126 to 150 of 989 Incident Response Jobs in the UK

scale security capabilities that protect the UK's largest digital bank. You'll provide strategic direction for cyber defence, detection engineering, threat hunting and incident response, while driving continuous improvement across security operations platforms, tooling and processes. Leading a high‐performing team, you'll strengthen operational resilience, coordinate … effective response to cyber threats and incidents, champion a threat‐led approach to defence, and help shape a world‐class security operation that enables the Group to go faster, safely. Why Join us? If you think all banks are the same, you're wrong. We're a pioneering, fast ...

integration and performance testing for all components Ensure solutions are reliable, reproducible and stable across releases Support continuous improvement of testing practices Monitoring and Incident Response Implement observability and monitoring tooling Track system performance and detect anomalies Support incident response, troubleshooting and root cause analysis ...

audience, showing trends over time, and structuring reports around the decisions the reader needs to make, not just the findings. Set the standard for incident response and detection readiness. Drive adoption of incident response practices across engagements, own the IR‐to‐vulnerability‐management feedback loop ...

increase operational efficiency and reduce manual intervention. Evaluate system designs and architectures for reliability, performance, security, and efficiency, ensuring best practices are followed. Lead incident response efforts and conduct deep-dive root cause analysis to implement long-term, innovative technical solutions. Develop and maintain comprehensive runbooks and procedures … incident response and operational tasks. Collaborate with cross-functional teams to review and provide feedback on technical designs, ensuring alignment with SRE principles. Participate in on-call rotations and handle critical incidents with confidence and expertise. Continuously improve documentation for systems and services, contributing to a knowledge-sharing ...

responsible for leading both our Cloud Platform and Enterprise Service orgs: Leading and developing two engineering teams — Cloud Platform (cloud infrastructure, observability, SRE, incident response) and Enterprise Services (IT support, IAM, Okta, Slack and core SaaS) — setting technical direction, hiring and performance standards across both. Delivering the reliability … performance and cost-efficiency of the cloud platform underpinning production services, including SLOs, on-call and incident response practices, and post-incident learning, in line with the broader infrastructure strategy. Executing the roadmap for enterprise services and identity, treating internal IT as an engineering discipline — automation-first ...

Vault), and security integration into the delivery pipeline as a first‐class concern Identify and address tooling gaps across monitoring, alerting, observability, and incident response; own the on‐call process, runbooks, escalation paths, and post‐incident reviews Directly manage 4/5 DevOps engineers: run consistent … diverse perspectives are constructively managed Delivery & Cross-Functional Collaboration Act as the primary point of contact for DevOps matters in cross‐functional planning, incident response, and infrastructure governance Collaborate closely with the Engineering Manager, Core Platform to ensure platform reliability, deployment pipelines, and infrastructure tooling meet backend SLAs ...

security policies, standards and procedures. Leading security awareness and training programmes that improve behaviours and strengthen Moneybox’s security culture. Owning Moneybox’s security incident response framework, ensuring the business is prepared to identify, contain, respond to and recover from security incidents effectively. Overseeing vulnerability management, including scanning … operational efficiency. Experience managing security risk in cloud‐based environments, ideally including Azure. Strong understanding of third‐party security risk management. Experience with incident response planning, testing and improvement. Experience reporting security risks, controls and metrics to senior management. Strong communication skills, with the ability to translate technical ...

security policies, standards and procedures. Leading security awareness and training programmes that improve behaviours and strengthen Moneybox’s security culture. Owning Moneybox’s security incident response framework, ensuring the business is prepared to identify, contain, respond to and recover from security incidents effectively. Overseeing vulnerability management, including scanning … operational efficiency. Experience managing security risk in cloud‐based environments, ideally including Azure. Strong understanding of third‐party security risk management. Experience with incident response planning, testing and improvement. Experience reporting security risks, controls and metrics to senior management. Strong communication skills, with the ability to translate technical ...

security alerts, incidents, and anomalous behaviour across Semble's environment. Develop and mature threat intelligence capabilities, including vulnerability management, penetration testing coordination, and incident response processes. Maintain and improve security tooling, logging, and detection capabilities with an automation‐first mindset. Contribute to incident response runbooks … application‐layer and AI‐related incidents, and support blameless post‐incident reviews to embed learning back into the SDLC. Identify and address security gaps proactively, improving the overall security posture. Compliance, Certification and Audit Readiness Own or co‐own delivery of compliance programmes, including ISO 27001, Cyber Essentials+ ...

respond to security incidents across a global environment. Monitor, tune and optimise security monitoring technologies, including SIEM and EDR platforms. Lead and coordinate incident response activities, ensuring issues are investigated through to resolution. Perform regular security assessments to identify vulnerabilities and support remediation efforts. Partner with cross-functional … business teams to improve security controls and processes. Act as a technical subject matter expert for security operations and incident response. Support the evaluation, validation and implementation of new security tools and technologies. Contribute to the development and continuous improvement of security policies, procedures and operational playbooks. Help ensure ...

track the cyber threats that BA faces and produce finished intelligence products for stakeholders across the organisation Support the Cyber Threat Intelligence and Cyber Incident Managers during cyber incident response activities Support the implementation of the broader BA/IAG Cyber Strategy What you'll bring … stakeholders Experience in threat modelling using frameworks such as STRIDE, PASTA, attack trees (Desirable) Ability to remain calm and prioritise under pressure Understanding of incident response methodology Strong understanding of actor methodology including their tactics, techniques and procedures Your experience: Holding or working towards relevant cyber intelligence certifications ...

infrastructure code and artefact repositories, ensuring adherence to best practices. Proactively identify and mitigate network risks, ensure robust disaster recovery strategies, and lead major incident response efforts. Write and review platform code, offering constructive feedback to ensure code quality. Drive continuous improvement in network monitoring, observability, and performance … teams. Leads engineering teams using agile delivery methodologies; applies agile principles pragmatically to infrastructure work including sprint planning, backlog management, and continuous improvement. Leads incident response, change management, and problem resolution processes, accountable for post‐incident reviews, risk identification, and implementation of corrective actions. Bonus Bonus points ...

Operational Excellence – Monitor and maintain engineering health metrics (SLOs, error rates, cycle time, operational costs) to drive improvements in processes, system performance and reliability. Incident Management & On-call Processes – Oversee incident response, and post‐mortems, ensuring effective resolution and long‐term fixes for recurring issues. Continuous Improvement … closely with Product, Design and other engineering teams to align on goals, manage dependencies and deliver high‐quality solutions. Operational Focus – Familiarity with monitoring, incident response and maintaining service reliability at scale, including working with SLOs, observability platforms and optimising for cost efficiency. Process & Best Practices – Knowledge ...

Event Management (SIEM) platform. You will be responsible for onboarding new log sources, improving data pipelines, developing advanced detection use cases, and supporting incident response activities. This is an excellent opportunity for a security professional who enjoys building scalable, high-performing security monitoring environments and working … such as MITRE ATT&CK Build and tune correlation rules, alerts, dashboards, and anomaly detections Continuously improve detection quality and reduce false positives SOC & Incident Response Support Partner with SOC analysts to refine detection logic Support investigations through advanced SIEM querying and data analysis Provide subject matter expertise ...

critical national infrastructure programme. You will engage with suppliers, systems integrators, emergency services and wider government stakeholders. Key responsibilities Support cyber security operations, including incident response, vulnerability management and threat monitoring. Work with suppliers and systems integration partners to ensure security deliverables meet contractual and programme requirements. Support … development of an end-to-end Security Operations Centre. Review and maintain operational procedures, incident playbooks and security reporting. Lead and contribute to security governance forums. Advise stakeholders on security risks, mitigations and incident handling. Support security investigations and coordinate activity across programme, government and emergency-service teams. ...

KPMG is seeking a Cyber Response & Recovery Manager (German speaker) to lead reactive DFIR engagements in the CRS Team within Cyber Advisory. This hands-on role requires managing medium to large incidents, coordinating with the leadership, and developing in-house response capabilities. You will travel on short notice … when not responding, help mature clients' incident response capabilities. Based in London or Manchester, the role offers exposure to national critical incidents, opportunities #J-18808-Ljbffr ...

help protect systems that matter. Apply today and take your cyber security career to the next level. If you're passionate about threat detection, incident response, and staying one step ahead of attackers, we'd love to hear from you. Office based: Farnborough. Clearance: You do need … triage and investigate security incidents across critical client environments. Analyse network traffic, logs and security events to identify threats and vulnerabilities. Lead and support incident response activities, providing expert guidance on containment, eradication and recovery. Enhance detection rules and use cases using MITRE ATT&CK and threat-informed ...

real control rather than a manifest scan, build‐pipeline isolation, third‐party risk as runtime telemetry. When the next big supply‐chain incident lands, we should know within hours whether it touches us. Detect, respond, contain Runtime detection that catches what actually happens, not what a vendor template guesses … might. Incident response codified as automation: containment, rotation, isolation, evidence capture. Forensics tooling that works on our stack. Adversary emulation against our real attack surface. The metric is mean‐time‐tocontain, not control coverage. Secure the agentic development surface Our engineers ship with AI agents in the loop ...

Their primary responsibility lies in translating SOC analyst pain points, workflows, and use cases into actionable product features, with particular focus on alert/incident prioritisation and intelligent playbook execution that helps analysts make critical security decisions. Their responsibilities will include: Providing expert SOC operational guidance to product management … operational needs. Translating SOC analyst pain points, workflows, and use cases into actionable product features and user stories. Designing and validating alert prioritisation algorithms, incident triage workflows, and automated playbook logic based on operational experience. Collaborating with product managers to shape product strategy, roadmap priorities, and feature definitions. Conducting ...

last 6 months, our team has successfully deployed Datadog as our observability platform, achieving 95% monitoring coverage across all services and significantly improving our incident response capabilities. Moving forward, we're focused on completing our ECS migration, implementing advanced GitOps workflows, and building self-service developer platforms … change management processes aligned with our ISO27001 and PCI-DSS requirements Work with development teams to enable self-service capabilities (developer experience) Assist with incident response and platform support Analyse and optimize cloud costs across our infrastructure Core Skills 3+ years’ experience in a senior AWS platform/ ...

estate by implementing remediation activities, hardening infrastructure, and driving continuous improvement. From addressing vulnerabilities and strengthening system configurations to automating remediation processes and supporting incident response, you'll help ensure our technology platforms remain secure, reliable, and aligned with industry best practices. Working closely with security, infrastructure, risk … actions and update vulnerability management platforms and tracking tools. Produce reports and dashboards that demonstrate remediation effectiveness, risk reduction, and outstanding actions. Support cyber incident response activities by providing expertise on infrastructure configurations, vulnerabilities, and remediation actions. Help address and remediate weaknesses identified through security incidents and investigations. ...

Governance & Compliance: Lead the technical implementation of controls for ISO 27001 and TX‐RAMP, turning complex regulatory requirements into simple, actionable engineering standards. Lead Incident Response: Act with ownership during security events. You’ll lead investigations and root‐cause analysis, providing the Collective Wisdom needed to prevent future … software development with a security focus. What Sets You Apart: Experience securing video streaming architectures or high‐scale backend services. A history of leading incident response in a remote‐first environment. Deep expertise in OWASP Top 10 and secure API design. What Success Looks Like: Within 6 Months ...

week in our Newcastle office. First 90 Days 30 Days Get to know Sage's database estate: the platforms in use, monitoring tooling, incident management processes, and the product teams you'll support. Familiarise yourself with Sage standards, ISO processes, and the Cloud Operations team's ways of working. … call rota before joining it. 60 Days Take active ownership of database operations across your assigned products. Handle monitoring, routine maintenance, and incident response with growing confidence. Begin contributing to automation scripts and service improvement initiatives. Engage with product delivery teams to support query optimisation and deployment activities. ...

processes and technology roadmaps. Serve as a liaison between industrial sites and central cybersecurity functions, aligning OT security measures with global cybersecurity frameworks and incident response procedures. Leadership & Team Development: Lead and mentor a high‐performing team of IC professionals, providing direction, setting clear objectives, managing performance … fostering professional growth. Champion a culture of accountability, excellence, and innovation, ensuring the team is motivated and aligned with Hitachi Energy’s strategic goals. Incident Response & Issue Escalation: Serve as a primary escalation point for OT/IC security incidents. Coordinate identification, investigation, and resolution in partnership with ...

leadership position-not a hands-on technical analyst role. You will take full ownership of the Cyber Security Operations Centre (CSOC), driving strategy, managing incident response, and directing internal teams and external vendors. Key Responsibilities Define and lead the CSOC strategy, operations, and governance. Take command of major … incident response, managing remediation and stakeholder communication. Oversee threat intelligence, vulnerability management, and security monitoring capabilities. Manage relationships with external agencies, Managed Security Service Providers (MSSPs), and technology partners. What We Need From You Proven experience as a SOC Manager (previous leadership experience is essential; this ...