1,701 to 1,725 of 2,440 Incident Response Jobs in the UK

build tooling that gives the team visibility into platform health. Own the services you build in production, including participation in an on‐call rotation, incident response, and the follow‐up work that closes structural gaps rather than only the immediate issue. Hold to clean interface and versioning practice … including disciplined handling of breaking changes and backward compatibility. Experience operating what you build: debugging production systems, and taking part in on‐call or incident response. Strong engineering fundamentals: clean code, testing, version control, code review, and CI/CD practices. Nice to Have (But Not Essential) None ...

clean closure on the underlying issues. Same data, different purposesIncident responseOwn the IR process end-to-end: detection, triage, containment, eradication, recovery, and post-incident reviewRun the on-call model, the playbooks, the tabletop exercises, and the tooling behind themBe the person in the room when something real happens … linkWhat we're looking forYou've led security at a company operating under real regulatory pressure — payments, healthcare, financial services, or similarYou've run incident response for real incidents, not just exercises, and you've written the post-mortemsYou understand modern attack surfaces: cloud, SaaS, identity, supply chain ...

technical security controls, with a strong focus on Microsoft security technologies. You will play a leading role in strengthening monitoring, detection, protection, and response across the business, and in automating the work that should not be done by hand. This role suits someone with at least five years … implementing, operating, and improving security controls across Sword’s environment. Working with IT and the wider security function, you will strengthen monitoring, protection, detection, response, and technical assurance through effective use of security technologies and services, and you will look for opportunities to automate. We are looking for someone ...

Cyber Security Specialist/Cyber Security Engineer - CISSP, CEH, CCNA Security, Incident Response, Threat Monitoring, Vulnerability Management, Security Architecture, Azure, Windows Server Infrastructure. Permanent. London Hybrid. c.£90k - £100k + Bons +Benefits Global Law Firm seeks an experienced IT Cyber Security Specialist to join its Infrastructure Engineering team ...

Aggreko in Glasgow is seeking a Security Operations Team Lead to guide a small agile team, drive security initiatives, and ensure incident response excellence across our global operations. You will work with Palo Alto, Cortex XDR, and cloud environments (Azure/AWS), enforce ISO27001, Cyber Essentials Plus ...

maintain secure, scalable GCP infrastructure using Infrastructure as Code. You will own cloud security architecture, identity and access controls, and continuous compliance. Lead incident response, threat modelling and architecture reviews, and collaborate with Information Security, Infrastructure and Engineering teams to deploy secure, auditable solutions. Strong GCP/Kubernetes ...

Security Operations Centre and advise on risks and mitigations for new services and changes. The role requires strong expertise in cloud security, identity and incident response, with the ability to communicate security concepts to technical and non-technical colleagues. #J-18808-Ljbffr ...

role is hybrid (London) with 2 days a week in the office, and focuses on strengthening security operations, enhancing cloud security controls, and incident response in a Microsoft-centric environment. You will work with IT and Infrastructure teams to improve security capabilities, support compliance initiatives, and contribute ...

participate in threat hunting, support detection automation, and help drive remediation with cross-functional teams. You’ll bring 5+ years in Security Operations/Incident Response, strong SIEM/EDR experience, and hands-on skills in KQL/SPL, PowerShell and Python. #J-18808-Ljbffr ...

reliable CI/CD pipelines with GitHub Actions. The role emphasizes partnering with developers to ensure adoption of security tools, along with implementing monitoring, incident response, and resilience practices across cloud environments. #J-18808-Ljbffr ...

seeking SC cleared Cyber Security Managers to plan and implement organisation-wide processes for cyber risk management. Responsibilities include risk assessments, policy development, incident response, and ongoing monitoring of security events. A successful candidate will typically have prior security clearance or eligibility and be prepared for security clearance ...

will bring strong cloud expertise (Google Cloud, Azure), container tech (Docker, Kubernetes, GKE, Helm), programming (Python/Go), and a focus on observability, incident response, and AI-assisted SRE workflows to improve resilience and efficiency. #J-18808-Ljbffr ...

lead design, implementation, and optimization of Proofpoint security solutions within a large enterprise. You will own email security, DLP, and authentication technologies, guiding incident response and threat mitigation. The role focuses on implementing Proofpoint modules (PEP, TAP, TRAP, EFD) and collaborating with SOC, Infrastructure, and Microsoft 365 teams ...

pipelines. You will collaborate with developers and SREs in an automation-first culture to deliver reliable, scalable systems. The role covers on-call support, incident response, cost optimization, observability, and secure workload access across AWS services, with emphasis on security and reliability. #J-18808-Ljbffr ...

will work in a hybrid setup, collaborating with the team across AWS, GCP, Azure, SaaS and endpoints, and participate in proactive detection and incident response activities with a focus on strong analytics #J-18808-Ljbffr ...

Apex Fintech Solutions in Belfast, Northern Ireland, is seeking a Senior SOC Analyst to lead threat detection, incident response and security monitoring in a fast-paced security operations center. You will analyse alerts from SIEM/EDR, mentor junior staff, drive automation, and improve SOC tooling; requires 5+ ...

will maintain and enhance our Elastic SIEM and security controls across AWS and Azure, support SOC/NOC activities, and help improve detections and incident response in an evolving #J-18808-Ljbffr ...

Security Operations & Assurance Analyst to join a leading international law firm's Information Security team. This role blends hands-on security operations and incident response with security engineering, vulnerability management and assurance, acting as a key escalation point for alerts. You will help improve monitoring capabilities, controls ...

seeking an experienced SOC Lead to head security operations across Scotland. You will manage a team of analysts, coordinate major incidents, and shape incident response across a public sector partnership that spans several organisations and thousands of users. You will drive the evolution of our SOC, work with ...

software engineering and product teams to embed reliability into the software development lifecycle and deliver resilient services for millions of users. You will lead incident response, define SLOs, champion observability, and mentor junior engineers, while shaping automation, CI/CD pipelines, and platform tooling to accelerate #J ...

Howard Kennedy LLP is seeking an Information Security Analyst to join its Cyber Security team at a London location. The role covers security monitoring, incident response, vulnerability management, supplier assurance, compliance and awareness. You will help identify and manage risks while advising IT and business teams on secure ...

manage audit readiness for SOC 2 Type II, ISO 27001, Cyber Essentials Plus, and NIST 800-53, and lead DevSecOps integration, vulnerability management, and incident response programs. #J-18808-Ljbffr ...

Kubernetes. You will build cloud-native infrastructure with IaC and GitOps, design and maintain CI/CD pipelines, and enhance monitoring and incident response for #J-18808-Ljbffr ...

rapid delivery of core value. The role requires SC-level security clearance, strong API and CI/CD experience, and a proactive approach to incident response and reliability engineering in production systems. #J-18808-Ljbffr ...

design scalable, resilient systems and take ownership beyond simply delivering tickets. You will take ownership across system design, architecture, CI/CD, observability, incident response and production systems, working closely with Engineering, Product and Operations teams to build and continuously improve reliable platforms. Required Skills: Strong backend engineering ...