Certified: Security Operations Analyst Associate We are seeking a technically strong and proactive Technical Consultant - Threat Detection, Response & Intelligence to join our security … investigate security alerts and events across SIEM and wider security tooling. Identify suspicious activity, indicators of compromise and potential security incidents. Conduct initial incident investigations, assess severity and impact, and escalate appropriately with clear supporting evidence. Support the full incident response lifecycle, including containment, remediation and post ...

looking for a Cyber Security Lead to provide day-to-day leadership across its cyber security function. You'll lead the team, oversee incident response and vulnerability management, support the organisation's cloud security journey and act as a senior security contact across the wider IT department. This … vulnerability remediation and system hardening. Act as the escalation point for security incidents both in and outside normal working hours. Own the cyber security incident process and lead incident simulations and war-game exercises. Manage post-incident forensic investigations and reporting, engaging third-party specialists where appropriate. ...

measured through clear, meaningful SLIs and SLOs. Enable pragmatic observability across services (logging, metrics, distributed tracing), with actionable alerting, and actively contribute to incident response and blameless post-incident reviews to drive continuous improvement. You have hands-on experience with GenAI, or evidence of actively pursuing personal …/SLOs. You'll help teams implement pragmatic observability—logging, metrics, and distributed tracing—with actionable alerting, and you'll contribute to (or lead) incident response and post-incident reviews that drive learning and measurable improvements. What's in it for youAt Accenture in addition ...

Incident Executive Job Title : IT Incident Executive Location: London City Contract Type: Permanent Annual Salary: Circa £30,000 DOE Working Pattern: Full Time, 40 hours per week (08:30 - 17:30, Mon - Fri). Potential for 1 day working from home after a successful probation period … ready to take your career to the next level? Our client, a dynamic organisation in the technology sector, is seeking an enthusiastic IT Incident Executive to join their team! This is an exciting opportunity for a talented individual who thrives in fast-paced environments and is passionate about delivering ...

Incident Executive Job Title : IT Incident Executive Location: London City Contract Type: Permanent Annual Salary: Circa £30,000 DOE Working Pattern: Full Time, 40 hours per week (08:30 - 17:30, Mon - Fri). Potential for 1 day working from home after a successful probation period … ready to take your career to the next level? Our client, a dynamic organisation in the technology sector, is seeking an enthusiastic IT Incident Executive to join their team! This is an exciting opportunity for a talented individual who thrives in fast-paced environments and is passionate about delivering ...

Security Engineer to join a high-performing Security Operations team. This is a hands-on role focused on detection engineering, threat hunting, automation, incident response, and security tooling optimisation within a modern cloud-first environment. Key Skills & Experience: Strong background in Security Engineering, SOC, Detection Engineering, or Incident Response Hands-on experience with SIEM/XDR platforms and KQL, SPL, or LogScale Microsoft 365 security experience Threat hunting and detection engineering aligned to MITRE ATT&CK Python and/or PowerShell scripting EDR experience across Windows and macOS environments Security automation and orchestration Experience using ...

Security Engineer to join a high-performing Security Operations team. This is a hands-on role focused on detection engineering, threat hunting, automation, incident response, and security tooling optimisation within a modern cloud-first environment. Key Skills & Experience: Strong background in Security Engineering, SOC, Detection Engineering, or Incident Response Hands-on experience with SIEM/XDR platforms and KQL, SPL, or LogScale Microsoft 365 security experience Threat hunting and detection engineering aligned to MITRE ATT&CK Python and/or PowerShell scripting EDR experience across Windows and macOS environments Security automation and orchestration Experience using ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. This … analysis and identifying potential threats or areas requiring further investigation. Working closely with external security service providers to ensure effective monitoring, alert management, and incident handling. Supporting cyber incident response activities as a technical security specialist. Analysing security metrics and trends, providing recommendations to improve security controls ...

Security Analyst to strengthen their security operations and enhance their cyber security posture. This is a hands-on technical role focused on threat detection, incident response, security controls, and continuous improvement. The successful candidate will act as a Subject Matter Expert (SME), providing technical guidance, mentoring junior analysts … collaborating with global teams to ensure effective security operations. Key Responsibilities of the Senior Cyber Security Analyst: Lead the monitoring, investigation, and response to security alerts and incidents using SIEM and other security technologies Analyse security logs, network traffic, and threat intelligence to identify potential threats and vulnerabilities Manage ...

improvements in detection and response.You will act as a trusted member of the SOC team, collaborating with peers and partners to strengthen detection and response capabilities. Beyond day-to-day operations, you will contribute to process improvements, automation initiatives, and SOC maturity objectives.What … situational awareness of emerging attacker techniques, vulnerabilities, and threat trends.• Support development and optimisation of SOC playbooks, processes, and automation use cases.• Collaborate with Incident Managers, Threat Intelligence, and other teams for unified response and knowledge sharing.• Produce clear, actionable reports for technical and non-technical audiences.You will ...

Information Security to define and deliver an integrated security strategy across IT, OT and Digital environments, covering security architecture, risk and assurance, cyber defence, incident response and supply chain security. You will build a modern, outcome-driven function that improves resilience, enables safe transformation and gives the executive … Architecture and engineering: Establish a strong central security architecture capability, embedding standardised patterns and reusable controls into programmes, design and procurement. Security operations and incident management: Strengthen detection, response and recovery across IT and OT, aligned to regulatory reporting and crisis management processes. Supply chain and segmentation: Lead ...

company's cyber security posture. This is an excellent opportunity for someone who enjoys a varied role spanning security operations, infrastructure security, compliance, incident response and security improvement projects. This position is predominantly remote, with occasional travel to the company's Essex office when required. Key Responsibilities Manage … Strong hands-on experience with Microsoft security technologies including: Microsoft 365 Security Microsoft Entra ID Microsoft Defender Microsoft Purview Intune Azure Security Experience with incident response, threat detection and remediation. Knowledge of SIEM technologies and security monitoring. Vulnerability management experience and familiarity with related tooling. Understanding of security ...

environment. This is a senior technical position within an established Information Security function, combining hands-on security expertise with responsibility for improving threat detection, incident response and the effectiveness of security controls. You'll act as a technical specialist within the team, taking the lead on more complex … your technical expertise to investigate incidents, understand their underlying causes and introduce improvements that reduce the likelihood of similar issues occurring again. Beyond incident management, you'll work closely with the wider IT team to assess vulnerabilities, strengthen security controls and ensure new technologies are introduced securely. ...

offices, in the cloud, and on manufacturing plant floors around the world. When something goes wrong, you will be at the centre of the response, coordinating people calmly and driving incidents to resolution. Day to day, you will support the operational rhythm of security: triaging alerts, prioritising vulnerabilities, advising … working in cyber security, with a strong understanding of core security principles and how to apply them in practice. Experience supporting or participating in incident response, alongside familiarity with security technologies including monitoring platforms, endpoint security, cloud controls and vulnerability tooling. Demonstrable fluency in AI prompt and context ...

system hardening baselines, and vulnerability management processes. Review OT network architecture, segmentation, data flows, and security dependencies. Enhance security monitoring, logging, threat detection, and incident escalation processes. Develop and maintain incident response, backup, recovery, business continuity, and cyber resilience arrangements. Coordinate restoration testing, cybersecurity exercises, and lessons … security control improvement programmes. Practical knowledge of OT asset management, privileged access, network segmentation, system hardening, vulnerability management, and security monitoring. Experience with incident response, disaster recovery, backup verification, and operational resilience. Understanding of legacy OT environments and the challenges of implementing security controls across unsupported or business ...

systems, sensitive data and essential business operations. This is an excellent opportunity to work across a broad security estate covering cloud security, vulnerability management, incident response, security monitoring and security engineering. You'll work closely with infrastructure, applications and business stakeholders to ensure security remains at the forefront … develop the organisation's vulnerability management programme, including scanning, prioritisation, remediation tracking and reporting. * Monitor security tools and alerts, supporting the detection, investigation and response to security incidents. * Conduct technical investigations, root cause analysis and post-incident reviews. * Implement, configure and maintain security controls across networks, servers, endpoints ...

Leeds (Hybrid) About the role You'll protect key business assets by monitoring, detecting, analysing and responding to security incidents, owning threat detection and incident response at real scale. What you'll be doing SIEM ownership: Oversee the day-to-day running of the SIEM, working closely with … Infrastructure, Networks, DevOps and an outsourced SOC. Detection rules: Define and fine-tune SIEM rules, and investigate alerts and incidents through to completion. Incident response: Gather and analyse data, then contain and respond to cyber security incidents as part of a dynamic monitoring and response capability. Threat ...

maintain of workspaces, including data connectors, Logic App, Function App, analytics rules, workbooks, and playbooks. Develop and refine custom queries for advanced threat hunting, incident investigation, and reporting. Optimize SIEM performance, cost, and data retention policies Identify new log sources work closely with infrastructure teams Identify, onboard, and configure … detect anomalies and incidents across the applications and infrastructure estate. Collaborate with SOC team to enrich detection logic based on known vulnerabilities and misconfigurations. Incident Response & Security Operations: Formulate proactive threat hunting rule based on emerging threats and intelligence. Contribute to the development and improvement of security playbooks ...

authentication and privileged access. Lead vulnerability management activities, prioritising remediation based on risk and potential business impact. Establish effective security monitoring, threat detection and incident response arrangements. Coordinate responses to significant security incidents, ensuring a calm, structured and effective approach. Assess third-party and supplier security risks … would be advantageous. Strong understanding of identity and access management, authentication, privileged access and access-control principles. Experience in vulnerability management, security monitoring and incident response, including coordinating significant security incidents. A track record of developing or improving security policies, technical standards and operational controls. Experience assessing technical ...