151 to 175 of 989 Incident Response Jobs in the UK

leadership position-not a hands-on technical analyst role. You will take full ownership of the Cyber Security Operations Centre (CSOC), driving strategy, managing incident response, and directing internal teams and external vendors. Key Responsibilities Define and lead the CSOC strategy, operations, and governance. Take command of major … incident response, managing remediation and stakeholder communication. Oversee threat intelligence, vulnerability management, and security monitoring capabilities. Manage relationships with external agencies, Managed Security Service Providers (MSSPs), and technology partners. What We Need From You Proven experience as a SOC Manager (previous leadership experience is essential; this ...

remain secure, resilient and highly available while supporting continuous delivery and operational excellence. You'll work across cloud infrastructure, automation, CI/CD, monitoring, incident response and platform reliability, collaborating closely with engineering teams to improve how applications are built, deployed and supported. This is an excellent opportunity … native services. Implementing Infrastructure as Code using CloudFormation, AWS CDK and/or Terraform. Monitoring platform performance, availability and system health. Supporting incident response, root cause analysis and continuous service improvement. Skills & Experience Essential Commercial experience in a DevOps, Cloud Engineering or Platform Engineering role. Strong AWS experience ...

improve detection capabilities and contribute to the ongoing maturity of the SOC. You will also: Monitor and investigate security events across enterprise environments Perform incident response activities and support remediation efforts Analyse network traffic, endpoint activity and system logs Improve detection rules using MITRE ATT and CK techniques … application to our client in conjunction with this vacancy only. Key Skills SOC Analyst, Senior SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk, SIEM, Incident Response, Threat Detection, Cyber Security, MITRE ATT and CK, Blue Team ...

Security Closing Date 16 August 2026 Location: Leeds (Asda House)/Hybrid (3 days in office) Department: Technology – Cyber Security Reports to: SOC and Incident Response Manager Role Purpose We are looking for a Cyber Security Analyst – Data Loss Prevention (DLP) to help protect Asda’s sensitive information … investigative techniques. Understanding of regulatory and contractual requirements for data protection (e.g., GDPR, PCI DSS). Familiarity with security operations processes: alert triage, incident response, playbooks. Strong analytical and problem-solving skills; ability to interpret DLP events in context of business processes. Clear communication skills — able to explain ...

instrumental in defining and upholding Service Level Objectives (SLOs) and Service Level Indicators (SLIs), implementing effective monitoring and alerting strategies, and leading operational incident response processes. What you'll do The core responsibility is to implement, maintain, and continuously improve the foundational platform infrastructure that powers all engineering … controlled, and auditable. Proactively manage the capacity of the infrastructure to consistently meet or exceed Service Level Objectives for latency, error rates, and availability. Incident Response and Post‐Mortems: Act as first‐line responders for critical system incidents. Triage, diagnose, and resolve complex production issues rapidly. Drive ...

infrastructure, implementing and overseeing risk management processes, ensuring that appropriate controls and countermeasures are in place to mitigate all identified risks. Lead the incident response efforts, including preparing for, detecting, and responding to cyber security incidents, ensure that an effective incident response plan is in place … regularly tested and managing post incident analysis and reporting to prevent future occurrences. Manage and mentor the cyber security team, fostering a culture of continuous learning and development, ensuring that the team has the necessary skills and tools to protect the organisation effectively, and oversee recruitment, training, and performance ...

business leadership. Domain Expertise (Any Combination of the Following) Security Strategy, Governance, Risk & Compliance (GRC) Security Architecture & Zero Trust Framework Design Threat Intelligence & Incident Response Advisory Cloud Security (AWS, Azure, GCP) OT/ICS/SCADA Cybersecurity Regulatory Frameworks: NIST CSF, ISO 27001, SOC 2, SAMA, NCA, DPDP … review security architectures including Zero Trust, defence‐in‐depth, and micro‐segmentation models. Advise on security technology selection, vendor evaluation, and solution roadmaps. Support incident response and crisis management from an advisory and strategic perspective. Deliver executive‐level reporting, risk briefings, and board‐level cybersecurity presentations. Assess third ...

Security Engineering team, helping to design, implement and continuously improve the security controls that protect large-scale AWS environments. Working closely with Security Operations, Incident Response, Threat Engineering and Cloud Engineering teams, you'll build and maintain cloud security solutions, improve security automation, and help embed security best … security posture through automation, logging, alerting and continuous improvement Work closely with engineering teams to embed security into cloud platforms and application delivery Support incident response, investigations and remediation activities Contribute to security-by-design initiatives across cloud infrastructure Requirements We're looking for someone who can demonstrate ...

ingestion of our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture. What you’ll be doing Data Ingestion and Enrichment Collaborate with Security analysts and application teams to provide … performance of the SIEM infrastructure. Security Engineering Contribute to security engineering projects, transitions, and transformations. Work closely with security operations and associated security incident response systems Stay informed about emerging threats and security best practices. Essential Skills/Experience Proven experience in SIEM Detection Engineering. Experience using cyber ...

exposure to ISO 27001, information security frameworks, security audits, governance, risk management and compliance. Experience working with Cyber Essentials, supplier assurance, security policies and incident response would also be advantageous. Whether you're currently a Senior Information Security Analyst, Senior Cyber Security Analyst, Security Engineer, Infrastructure Security Engineer … Microsoft 365 Security, Active Directory, Firewalls, Vulnerability Management, Patch Management, Endpoint Security, IAM, Security Assurance, Governance, Risk & Compliance, Security Audits, Business Continuity, Disaster Recovery, Incident Response, Cyber Essentials. ...

firm's cybersecurity controls and security architecture. The successful candidate will develop security policies, identify and mitigate vulnerabilities, investigate security incidents, and lead the response and resolution of major cyber incidents, helping to ensure the firm's technology environment remains secure, resilient, and aligned to business needs. Key responsibilities … rating. Identify vulnerabilities in hardware and software to be remediated by Engineering\Operations teams. Understand current and emerging security threats. Assist and lead in Incident Response investigations and mitigation. Communicate threats and deliver training and awareness programmes to other team members. Produces quarterly privilege access slides, suggesting ongoing ...

cloud platforms and supplier-managed services. This is an excellent opportunity for an experienced cyber security professional who enjoys a blend of security operations, incident response, vulnerability management, security assurance and stakeholder engagement. You will play a key role in improving security controls, reducing organisational risk and enhancing … provide a proactive and consistent cyber security operations and assurance capability across the organisation. You will provide day-to-day security monitoring activities, support incident response processes, manage vulnerability remediation, and contribute to the ongoing development of security controls, policies and procedures. You will need Strong experience ...

modern deployment workflows Observability & Production Operations Experience using observability tools (e.g. Datadog or equivalent) to monitor, troubleshoot, and resolve production issues Familiarity with incident response and continuous reliability improvements On‐Call & Incident Response Willingness to participate in a 24/7 on‐call rotation and support ...

/CD pipeline development and maintenance Application deployment and release management Developer tooling administration (GitLab, Packagist, NPM, Dependabot) Dependency management and automated security updates Incident Management & Observability: Assist with the diagnosis and assessment of technical issues On-call engineering and incident response Monitoring, alerting, and error tracking … OpenSIPS FreeSWITCH Essential experience Required: Experience with CI/CD pipelines and deployment workflows Hands-on experience with cloud infrastructure Application monitoring, alerting, and incident response (any major tooling) Familiarity with load balancing and message queue technologies Maintaining and contributing to shared code libraries and internal tooling Investigating ...

boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant boundary configurations and security baselines Incident Management & Threat Response Lead boundary security incident detection, investigation and response Manage security alerts, anomaly investigation and threat escalation Coordinate incident response across boundary security team and customer security teams Conduct post-incident reviews and implement preventative measures Maintain security event logs and provide compliance reporting to MOD Technology & Service Development Evaluate and implement boundary security technologies and tools Design automation and orchestration for boundary security operations Lead ...

boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant boundary configurations and security baselines Incident Management & Threat Response Lead boundary security incident detection, investigation and response Manage security alerts, anomaly investigation and threat escalation Coordinate incident response across boundary security team and customer security teams Conduct post-incident reviews and implement preventative measures Maintain security event logs and provide compliance reporting to MOD Technology & Service Development Evaluate and implement boundary security technologies and tools Design automation and orchestration for boundary security operations Lead ...

boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant boundary configurations and security baselines Incident Management & Threat Response Lead boundary security incident detection, investigation and response Manage security alerts, anomaly investigation and threat escalation Coordinate incident response across boundary security team and customer security teams Conduct post-incident reviews and implement preventative measures Maintain security event logs and provide compliance reporting to MOD Technology & Service Development Evaluate and implement boundary security technologies and tools Design automation and orchestration for boundary security operations Lead ...

core priority of this role. The successful candidate will take a leading part in strengthening and evolving the firm's security posture in response to an increasingly sophisticated threat landscape, including emerging risks associated with AI. This is a technically demanding role that combines proactive security ownership with infrastructure … office‐based and requires five days per week on‐site presence. Key Responsibilities Lead the firm's security operations function, owning threat detection, incident response, and vulnerability management end‐to‐end Monitor, triage, and respond to security events across the environment, including log analysis, anomaly detection, and threat ...

Flagstone is seeking a senior security engineer to own and operate detection and incident response across our Azure cloud security stack. You will work hands-on with Microsoft Sentinel, Defender for Cloud, and XDR tooling, while coordinating remediation with engineering squads. You'll drive security through code, pipelines ...

provisioned and optimal. Network Foundations: Support network security objectives, contributing technical oversight to core networking principles, network segmentation, wireless authentication and secure access pathways. Incident Response & Vulnerability Execution Threat Mitigation: Act as the primary internal technical interface for our Managed Detection and Response (MDR) platform, coordinating rapid … threat tracking across the estate to systematically close technical blind spots. Resilience Planning: Assist in the design, technical testing and documentation of operational incident response playbooks and isolated system backup verification procedures. Continuous Tuning: Maintain and optimise anti‐malware and filtering controls so that security standards balance effectively ...

clear documentation of findings Identify security weaknesses, vulnerabilities, and gaps within the environment Recommend and implement improvements to strengthen overall security posture Assist with incident response and remediation activities Support and deliver internal IT security awareness and training initiatives Participate in and contribute to security-related projects … with Microsoft Defender Experience monitoring and responding to security alerts in a SOC or security-focused environment Knowledge of endpoint security, threat detection, and incident response processes Understanding of cybersecurity principles, vulnerabilities, and attack techniques Ability to investigate and analyse security events effectively Experience identifying security gaps ...

availability, security and resilience of key network services. Key Responsibilities Lead the delivery of secure network boundary services and operations. Manage security monitoring, incident response and service performance. Oversee boundary security technologies including firewalls, IDS/IPS and related security controls. Drive continuous service improvement and operational excellence. … leadership experience managing security operations or managed service teams. Strong knowledge of enterprise firewalls, IDS/IPS, SIEM and threat monitoring technologies. Experience leading incident response and service delivery within secure environments. Excellent stakeholder management and communication skills. Desirable Experience within Defence, Government or National Security environments. Certifications ...

graduate development opportunity. Over your first 12 months you will: Receive mentoring from experienced cybersecurity professionals. Gain practical experience across security operations, incident response, vulnerability management, security awareness and risk management. Participate in security investigations, projects and operational activities. Develop and demonstrate professional competencies through agreed development objectives. … investigate security alerts and incidents. Assist with vulnerability management and security monitoring activities. Support cybersecurity awareness initiatives for staff and students. Contribute to incident response planning and security exercises. Work alongside experienced colleagues to help protect the University's systems, data and services. Build practical experience using enterprise ...

alerts within a live SOC environment. Analyse security incidents to determine scope, impact, and priority, ensuring appropriate escalation and response. Manage end-to-end incident response activities from detection through to resolution. Support the development and enhancement of SIEM use cases, detection rules, analytics, and playbooks. Conduct real … cloud environments, and enterprise IT infrastructure. Experience creating and tuning detection use cases, analytics, and playbooks. Knowledge of Information Security principles, threat detection, and incident response practices. Familiarity with Microsoft technologies, Linux systems, and security tooling. Understanding of security frameworks and data protection principles including GDPR ...

Consulting is seeking a Senior Consultant to lead incident response engagements, perform digital forensics, and advise clients on cyber risk. The role requires strong analytical skills and knowledge of frameworks, with hybrid travel to client sites in London and beyond. You will work with top-tier firms ...