176 to 200 of 503 Incident Response Jobs in the UK

practical learning, and shaping the next generation of defence cyber capability. Key Responsibilities Training Delivery & Subject Matter Expertise Deliver high-quality cyber security and incident response training to learners with varying experience levels. Translate real-world cyber operations, threat analysis, and incident handling into clear, practical instruction. … competence. Key Skills & Experiences Live SC Clearance Strong hands-on knowledge of cyber threats, network security, risk management, and compliance frameworks. Deep understanding of incident response methodologies, detection, investigation techniques and tooling. Ability to communicate complex technical concepts in a clear, engaging and learner-friendly manner. Experience designing ...

Senior Threat Hunter: Lead advanced hunting methodologies, mentor the team, and drive technical innovation. Threat Hunter (Intermediate/Junior): Deliver proactive hunting activities, support incident response, and grow your expertise in a complex environment. Key Responsibilities (Both Levels): Proactively hunt for indicators of compromise and adversary tactics across … improve detection logic. Adapt hunting techniques to unique OT/ICS environments (legacy systems, operational safety). Produce clear, actionable reports and recommendations. Assist incident response with technical analysis and threat context. Drive automation and scripting initiatives. What We Are Looking For: Essential Skills (Both Levels): Practical experience ...

team protects and improves the availability, performance and resilience of the systems that support our global product. This role combines software engineering, automation and incident response to reduce toil, sharpen observability and strengthen service health across a complex technical estate. You will work with Open Telemetry, logging, telemetry … language. Knowledge of modern development practices, including testing, source control and delivery lifecycles. An understanding of SRE principles, including SLIs, SLOs, reliability measurement and incident management. Hands-on experience with observability tools such as OpenTelemetry, Splunk, New Relic, Grafana or PagerDuty. Proficiency in shell scripting for automation and system ...

product assurance. Coordinate security testing, vulnerability assessment and remediation across products and releases. Ensure software security considerations are addressed through deployment, update, support, incident response and end-of-life activities. Provide a clear security position for major releases, including residual risks, approved exceptions and recommended actions. Ensure product … Nice to haveExperience with embedded, connected, mobile or mission-critical products. Knowledge of relevant product security standards, regulatory expectations or assurance frameworks. Experience of incident response coordinated vulnerability disclosure and security maintenance across supported product versions. Relevant security or architecture certification, supported by substantial practical experience. Experience ...

Cyber Governance, Risk, and Compliance Manager. This role focuses on defining, maintaining, and testing resilience plans for the organisation, including Business Continuity, Incident Response, and Disaster Recovery. You will work closely with multiple teams across the IT department and the wider business to ensure that resilience strategies … will include: Conducting analysis on business systems to understand and document the impact, scope, and recovery path in relation to cyber incidents. Contribution to incident reviews to ensure learnings are taken to improve our resilience. Identifying and escalating weaknesses in the resilience strategy. Working with project and change teams ...

investigating and responding to threats while strengthening the controls that protect our systems, networks and data. Your responsibilities will span security monitoring, risk review, incident response and liaison with local and national partners. You will also contribute to the wider ICT service, including Microsoft 365 administration, infrastructure updates … Security Analyst - Key Responsibilities: - Monitor security systems, identify and investigate cyber threats, and respond to incidents while maintaining clear documentation and up-to-date incident response procedures - Design, implement, maintain and monitor security measures across systems and networks, including firewalls, intrusion detection, anti-virus, authentication, log management ...

quality and sustainability. - Improve test strategy, deployment confidence, code quality and engineering practices across the team. - Own the operational health of services, including monitoring, incident response, post-mortems and remediation. - Work closely with Product and business stakeholders to deliver measurable customer and business outcomes. - Mentor engineers through code … skills, with the ability to explain technical topics clearly to engineers, product teams and business stakeholders. - Proven ownership of production services, including reliability, observability, incident response and continuous improvement. - Track record of mentoring engineers and improving team engineering capability. Work in a Way That Works ...

opportunity has arisen in the Active Defence Incident Response Team within Digital Excellence (DEX) for a Cyber Threat Operations specialist. Supporting the Active Defence & Incident Response Manger in assisting DEX meet the challenges and demands of countering the Cyber Threat. The successful applicant will drive ...

opportunity Launch your cyber security career with Netcom Training’s government-funded Cyber Security course. Gain practical skills in threat intelligence, vulnerability testing and incident response, developing the technical knowledge needed to protect IT systems and prepare for security roles. Earn a Level 3 NCFE Certificate in Cyber … cyber security principles. Threat Intelligence: Identify risks and analyse threats to IT systems. Vulnerability Testing: Conduct security testing, identify vulnerabilities and implement controls. Incident Response: Learn how to prepare for and respond to cyber security incidents. Ethics & Law: Understand relevant legislation and ethical conduct within the cyber security ...

engineering, hands on with common SIEMs, networks, infrastructures and will be capable of acting in a 3rd tier capacity, perhaps even crossing into incident response occasionally. You'll act as third line/(or even early IR if you have the skills), and enjoy spending time sharing knowledge … Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members of the team You'd be reporting into a technical person ...

replace legacy software ware and hardware. The map is constantly being updated with changes to technology and approaches to security. Participate in cyber incident response, governance reporting, penetration testing, control of the Risk Register and awareness training to uphold safety and compliance standards. Collaborate with Automation engineers … proactive mindset. Familiarity with: Networks, protocols, security and server virtualisation. Threats, vulnerabilities, impacts and mitigations in ICS systems and the enterprise environment. Cyber incident response, management, escalation, investigation & 3rd party involvement. Computer architecture, digital logic, machine level representation of data Management of cyber security risk, tools and techniques. ...

Systems, covering all aspects of system security and resilience including strategy, policies, standards, compliance and assurance across the business. You will manage risk, support incident response and investigations, and work closely with the Cyber Security Manager. If you have the relevant experience (please see below) and are looking … cyber security policies and procedures. Conducting regular risk assessments, audits and testing to identify vulnerabilities and document improvements. Supporting the Cyber Security Manager with incident response and investigations into security breaches. Coordinating Management of Change activities and engineering risk assessments, and carrying out technical RCA investigations. Managing control ...

Major Incident Manager Location: Sheffield Day rate: Up to 600 per day inside IR35 Duration: Until end of March 2027 (view a view to extend) Type: Full time, 5 days a week Hybrid: 2-3 days in the office, remainder remote working Are you an experienced Major Incident Manager with a background in infrastructure, networks, disaster recovery and IT service management? We are seeking a skilled Major Incident Manager to lead the restoration of critical IT services across complex enterprise environments. You'll coordinate high-severity incidents, drive service recovery, manage stakeholder communications and ensure continuous ...

client environments across cloud, on-premises and hybrid infrastructure. This is an opportunity to work with modern security technologies across security engineering, threat detection, incident response, SIEM, cloud security and network security , while working alongside experienced engineering and security specialists. The Role As a Cyber Security Engineer … Firewall and network security management Developing and maintaining security policies, standards and procedures Conducting infrastructure security assessments using tools such as CIS Benchmarks Supporting incident detection, response and threat intelligence activities Contributing to vulnerability management and endpoint security Supporting security improvements across complex client environments What ...

embed effective security practices across a growing organisation. This role covers identity and access management, endpoint security, cloud platforms, business applications, vulnerability management and incident response. You will work closely with IT operations, development and platform teams, as well as selected external security providers. Responsibilities Maintain and improve security … system owners and confirm that corrective actions are effective. Investigate security alerts and incidents, coordinating with internal teams and external security specialists. Maintain practical incident-response procedures, escalation routes and supporting documentation. Participate in incident exercises and post-incident reviews, ensuring that lessons result in measurable ...

embed effective security practices across a growing organisation. This role covers identity and access management, endpoint security, cloud platforms, business applications, vulnerability management and incident response. You will work closely with IT operations, development and platform teams, as well as selected external security providers. Responsibilities Maintain and improve security … system owners and confirm that corrective actions are effective. Investigate security alerts and incidents, coordinating with internal teams and external security specialists. Maintain practical incident-response procedures, escalation routes and supporting documentation. Participate in incident exercises and post-incident reviews, ensuring that lessons result in measurable ...

Security Operations Centre (CSOC). You'll take incidents escalated from Tier 1 and Tier 2 analysts, assess their business impact, and recommend the response and escalation path. You'll triage threat intelligence (IOCs and TTPs) from multiple sources, run threat hunts across the SIEM, and help organisations identify … Identity and Defender for Cloud. Key responsibilities Handle security incidents escalated by L1 and L2 analysts, carry out business impact analysis and recommend response actions and escalation paths Perform advanced event and incident analysis, including baselining and trend analysis Conduct intelligence-led threat hunting using IOCs and TTPs ...

using the Protective Monitoring platform and Internet resources to identify cyber-attacks/security incidents. Categorise all suspected incidents in line with the Security Incident policy Recognise potential, successful and unsuccessful intrusion attempts and compromises through reviews and further analysis of relevant event detail and incident summary information. … Write up high quality security incident tickets using a combination of existing knowledge resources and independent research. Assist with remediation activities (or support customer stakeholders) to inhibit cyber-attacks, clean up IT systems and secure networks against repeat attacks. Produce security incident review reports to present information about ...

play an important role in protecting clients from evolving cyber threats. You will work with a range of security technologies, analyse security events, support incident response activities and contribute to the ongoing development and improvement of security services. This is an excellent opportunity for someone looking to build … doing Analyse security events, investigate alerts and identify potential cyber threats. Perform log analysis and correlate events across multiple security platforms. Support incident investigation, response and remediation activities. Deploy, manage, maintain and improve security tooling, including SIEM, EDR and vulnerability management platforms. Develop and implement automation to improve ...

applications, third-party integrations & technical designs. Operate vulnerability & exposure-management processes, coordinate remediation with system owners & verify corrective actions. Investigate security alerts & incidents, maintain incident-response procedures, coordinate response activities & drive improvements through exercises & post-incident reviews. Produce security risk, incident & remediation reports; support audits ...

applications, third-party integrations & technical designs. Operate vulnerability & exposure-management processes, coordinate remediation with system owners & verify corrective actions. Investigate security alerts & incidents, maintain incident-response procedures, coordinate response activities & drive improvements through exercises & post-incident reviews. Produce security risk, incident & remediation reports; support audits ...

prioritising, and managing security risks using industry-leading security tools. Planning and delivering security patching and system hardening initiatives. Investigating security events and supporting incident response activities. Collaborating with engineering teams to embed security controls into CI/CD pipelines and infrastructure automation. Improving monitoring, threat detection … response capabilities. Driving security improvement projects across cloud, endpoint, identity, and network security domains. Supporting compliance, assurance, and audit requirements within a regulated environment. Promoting secure engineering practices and mentoring technical teams on security best practices. What We're Looking For Essential Experience Experience in Security Operations, Security Engineering ...

prioritising, and managing security risks using industry-leading security tools. Planning and delivering security patching and system hardening initiatives. Investigating security events and supporting incident response activities. Collaborating with engineering teams to embed security controls into CI/CD pipelines and infrastructure automation. Improving monitoring, threat detection … response capabilities. Driving security improvement projects across cloud, endpoint, identity, and network security domains. Supporting compliance, assurance, and audit requirements within a regulated environment. Promoting secure engineering practices and mentoring technical teams on security best practices. What We're Looking For Essential Experience Experience in Security Operations, Security Engineering ...

working. Desirable Experience with leveraging AI for AppSec and CloudSec. AWS Certified Security – Speciality or equivalent practical AWS security experience. Terraform or CloudFormation expertise. Incident-management or incident-response experience. Experience with Splunk or similar logging/SIEM platforms. Experience with security metrics, dashboards or reporting that ...

coverage across on-site and offshore support hours. Use SQL scripting, automation, monitoring, and observability tools to improve operational resilience, service health, reliability, and incident response. To be successful in this role, were seeking the following: Excellent SQL scripting skills. Strong scripting and automation skills using languages such … Proven skills and track record in AI automation, including the use of intelligent automation capabilities to reduce manual effort, improve operational efficiency, and enhance incident response workflows. Experience applying AI and automation solutions for alert correlation, anomaly detection, predictive monitoring, and service optimisation. Strong understanding of Site Reliability ...