1,126 to 1,150 of 2,368 Incident Response Jobs in the UK

client of mine is looking for a hands-on Penetration Tester to support their cybersecurity function, with some responsibilities across security operations and incident response. The right candidate will have experience conducting infrastructure, Web Application, API, Cloud and Active Directory penetration tests within complex environments. Key Requirements: Proven commercial … such as Pentera, AppCheck, Microsoft Defender, Splunk, CrowdStrike or similar. Exposure to vulnerability management and working with technical teams to remediate findings. Comfortable supporting incident response activities, including triage, investigation and containment. Experience using SIEM and security monitoring tools for alert analysis and threat detection. Strong communication skills ...

detection content that security operation teams depend on, and hunt proactively for threats that existing controls do not catch, working alongside threat intelligence, incident response, and red team functions to keep coverage grounded in real adversary behavior. Responsibilities Detection Engineering - Design, build, test, and maintain detection content across … evaluate their output Malware analysis, digital forensics, or reverse engineering fundamentals Specific Technologies SIEM platforms including Splunk and Elasticsearch. Endpoint detection and response platforms including Tanium, CrowdStrike, and SentinelOne. Network detection and response tooling and network traffic analysis. MITRE ATT&CK. Scripting and automation in Python or PowerShell. ...

requires a credible engineering background. The successful candidate is expected to work directly across Azure platform engineering, CI/CD, Bicep/ARM, automation, incident response and operational controls, while leading the team and setting standards. They must be able to challenge technical decisions, understand operational risk … mode, rollback and supportability thinking; involve senior engineers and technical leadership where specialist authority is required. Own platform SLAs/SLOs, service health, major-incident command, root-cause analysis, disaster recovery, business continuity testing and continuous service improvement. Operational Controls, Standards & Compliance Take day-to-day ownership within ...

Relationships:CTTO — Direct line manager. Governance, infrastructure risk, and FinOps accountability. CISO (Head of Security) — Close working relationship. Security operations implementation, IAM policy, and incident escalation. Director of Platform Engineering — Coordinates on DevSecOps integration and CI/CD infrastructure requirements. • Head of Infrastructure & Cloud — Direct report. Hosting strategy, cloud … multiple sites or subsidiariesCommercial awareness: has owned cloud cost management and FinOps outcomes with measurable resultsIncident management and on-call leadership — has run major incident response at group levelStrong vendor management: MSP relationships, colocation contracts, cloud provider negotiationsDesirablePE-backed multi-entity experience — integrating new acquisitions into a group ...

improve overall operational stability of software applications and systemsProvide operational support for production systems in a “you-build-it-you-run-it” culture, including incident response and continuous reliability improvements.Leads evaluation sessions with external vendors, startups, and internal teams to drive outcomes-oriented probing of architectural designs, technical … practices within the work environment to improve code quality, delivery speed, and operational outcomes (e.g., AI-assisted code review/refactoring, test strategy acceleration, incident/root-cause analysis support), while establishing consistent validation standards (secure coding, peer review, automated testing) and promoting reuse of effective patterns across ...

identify misconfigurations and drive them to closure. Broad knowledge of security technologies related to applications, databases, networks, servers, Active Directory, and desktops. Support incident response efforts by assisting with root cause analysis (RCA) or incident containment. Analyze and Report Findings Analyze assessment and testing results to identify ...

Develop & Improve cyber security policies, standards and governance processes. ~Analyse & Recommend security controls aligned with recognised frameworks and best practice. ~Support & Strengthen business continuity, incident response and operational resilience capabilities. ~Collaborate & Deliver trusted cyber security advice to clients across multiple sectors. ~Apply & Interpret threat intelligence to inform security … management and assurance. ~Good understanding of data protection and privacy principles. ~Knowledge of security change management practices. ~Experience supporting business continuity, operational resilience and incident response. ~Understanding of networks, core infrastructure and enterprise systems. ~Excellent planning, communication and stakeholder management skills. Desirable qualifications: ~CISSP ~CISM ~ChCSP #LI-JS2 Together ...

SCCs), security schedules, and AI/data use provisions.Support vendor management activities, customer audits, pre-sales security questionnaires, compliance reporting, privacy incidents, and breach response activities.Maintain privacy and AI governance inventories, including data processing activities, vendors, AI tools, data flows, and associated risk assessments.Monitor global privacy, cybersecurity … supporting DPIAs/PIAs, maintaining Records of Processing Activities (RoPA), data mapping, vendor privacy reviews, data subject rights, privacy-by-design initiatives, and incident response activities.Familiarity with vendor management, risk management, customer audits, compliance reporting, and privacy/security contract reviews, including DPAs and SCCs.Previous experience with ...

guides, playbooks, and internal tech talks.Serve as a first responder during on-call rotations for core infrastructure, lead root cause analysis, and drive incident mitigation and follow-through.Drive team-wide quality objectives for the Infrastructure platform: reliability, operational readiness (alerting, dashboards, runbooks), and developer experience/productivity tooling.Act …/CD such as GitHub Actions) and the ability to weigh trade-offs between them for a given problem.Solid understanding of SRE principles, including incident response, fault-tolerant architecture, and capacity planning.Experience unblocking and mentoring other engineers (e.g. code/design reviews, knowledge sharing, or driving best practices ...

maintain and debug reproducible multi-language CI pipelines, and optimize CI performance across large compute clusters. Build and maintain infrastructure observability, alerting, runbooks, and incident response workflows for Fractile's infrastructure. IaC TODO Scale and maintain Fractile's Bazel monorepo as we continue growing across Python, C++, Rust … Pulumi) Experience with monitoring and observability tooling (Prometheus, Grafana, or similar) Working knowledge and practice of DevOps/SRE principles: SLOs, alerting design, incident management, and on‐call practice Strong proficiency in at least one systems or scripting language used for tooling (Python preferred; Go or Rust also relevant ...

guides, playbooks, and internal tech talks. Serve as a first responder during on-call rotations for core infrastructure, lead root cause analysis, and drive incident mitigation and follow-through. Drive team-wide quality objectives for the Infrastructure platform: reliability, operational readiness (alerting, dashboards, runbooks), and developer experience/productivity … such as GitHub Actions) and the ability to weigh trade-offs between them for a given problem. Solid understanding of SRE principles, including incident response, fault-tolerant architecture, and capacity planning. Experience unblocking and mentoring other engineers (e.g. code/design reviews, knowledge sharing, or driving best practices ...

logs, and network infrastructure into a coherent detection stackWrite, test, and maintain detection rules that reduce noise and measure coverage against real attacker behaviourLead incident response from detection through containment, eradication, and post-mortem; own the IR runbooks and keep them tested through tabletop exercisesPerform forensic analysis … with little guidanceBonus: deep familiarity with an EDR platform (CrowdStrike, SentinelOne, Defender); detection-as-code (Sigma, detections in Git, CI-tested); SOAR or custom response automation; defending data centre or colocation environments (OOB networks, BMC/IPMI, physical access telemetry); handling ISO 27001 or SOC 2 audits; FortiGate logging ...

infrastructure. You’ll be responsible for the reliability, scalability, and operability of our systems. That means CI/CD pipelines, infrastructure‐as‐code, observability, incident response, and the day‐to‐day health of production. You’ll make sure we can ship with confidence and sleep at night. Shape … code (we use Terraform, SST/CDK) A strong grasp of what it takes to keep production systems reliable: CI/CD, observability, incident management, capacity planning Experience designing systems that scale – and debugging them when they don’t Enough breadth across the stack to understand how infrastructure decisions ...

closely with stakeholders across Legal, Security, Technology, Product, HR and other business functions, the Program Manager will drive program execution, coordinate key initiatives, support incident response and audit readiness, and help mature RWS's approach to privacy, AI governance and information security. The successful candidate will bring … Trust initiatives, including governance frameworks, compliance toolkits and awareness programmes. Administer and optimise privacy and governance tools, including OneTrust and related workflows. Coordinate privacy incident management activities in partnership with Security and Technology teams. Act as the operational point of contact for privacy audits, both client‐facing and internal ...

needed, and has expertise in the cloud environments (public, private), infrastructure operations, DevOps practices, CI/CD toolchain and systems, code build and deployment, incident response, and 24x7 monitoring and support. The candidate will also have extensive experience operating within a SRE function within a complex, distributed environment. … Indicators (SLIs), system availability, and the progress and outcomes related to reliability Experience with implementing and managing Error Budgets Proficiency with understanding and explaining incident situations and their recovery plans to prevent recurrence Knowledge/experience driving dashboard standardization across the ecosystem for observability, APM and infrastructure monitoring ...

cyber security incidents,risksand technical issues. Managing and developing a team of Systems Engineers, coordinating workloads, mentoringstaffand supporting career progression. Leading or supporting cyber incident response activities, including investigation, containment, eradication, recovery, root causeanalysisand lessons learned reviews. Overseeing vulnerability management activities, threat monitoring, security assessments, patchprioritisationand remediation planning. … improvement. Additionalinformation This role includes participation in an on-call rota and out-of-hours support for critical incidents, planned maintenance activities and emergency response requirements. #J-18808-Ljbffr ...

reference for colleagues, balancing risk with practical decision making. As part of the security team, you will own end-to-end vulnerability management, manage incident investigations, and contribute to cloud #J-18808-Ljbffr ...

cloud networking, including routing, connectivity, DNS and hybrid infrastructure Automate infrastructure using Infrastructure-as-Code and scripting Drive improvements in monitoring, observability and incident response Own infrastructure lifecycle management, including upgrades, patching and resilience Work with networking, security and development teams to deliver practical engineering solutions Evaluate ...

using Docker and Kubernetes (GKE) Implement logging, monitoring, and alerting solutions Collaborate with developers, security teams, and architects to ensure secure delivery practices Support incident response, troubleshooting, and root cause analysis Required Qualifications Bachelor's degree in Computer Science, Information Technology, or related field (or equivalent experience) 4+ ...

logging using Prometheus and Grafana Supporting microservices-based environments and platform modernisation initiatives Driving automation, infrastructure as code and DevSecOps best practices Providing incident response, RCA and production support for critical services What we're looking for Strong AWS experience (EC2, S3, RDS, IAM, VPC) Kubernetes (EKS), Docker ...

roles and policies, network segmentation, secrets management, vulnerability remediation and audit requirements Establish platform monitoring, alerting, logging, capacity management, backup, disaster recovery and incident-response procedures Manage patching, upgrades, lifecycle management and service reliability for cloud workloads Support application, research and AI teams with reusable cloud patterns, self ...

Prometheus and Grafana Understanding of OS patching for Windows Server and RHEL as part of governance practices Background in risk management, compliance frameworks and incident response processes Excellent leadership, communication and stakeholder management skills We offer EPAM Employee Stock Purchase Plan (ESPP) Protection benefits including life assurance, income ...

acting as a subject matter expert Advise and collaborate with stakeholders across the business on maintaining secure business systems Contribute to production support and incident response activities as required Maintain up-to-date product security documentation Desired Qualifications and Experience Degree in cybersecurity, computer science, engineering or related ...

/integration platforms. Security isn't all on you: there's a 24/7 SOC in place, so you're not carrying incident response alone. CyberEssentials and/or ISO27001 exposure is a strong plus. Three days a week in the Leicester office, the rest remote. Standard ...

closely with internal stakeholders across technology, operations, legal, risk, and compliance functions. Supporting cyber governance activities, audits, assurance reviews, and regulatory engagements. Contributing to incident response planning, lessons learned activities, and continuous policy improvement. Identifying strategic cyber risks and recommending appropriate mitigation measures. About You To be successful ...