101 to 125 of 988 Incident Response Jobs in the UK

frameworks Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident response, threat intelligence and cyber defence capabilities Architect security monitoring, detection and response solutions Design business continuity and cyber resilience frameworks Compliance … architecture role Proven experience designing enterprise-scale security architectures Strong background in defence, aerospace or government security programmes Demonstrated expertise with security operations, incident response and threat management Track record of leading security transformation and programme implementations Technical Knowledge Deep expertise in security architecture frameworks, methodologies and best ...

Analyse logs from endpoints, networks, cloud services and security tools to detect suspicious behaviour Escalate incidents where appropriate and work closely with engineering and incident response teams Develop and improve SIEM detection rules and alert tuning to reduce false positives Produce clear incident reports and maintain accurate … documentation Participate in the on-call rota and support major incident response when required Contribute to the continuous improvement of SOC processes, tooling and operational procedures Skills & Experience Experience working withi n a 24/7 Security Operations Centre ( SOC) or equivalent cyber security environment Strong hands ...

frameworks. Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident response, threat intelligence and cyber defence capabilities. Architect security monitoring, detection and response solutions. Design business continuity and cyber resilience frameworks. Compliance … architectural role. Proven experience designing enterprise-scale security architectures. Strong background in defence, aerospace or government security programmes. Demonstrated expertise with security operations, incident response and threat management. Track record of leading security transformation and programme implementations. Deep expertise in security architecture frameworks, methodologies and best practices. Expert ...

frameworks. Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident response, threat intelligence and cyber defence capabilities. Architect security monitoring, detection and response solutions. Design business continuity and cyber resilience frameworks. Compliance … architectural role. Proven experience designing enterprise-scale security architectures. Strong background in defence, aerospace or government security programmes. Demonstrated expertise with security operations, incident response and threat management. Track record of leading security transformation and programme implementations. Deep expertise in security architecture frameworks, methodologies and best practices. Expert ...

frameworks. Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident response, threat intelligence and cyber defence capabilities. Architect security monitoring, detection and response solutions. Design business continuity and cyber resilience frameworks. Compliance … architectural role. Proven experience designing enterprise-scale security architectures. Strong background in defence, aerospace or government security programmes. Demonstrated expertise with security operations, incident response and threat management. Track record of leading security transformation and programme implementations. Deep expertise in security architecture frameworks, methodologies and best practices. Expert ...

infrastructure and established a modern, cloud-first security stack, it is an exciting time to join the business as we mature our detection, response, and automation capabilities across a global estate. You will work collaboratively with the business and the wider IT team - Infrastructure, Network, Development, DevOps, and Service … with Palo Alto Cortex XSIAM and XSOAR, Cortex XDR, Microsoft Purview, Mimecast, Abnormal, Nessus, and Microsoft 365. You will participate in security investigations and incident response, responding to events involving malware, data loss, phishing, or network intrusion, and supporting our data protection and vulnerability management activity. You will ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. Client Details Our client … analysis and identifying potential threats or areas requiring further investigation. Working closely with external security service providers to ensure effective monitoring, alert management, and incident handling. Supporting cyber incident response activities as a technical security specialist. Analysing security metrics and trends, providing recommendations to improve security controls ...

support). Monitor, analyse, and investigate network traffic and emerging threats, including active DDoS activity. Support customer maintenance, upgrades, and technical communications. Contribute to incident response and post-incident reviews that sharpen our detection and mitigation playbooks. Work within ITIL processes (Incident, Change, Problem, Service Requests … Network+, Security+, CySA+, or CyberOps. If you’re early in your career and hungry to build deep expertise in network security, traffic analysis, and incident response, this role was designed for you. Bright Purple is an equal opportunities employer: we are proud to work with clients who share ...

optimise controls across Azure, M365, and infrastructure environments Lead hardening initiatives across IAM, PAM, AD, and network security Drive security automation and DevSecOps practices Incident Response & Threat Detection Lead real‐time response to security incidents Oversee SIEM/SOAR integration, alerting, and playbooks Conduct investigations using … Looking For 7 years in cybersecurity, with 3–4 years in a lead/principal capacity Experience spanning security engineering, SOC/incident response Strong expertise across: SIEM (Sentinel, Splunk, LogRhythm), EDR/XDR (Defender, CrowdStrike, SentinelOne), IAM/PAM/identity security, Vulnerability tooling (Tenable, Pentera, etc. ...

Group plc seeks a Director, Digital Forensics & Incident Response (Global) to lead the global DFIR capability, setting strategic direction and ensuring effective preparedness, response, recovery, and continuous improvement across cyber incident management and forensic investigations. The role requires driving operational excellence, collaborating with NCC Group leaders … expanding security services through incident response opportunities. #J-18808-Ljbffr ...

hands-on leadership role, working closely with senior ICT stakeholders, service providers and internal teams to maintain assurance, drive continuous improvement, and lead incident response when required. Key responsibilities Own and lead the organisation s cyber security strategy, policies, standards and operating model. Embed security-by-design within … recovery and business continuity testing. Lead vulnerability management and security testing activity (internal scanning, external testing, remediation tracking, evidence gathering). Manage and coordinate incident response, investigation, reporting and post-incident improvement actions. Maintain compliance and evidence for key standards/frameworks, including (as applicable ...

hands-on leadership role, working closely with senior ICT stakeholders, service providers and internal teams to maintain assurance, drive continuous improvement, and lead incident response when required. Key responsibilities Own and lead the organisation’s cyber security strategy, policies, standards and operating model. Embed security-by-design within … recovery and business continuity testing. Lead vulnerability management and security testing activity (internal scanning, external testing, remediation tracking, evidence gathering). Manage and coordinate incident response, investigation, reporting and post-incident improvement actions. Maintain compliance and evidence for key standards/frameworks, including (as applicable ...

controls across CoinShares’ cloud-first environment. This role is responsible for engineering and architectural oversight, working in partnership with the Analyst’s monitoring and response activities. You will play a key role in strengthening CoinShares’ security posture in a highly regulated financial environment, ensuring scalable, resilient, and secure cloud … maintain security controls across AWS environments. Configure, manage, and optimise AWS GuardDuty, including alert tuning, findings triage workflows, and integrations with SIEM and incident response processes. Lead cloud security monitoring, detection engineering, and preventative control design. Work closely with the Cyber Security Analyst on incident response ...

production at scale, with deep instrumentation and strong operational rigor. You will partner across engineering to deliver secure software, improve stability, and lead incident response and continuous improvement. Job Responsibilities Design, develop, troubleshoot, and deliver secure, high‐quality production software and services for AI infrastructure Build backend services … parallelism, speculative decoding) Lead reliability engineering for LLM endpoints through capacity planning, load/soak testing, safe rollouts (blue/green, canary), failover, and incident response for outages and model‐quality regressions Participate in an on‐call rotation, lead incident triage and mitigation, and produce clear post ...

confidentiality, integrity, and availability of company data. Collaborate with the IT System Administrator to manage and enhance the overall network and system security. Incident Response, Threat Detection & SOC Operations Develop, maintain, and run incident response plans to address security incidents promptly and effectively. … operations, including monitoring, triage, investigation, and response to security alerts. Assess the company threat landscape using MITRE ATT&CK and MITRE D3FEND to identify detection and mitigation opportunities. Connect and maintain log sources into our SIEM to ensure relevant coverage across corporate IT and the Intigriti platform. Write, tune ...

trusted engineering partner to the desk, ensuring systems are stable, performant, and aligned with business needs. Support live trading environments, including incident response, root cause analysis, and post mortem leadership. Work as a core member of the software engineering team, participating in daily standups and design discussions. Contribute … across trading systems, including automated remediation, self‐healing workflows, and resilience engineering. Use enterprise‐authorized AI capabilities within the work environment to accelerate major‐incident triage, troubleshooting, and post‐incident analysis, validating outputs and handling operational data according to sensitivity and security requirements. Lead reuse‐first adoption ...

audience, showing trends over time, and structuring reports around the decisions the reader needs to make, not just the findings. Set the standard for incident response and detection readiness. Drive adoption of incident response practices across engagements, own the IR-to-vulnerability-management feedback loop ...

audience, showing trends over time, and structuring reports around the decisions the reader needs to make, not just the findings. Set the standard for incident response and detection readiness. Drive adoption of incident response practices across engagements, own the IR-to-vulnerability-management feedback loop ...

apply. The Role - As SOC Operations Manager, you'll lead the day-to-day operation of the Security Operations Centre, ensuring security monitoring, incident response and cyber defence capabilities are operating effectively. You'll be responsible for developing the SOC function, leading analysts and engineers, improving operational maturity … excellence and stakeholder management. Responsibilities - Lead and develop a high-performing SOC team, providing coaching, mentoring and technical leadership. Oversee the detection, investigation and response to cyber security incidents. Drive continual improvement across SOC processes, playbooks and operational procedures. Monitor and improve key SOC performance metrics including MTTD, MTTR ...

Cloud, and manages tooling through infrastructure-as-code. They run a quarterly penetration test programme and are continuously building out our detection and response capability. It's a small team with broad scope, which means your work is visible, your opinions are heard, and there are meaningful problems … solve will matter. Does this sound like you? You're a senior security engineer who operates credibly across cloud security, detection tooling, and incident response, without being narrowly specialised. You own meaningful parts of the security stack, contribute hands‐on to Azure cloud hardening, and show up reliably ...

seeking a Security Operations Manager to lead and strengthen Frasers Group’s internal Security Operations Center (SOC), ensuring robust monitoring, detection, and response capabilities across our global retail, digital, cloud, and operational technology environments. In this role, you will manage and mentor the SOC team, providing strategic direction … operational oversight. You will participate in on‐call rotations, ensuring rapid and effective response to security incidents, and maintain continuous improvement of detection and alerting capabilities to address emerging threats. Key responsibilities include: Lead and develop the internal SOC team, fostering a proactive, high‐performing security operations culture. Oversee ...

trusted engineering partner to the desk, ensuring systems are stable, performant, and aligned with business needs. Support live trading environments, including incident response, root cause analysis, and post mortem leadership. Work as a core member of the software engineering team, participating in daily standups and design discussions. Contribute … across trading systems, including automated remediation, self healing workflows, and resilience engineering. Uses enterprise-authorized AI capabilities within the work environment to accelerate major-incident triage, troubleshooting, and post-incident analysis, validating outputs and handling operational data according to sensitivity and security requirements. Leads reuse-first adoption ...

production at scale, with deep instrumentation and strong operational rigor. You will partner across engineering to deliver secure software, improve stability, and lead incident response and continuous improvement. Job responsibilities Design, develop, troubleshoot, and deliver secure, high-quality production software and services for AI infrastructure Build backend services … quantization, parallelism, and speculative decoding Lead reliability engineering for large language model endpoints through capacity planning, load and soak testing, safe rollouts, failover, and incident response for outages and model-quality regressions Participate in on-call rotations, lead incident triage and mitigation, and produce clear post-incident ...

Management of security monitoring systems, including intrusive prevention and detection systems, to alert, detect and block potential cyber security incidents, and provide a prompt response to restore normal operations with minimised system damage. Identification of emerging cyber security threats, attack techniques and technologies to detect/prevent incidents … Barclays Mindset - to Empower, Challenge and Drive - the operating manual for how we behave. Join us as a Senior DFIR (Digital Forensics and Incident Response) Analyst at Barclays, where you will play a critical role within the Security Operations Centre, protecting the organisation from cyber threats and security ...

Developer Empowerment: Building and maintaining 'golden path' templates for secure service deployment, enabling feature teams to confidently and safely push code without compromising security. Incident Response: Contributing expertise to the security incident response team, helping to swiftly and effectively manage and resolve security events. What ...