1,226 to 1,250 of 2,372 Incident Response Jobs in the UK

environments (EKS, Aurora, ElastiCache/Valkey, SQS, Amazon MQ, S3)- Drive security and compliance delivery: ASR certification, Shepherd risk remediation, environment separation, CVE response and patching- Execute infrastructure cost optimisation against S-team goals (DRAM reduction, right-sizing, VPA adoption)- Build and maintain CI/CD pipelines (Jenkins/… VQJenkins migration, deployment automation, Terraform)- Participate in on-call rotation (primary and secondary) for production incident response, triage and resolution- Deliver infrastructure changes via MCMs (Managed Change Management) with full rollback planning and operational rigour- Contribute to platform reliability: multi-AZ resilience, monitoring (Prometheus/CloudWatch), alerting ...

skills and the ability to navigate performance/security tradeoffs in production systems Comfort with ambiguity, and the ability to context-switch between reactive incident work and proactive product development Nice to haves: Experience as a founder or early engineer at an infrastructure-focused startup, owning a product … tenant or untrusted environments (e.g., FaaS, CI sandboxes, remote notebooks) Open-source contributions to systems or developer-tools projects History of on-call/incident response for production systems PLEASE NOTE: Our policy requires a 90-day waiting period before reconsidering candidates for the same role. This allows ...

Maintain and optimise log ingestion pipelines across multiple data sources. Develop and refine detection rules, alerts and playbooks with SOC Analysts. Support security investigations, incident response and containment. Automate repetitive SOC tasks using PowerShell, Python or Bash. Onboard new services and infrastructure into SOC monitoring. Troubleshoot internal … visibility and telemetry. Experience Required You'll have experience in a similar operational or security environment, with: Hands-on experience supporting security operations, detection, response or log collection tools. Scripting or automation experience using PowerShell, Python or Bash. Strong networking knowledge, including TCP/IP, DNS, firewalls and proxies. ...

base articles in line with best practices Automate security tasks and toolchains using scripting (PowerShell, Batch, etc.) Collaborate with external SOC teams Prepare post-incident reports and root cause analyses Manage end-user device (EUD) security via MS Intune, Sophos and NinjaOne Schedule and assess vulnerability scans on critical … driven changes Produce weekly security operations reports Manage Cisco Umbrella web filtering and SSL inspection policies Requirements: Previous hands-on experience in SecOps or Incident Response Recognised Security certifications such as Security+, CEH, or Microsoft security certifications Strong knowledge of Microsoft Windows OS security and hardening Working PowerShell ...

data transformations Design and optimise KQL queries; build and tune analytic rules and detection logic Develop Logic Apps/SOAR workflows to automate response Implement CI/CD pipelines (Azure DevOps/Git) for SIEM content deployment Automate deployment/config across environments; tune detections to reduce false positives … logic design and tuning Logic Apps, Playbooks and SOAR automation Azure DevOps/Git CI/CD pipeline implementation Strong grounding in security monitoring, incident response and threat hunting Strong troubleshooting and root cause analysis skills Desirable SANS SEC503 – Network Monitoring and Threat Detection Candidates must hold active ...

technology services across a multi-site organisation. The chosen Candidate will be responsible for TechBar and desktop support, hardware and software asset management, major incident response and the performance of third-party technology support providers. This is a key operational leadership role, combining service delivery, supplier management … standards, monitoring performance and leading regular service reviews. Own hardware and software asset management, including lifecycle, stock, deployment and licence compliance. Lead the technology response to P1 and P2 major incidents, coordinating resources, communications and resolution. Drive post-incident reviews, root-cause analysis and continuous improvement. ...

technology services across a multi-site organisation. The chosen Candidate will be responsible for TechBar and desktop support, hardware and software asset management, major incident response and the performance of third-party technology support providers. This is a key operational leadership role, combining service delivery, supplier management … standards, monitoring performance and leading regular service reviews. Own hardware and software asset management, including lifecycle, stock, deployment and licence compliance. Lead the technology response to P1 and P2 major incidents, coordinating resources, communications and resolution. Drive post-incident reviews, root-cause analysis and continuous improvement. ...

compliance, including role-based access controls, change management, audit readiness, data protection, and adherence to organisational policies and best practices Lead system support, incident resolution, and service delivery, acting as an escalation point for complex issues, coordinating with stakeholders, and ensuring system availability, performance, and service excellence Oversee integrations … align technology solutions with business objectives across complex, multi-site organisations Strong governance, security, and service management knowledge, including access controls, compliance, audit requirements, incident, change, and problem management, and adherence to regulatory standards such as GDPR and ISO 27001 Excellent stakeholder, vendor, and communication skills, able to influence ...

CrowdStrike and Splunk platforms. The successful candidate will ensure the effective integration, configuration, and operational use of security tools to enhance threat detection, incident response, and overall security maturity. Additionally, the role involves providing technical leadership, mentoring, and knowledge transfer to bolster internal cyber capabilities during a period … high‐severity security incidents, facilitating rapid investigation, containment, and remediation using EDR and SIEM tools. Develop and implement SOAR workflows to automate detection, response, and security operations processes. Conduct proactive threat hunting using SIEM/EDR data and MITRE ATT&CK‐aligned techniques. Support vulnerability assessment and security scanning ...

environments Build and maintain protective and detective controls for cloud threat visibility Develop detection engineering capabilities to identify attacker behaviour and reduce detection and response times Lead cloud security investigations and incident response with engineering teams Participate in a shared on-call rotation and coordinate containment, remediation … security operations capabilities at scale Experience with cloud-native security platforms, CNAPP technologies, or large-scale cloud security monitoring Experience applying AI to detection, response, threat analysis, or security operations workflows Familiarity with AWS networking, identity, and cloud security patterns Experience working across large-scale SaaS environments and high ...

engineering role focused on making ML systems reproducible, scalable, secure and dependable, from model packaging and release through to serving, monitoring, retraining and incident response.What you’ll work onML lifecycle and platform engineeringBuild repeatable workflows for model training, validation, promotion, deployment and retraining.Productionise models through packaging, versioning, model registry … efficiency through automation, observability and infrastructure as code.Write production-grade Python for long-running services, deployment tooling and ML workflows.Establish testing, validation, release and incident-management practices for ML systems.Collaborate with platform, security and data engineering teams on reliable model inputs, access controls, secrets, resilience and compliance.Make explicit trade ...

secure configuration and operation of Microsoft Azure and Microsoft 365. Implement and maintain Microsoft Defender security controls. Support security monitoring, threat investigation and incident response activities. Support vulnerability management, including identifying, prioritising and remediating security weaknesses. Support Power Platform governance, including Data Loss Prevention (DLP) policies, environment management … Experience implementing or supporting Conditional Access and access governance. Knowledge of RBAC and privileged access management. Experience investigating security alerts and supporting cyber security incident response. Good understanding of Azure security fundamentals and Microsoft security best practices. Experience supporting Microsoft 365 security and cloud-based services. Experience producing technical ...

vulnerabilities and compromises, utilizing advanced tools and techniques to detect anomalies and contribute to the development of strategies for security investigation, threat mitigation, and incident responseProduce actionable threat intelligence products including IOC development, exploit analysis reports, and threat actor tracking to inform detection engineering and security operationsCollaborate with cross … Computer Science, Cybersecurity, Data Science, or related disciplines5+ years of experience in cybersecurity threat intelligence or operations, with a focus on threat detection, incident response, and security infrastructure managementDemonstrated expertise in multiple security domains, including network security, malware analysis, threat hunting, threat intelligence production, and security architecture ...

engineering role focused on making ML systems reproducible, scalable, secure and dependable, from model packaging and release through to serving, monitoring, retraining and incident response. Build repeatable workflows for model training, validation, promotion, deployment and retraining. Productionise models through packaging, versioning, model registry integration, deployment automation and safe rollback. … automation, observability and infrastructure as code. Write production‐grade Python for long-running services, deployment tooling and ML workflows. Establish testing, validation, release and incident-management practices for ML systems. Collaborate with platform, security and data engineering teams on reliable model inputs, access controls, secrets, resilience and compliance. Make ...

improve overall operational stability of software applications and systemsProvide operational support for production systems in a “you-build-it-you-run-it” culture, including incident response and continuous reliability improvements.Leads evaluation sessions with external vendors, startups, and internal teams to drive outcomes-oriented probing of architectural designs, technical … practices within the work environment to improve code quality, delivery speed, and operational outcomes (e.g., AI-assisted code review/refactoring, test strategy acceleration, incident/root-cause analysis support), while establishing consistent validation standards (secure coding, peer review, automated testing) and promoting reuse of effective patterns across ...

triage, prioritise, resolve and keep tickets updated. This is a core part of the role, not an occasional overflow duty. Work to agreed response and resolution SLAs and flag any ticket at risk of breach in advance. Handle access requests directly: password and MFA resets, account lockouts, licence … audits and surveillance visits, and drive remediation of findings to closure. Lead on client and prospect security questionnaires and due diligence requests. Participate in incident response, including out of hours where the severity requires it. Essential 5 or more years in systems administration, infrastructure or IT engineering, including ...

identify misconfigurations and drive them to closure. Broad knowledge of security technologies related to applications, databases, networks, servers, Active Directory, and desktops. Support incident response efforts by assisting with root cause analysis (RCA) or incident containment. Analyze and Report Findings Analyze assessment and testing results to identify ...

DescriptionPurpose of the roleTo apply software engineering techniques, automation, and best practices in incident response, to ensure the reliability, availability, and scalability of the systems, platforms, and technology through them. AccountabilitiesAvailability, performance, and scalability of systems and services through proactive monitoring, maintenance, and capacity planning.Resolution, analysis and response … Drive – the operating manual for how we behave. Join Barclays as an Oracle Site Reliability Engineer, where you'll leverage automation, engineering excellence, and incident management best practices to ensure our critical systems remain resilient, available, and ready to support millions of customers every day.To be successful ...

cutting-edge technologies and contribute to the stability and performance of their network infrastructure. Key Responsibilities: Monitoring and Management: Oversee Monitoring Event Management and Incident Management, ensuring timely Level 1 triage of networking issues. Network Operations: Provide operational support for network environments, including switching, routing, perimeter security, traffic management … advanced tools such as Splunk, SevOne, IBM Watson AI Ops, Wireshark, NetScout, and Gigamon to identify service impacts and interpret monitors, dashboards, and logs. Incident Response: React effectively to production failures, managing triage efforts, engaging appropriate teams, and communicating with management and technical escalation. Documentation and Reporting: Maintain ...

establishing best practices and ensuring code quality across mission-critical data platform initiatives. You will drive continuous improvement in data governance, infrastructure optimization, and incident response while managing the full lifecycle of data warehouse operations. Responsibilities Lead technical design and architecture of Snowflake and AWS data warehouse platforms … services including data lake storage, compute, and related data platform services Proficiency in data modeling, SQL, and ETL/ELT processes Proven experience with incident management and troubleshooting complex data platform issues Knowledge of data governance, security, and compliance best practices Client-facing experience with ability to communicate technical ...

This person will own the platform foundations Sanity engineers build on every day: cloud infrastructure, Kubernetes, networking, routing, observability, CI/CD, deployment paths, incident response, and the standards that make production ownership work across product teams. The scale is real. Content Lake alone handles around … line between Platform and SRE. Platform should own the shared foundations. SRE should help product teams run services well, with strong tooling, standards, and incident support. Raise the reliability bar across Sanity's production systems, including dashboards, alert severity, paging standards, service ownership, on‐call readiness, and incident ...

DescriptionPurpose of the roleTo apply software engineering techniques, automation, and best practices in incident response, to ensure the reliability, availability, and scalability of the systems, platforms, and technology through them. AccountabilitiesAvailability, performance, and scalability of systems and services through proactive monitoring, maintenance, and capacity planning. Resolution, analysis … response to system outages and disruptions, and implement measures to prevent similar incidents from recurring. Development of tools and scripts to automate operational processes, reducing manual workload, increasing efficiency, and improving system resilience. Monitoring and optimisation of system performance and resource usage, identify and address bottlenecks, and implement best ...

Studio, Power Platform, Azure DevOps, and our Azure subscriptions used for hostingDefine and run the support model for the AI estate – monitoring and alerting, incident response, change and release management, documentation and knowledge transfer, so solutions remain reliable as usage growsEnable the wider maker community – publish agent templates … business can move quickly, safely and within known guardrailsA supportable estate: solutions are monitored, maintained and improved after launch, with clear ownership and response expectationsSenior stakeholders across the business who see the AI Factory as the natural route to solving their problems with AIQualification & ExperienceDemonstrable experience designing and delivering ...

Defence and CTI Analysts in the management and administration theupdating of ingested data flows, cyber use cases and signatures for specialisedcyber defence applications in response to new or observed threats. Manage the compilation,cataloguing, distribution, and retrieval of data from a range of enterprisenetworks and data sources. Implement … operating systems. Knowledge of cyberdefence and information security policies, procedures, and regulations. Knowledge of networksecurity architecture concepts including topology, protocols, components, andprinciples. Knowledgeof cyber incident response frameworks and handling methodologies. Knowledge of data backup andrecovery. Skills/Experience: Must-have – circa5 years + relevant experience. Must-have experience ...

guides, playbooks, and internal tech talks.Serve as a first responder during on-call rotations for core infrastructure, lead root cause analysis, and drive incident mitigation and follow-through.Drive team-wide quality objectives for the Infrastructure platform: reliability, operational readiness (alerting, dashboards, runbooks), and developer experience/productivity tooling.Act …/CD such as GitHub Actions) and the ability to weigh trade-offs between them for a given problem.Solid understanding of SRE principles, including incident response, fault-tolerant architecture, and capacity planning.Experience unblocking and mentoring other engineers (e.g. code/design reviews, knowledge sharing, or driving best practices ...