176 to 200 of 1,007 Incident Response Jobs in the UK

instrumenting services with observability (metrics, logs, and traces) so their health is visible. Take part in operating live services, including release management, alerting, and incident response, while actively reducing toil, technical debt, and manual effort through automation. Take ownership of personal learning paths, continually acquiring new skills, particularly … Infrastructure as Code to provision and manage environments in a repeatable, reviewable way. A willingness to take part in operational duties such as releases, incident response, and keeping live services healthy and reliable. You have an awareness of security principles and best practices to ensure secure software delivery. ...

Samsara is seeking an experienced Security Incident Response professional to join our UK‐based EMEA team. You will collaborate with a global group of engineers to monitor security events, lead incidents, and drive digital forensics investigations in support of Employee Relations, Legal, and Information Security cases. You will ...

improving their supplier assurance risk management processes. Understand cyber threats and able to utilise threat intelligence for assessments. Participate in supplier security incident response, with a focus on assessment of impact and working in concert with the Incident Response (IR) Team to develop risk mitigation strategies. ...

Prima is seeking a Security Engineer focused on Incident Response to join our Security Team. You will work within a vibrant engineering culture with 350+ engineers across software, infrastructure, operations and security. The role emphasizes proactive monitoring, detections, and automation to safeguard data and drivers on our platform. ...

Summary DFIR Lead Cyber Operations Analyst – a VP‐level role at the centre of Barclays’ cyber defence, delivering advanced digital forensics and incident response. The analyst will analyse malware, malicious samples, and network activity to support complex investigations, working closely with internal teams, external partners and law enforcement. This … paced, high‐pressure environment. The role includes on‐call support rotation with occasional extended hours and weekend work as required. Qualifications Digital forensics and incident response expertise, including host, network, cloud and live forensic analysis, supported by rigorous documentation practices. Excellent written and verbal communication skills, with ...

DFIR Lead Cyber Operations Analyst , a VP-level role at the centre of the bank’s cyber defence, delivering advanced digital forensics and incident response. You will analyse malware, malicious samples and network activity to support complex investigations, working closely with internal teams, external partners and law enforcement. This … support may be required, including extended hours and weekend work. To be successful in this role, you will need the following: Digital forensics and incident response expertise, including host, network, cloud and live forensic analysis, supported by rigorous documentation practices. Excellent written and verbal communication skills, with ...

vulnerabilities and compromises, utilizing advanced tools and techniques to detect anomalies and contribute to the development of strategies for security investigation, threat mitigation, and incident response Produce actionable threat intelligence products including IOC development, exploit analysis reports, and threat actor tracking to inform detection engineering and security operations … Computer Science, Cybersecurity, Data Science, or related disciplines 5+ years of experience in cybersecurity threat intelligence or operations, with a focus on threat detection, incident response, and security infrastructure management Demonstrated expertise in multiple security domains, including network security, malware analysis, threat hunting, threat intelligence production, and security ...

testing, harbour trials and sea trial cyber validation. Support test planning, test readiness, defect management and security acceptance activity. Design and support onboard cyber incident response capabilities, including monitoring, logging, forensic readiness, and evidence-capture requirements. Define and assure logging, monitoring and detection requirements across shipboard and supporting … requirements and assessing third-party security evidence. Experience with SBOM review, software assurance, secure configuration, vulnerability management and technical security testing. Experience supporting cyber incident response design, forensic readiness, logging, monitoring and detection requirements. Experience operating within Integrated Project Teams or multi-disciplinary engineering delivery environments. Experience handling ...

testing, harbour trials and sea trial cyber validation. Support test planning, test readiness, defect management and security acceptance activity. Design and support onboard cyber incident response capabilities, including monitoring, logging, forensic readiness, and evidence‐capture requirements. Define and assure logging, monitoring and detection requirements across shipboard and supporting … requirements and assessing third‐party security evidence. Experience with SBOM review, software assurance, secure configuration, vulnerability management and technical security testing. Experience supporting cyber incident response design, forensic readiness, logging, monitoring and detection requirements. Experience operating within Integrated Project Teams or multi‐disciplinary engineering delivery environments. Experience handling ...

Wales. Essential Requirements Degree (or equivalent experience) in Cyber Security, IT or a related technical discipline. Strong knowledge of cyber security operations, threat hunting, incident response and security monitoring. Experience with SIEM platforms (ideally Microsoft Sentinel), KQL or similar analytics tools. Good understanding of cloud, endpoint, identity, network … application security. Knowledge of security frameworks such as NIST or ISO 27001. Experience Proven experience in cyber security operations, SOC, incident response or threat hunting within a complex environment. Experience analysing security events and telemetry from multiple sources. Experience improving detection capabilities, developing security use cases and tuning ...

practical learning, and shaping the next generation of defence cyber capability. Key Responsibilities Training Delivery & Subject Matter Expertise Deliver high-quality cyber security and incident response training to learners with varying experience levels. Translate real-world cyber operations, threat analysis, and incident handling into clear, practical instruction. … competence. Key Skills & Experiences Live SC Clearance Strong hands-on knowledge of cyber threats, network security, risk management, and compliance frameworks. Deep understanding of incident response methodologies, detection, investigation techniques and tooling. Ability to communicate complex technical concepts in a clear, engaging and learner-friendly manner. Experience designing ...

practical learning, and shaping the next generation of defence cyber capability. Key Responsibilities Training Delivery & Subject Matter Expertise Deliver high-quality cyber security and incident response training to learners with varying experience levels. Translate real-world cyber operations, threat analysis, and incident handling into clear, practical instruction. … competence. Key Skills & Experiences Live SC Clearance Strong hands-on knowledge of cyber threats, network security, risk management, and compliance frameworks. Deep understanding of incident response methodologies, detection, investigation techniques and tooling. Ability to communicate complex technical concepts in a clear, engaging and learner-friendly manner. Experience designing ...

smarter, from first-drafting and research to pattern-spotting, while upholding the highest standards of confidentiality and responsible AI. What You'll Do Coordinate Incident Response Handle responses to low to medium-risk personal data breaches, with oversight from supervising privacy counsel as appropriate. Handle and assist with … serious and complex data breaches by coordinating breach investigations by triaging facts, collecting documentation, coordinating cross-functional tasks, and preparing draft incident assessments, notifications and regulatory materials for supervising counsel review and approval. Maintain the personal data breach log, clear and organized investigative records, and track post-incident ...

primarily remote role with occasional on-site visits to London. You will be working within a security operations function, supporting the monitoring, detection and response to security threats across the organisation's estate. You will bring solid hands-on experience across SIEM and log management tooling, working independently … following: Hands-on experience with Splunk in a SOC environment Cribl experience for log management and data pipeline optimisation Security monitoring, threat detection and incident response Working within a security operations centre at a mid-senior level SC clearance held or ability to pass Interested? Please apply below. ...

autonomy while encouraging responsible AI adoption, experimentation, and innovation. We are seeking a Senior Software Engineer, Cloud to join our Threat Detection and Incident Response (TDIR) team and help revolutionize security management with our AI-native Falcon Next-Gen SIEM platform, enabling customers to detect, investigate, and hunt … scale. You’ll design, architect, and develop world-class case management and investigation capabilities in Go, building workflows that connect detections, evidence, and response actions into cohesive cases. You’ll leverage advanced correlation, contextual enrichment, and AI/ML-powered insights to help security teams prioritize threats and automate ...

generation of defence cyber capability. Key Responsibilities\n \n \nTraining Delivery & Subject Matter Expertise\n \n \n \n Deliver high-quality cyber security and incident response training to learners with varying experience levels. \n Translate real-world cyber operations, threat analysis, and incident handling into clear, practical … Live SC Clearance \n Strong hands-on knowledge of cyber threats, network security, risk management, and compliance frameworks. \n Deep understanding of incident response methodologies, detection, investigation techniques and tooling. \n Ability to communicate complex technical concepts in a clear, engaging and learner-friendly manner. \n Experience designing ...

Duties Lead security operations across multi-site infrastructure (SIEM, EDR, network security) Act as the senior escalation point for cyber incidents and investigations Drive incident response - triage, containment, root cause analysis Oversee and improve vulnerability management and threat detection Support secure design and architecture across infrastructure and cloud …/cyber operations Strong knowledge of infrastructure, networks, cloud, and endpoint security Hands-on experience with SIEM, EDR, IAM, firewalls, vulnerability tools Confident leading incident response and technical investigations The permanent opportunity for a Lead IT Security Analyst will be based out of the Lutterworth offices ...

vulnerabilities and compromises, utilizing advanced tools and techniques to detect anomalies and contribute to the development of strategies for security investigation, threat mitigation, and incident response Collaborate with cross-functional teams to ensure a coordinated approach to blockchain and enterprise security, sharing insights, and promoting best practices across … Degree in Computer Science, Cybersecurity, Data Science, or related disciplines 5+ years of experience in cybersecurity operations, with a focus on threat detection, incident response, and security infrastructure management Demonstrated expertise in multiple security domains, including network security, malware analysis, threat hunting, and security architecture and design, with ...

least privilege implementation. Assist with penetration testing and remediation activities. Support security compliance with financial services regulatory requirements. Collaborate with Security Operations and Incident Response teams during security events. Support security assurance for third-party integrations and supplier solutions. Contribute to DevSecOps tooling and automated security testing. Promote … Security Policy-as-Code (OPA) DevSecOps Secure Software Development Lifecycle (SSDLC) Threat Modelling Vulnerability Management Security Monitoring and SIEM Security Compliance and Governance Incident Response ...

strengthen the security posture of critical systems. This is a hands-on role for a LogRhythm specialist with strong experience in security monitoring, incident response, and deep-dive analysis within secure environments. What you’ll be doing: Monitoring and analysing security events using LogRhythm Investigating and responding … alerts and incidents Producing detailed incident reports and root cause analysis Tuning and optimising detection rules and use cases Supporting LogRhythm administration (2nd-line level) Mentoring junior analysts and improving SOC processes What we’re looking for: Strong LogRhythm experience (Client & Web Console) Proven SOC/incident response ...

cybersecurity, information security, and global security. You will draft and negotiate critical contract terms, analyze laws and regulations across jurisdictions, and advise on incident response and crisis management. This role offers the opportunity to work independently and with outside counsel, supporting senior management and providing practical, strategic advice … cybersecurity and physical security regulations across multiple jurisdictions. Participate in advocacy and policy efforts to shape industry standards and regulatory frameworks. Advise on cybersecurity incident response, crisis management, and regulatory engagement. Provide day-to-day legal advice to cybersecurity, technology controls, and global security teams. Identify legal issues ...

vulnerabilities and compromises, utilizing advanced tools and techniques to detect anomalies and contribute to the development of strategies for security investigation, threat mitigation, and incident response Produce actionable threat intelligence products including IOC development, exploit analysis reports, and threat actor tracking to inform detection engineering and security operations … Computer Science, Cybersecurity, Data Science, or related disciplines 5+ years of experience in cybersecurity threat intelligence or operations, with a focus on threat detection, incident response, and security infrastructure management Demonstrated expertise in multiple security domains, including network security, malware analysis, threat hunting, threat intelligence production, and security ...

leading remediation activities that improve security and resilience. Oversee secure remote and supplier access, ensuring third-party connectivity is appropriately governed and monitored. Support incident response and recovery planning for identity-related events, including break-glass access and restoration activities. Produce meaningful reporting and assurance evidence for governance … authentication, access governance, audit, recertification and operating effective identity controls within a regulated environment. Experience identifying and mitigating identity risks, improving resilience and supporting incident response and recovery planning. Good understanding of ISO 27001, NCSC guidance and PRA/FCA operational resilience requirements, with the ability to apply ...

supporting a foundation of tools and common services — including our managed Kubernetes clusters, observability tooling, and much more — while setting best practices around incident management and cost controls and empowering teams to build it, run it. The Principal Engineers work together as a unified team with a common goal … will deliver on Beamery's strategy Engage with other Principal Engineers in setting and advocating company-wide standards for operational excellence, observability, reliability and incident response Take a whole-company view of major incidents, identifying recurring themes and turning them into company-level investments Own and evolve ...

time-pressured situations. We lead on traditional eDiscovery use cases, and our team also works on adjacent use cases, such as digital forensics, cyber incident response, information governance, and data privacy matters amongst other related matters. Your key responsibilities: Take a central role in the provision … delivery on client requirements to often tight deadlines. To qualify for the role you must have: Professional experience in eDiscovery, digital forensics, cyber incident response, information governance, and/or data privacy, or an educational background in a related field (e.g., computer science, computer forensics, software engineering, project ...