201 to 225 of 1,862 Incident Response Jobs in the UK

frameworks, ensuring that security best practices are integrated into all aspects of cloud infrastructure and services. Cloud Security Operations: Ensure appropriate monitoring, detection, and response to security threats and vulnerabilities within cloud environments is embedded from the outset. Conduct risk assessments and security audits to identify areas of improvement … ensure compliance with regulatory requirements. Incident Response & Forensics: Support incident response efforts in cloud environments, including identifying and investigating security incidents and breaches. Provide technical input and support to root cause analysis and recommend corrective actions. Automation & Optimisation: Automate security controls, monitoring, and response processes ...

Partner with Engineering teams to design resilient services, architectures, and deployment patterns. Define and promote SRE practices including SLIs, SLOs, error budgets, capacity planning, incident response, and post-incident learning. Identify systemic reliability risks and work with teams to address root causes. Help reduce operational toil through … help Engineering teams self-serve reliability, diagnostics, and operational insights. Improve cloud, container, and orchestration environments with a focus on security, reliability, and scalability. Incident Management & Operational Excellence Participate in incident response for high-priority production issues. Lead or contribute to blameless post-incident reviews. Ensure ...

strengthen our security posture. You will support the implementation of Zero Trust security principles across the organisation. You will enhance threat prevention, detection, and response capabilities through security engineering best practices. Cloud Security You will design and implement security controls within Microsoft Azure and hybrid cloud environments. You will … Operations & Threat Detection You will engineer and maintain SIEM, SOAR, and security monitoring platforms. You will develop and optimise security alerts, detections, and automated response processes. You will collaborate with internal teams and SOC providers to improve threat detection and incident response capabilities. You will support security ...

team Set standards, coach engineers and build a culture focused on ownership, automation and reliability Work directly with engineers on production issues, Kubernetes troubleshooting, incident response, deployment automation, observability, capacity management and service resilience Drive automation to reduce manual intervention, operational toil and human hand-offs Explore … adopt Agentic AI and intelligent automation for operational decision support, incident triage, runbook execution, knowledge retrieval, change preparation and service management Own SaaS operational standards, including runbooks, monitoring, alerting, incident management, post-incident reviews, backup and recovery, change control and customer-impact communications Collaborate with Engineering, Product ...

expertise to help maintain the availability, performance, and reliability of our critical SaaS applications. In this role, you will own and drive automation, monitoring, incident response, and infrastructure improvements across our multi-cloud, multi-region environment, working closely with senior engineering and cross-functional teams. What …/node failures, deployment rollbacks, ingress and networking issues, and resource/autoscaling problems. Participate in an on-call rotation (including weekends) and drive incident response from detection through resolution, with a primary focus on customer experience and minimizing impact. Drive improvements to disaster recovery, failover, and incident ...

assurance, while leading the continued development of its security capability. This is a broad leadership position covering everything from the outsourced SOC and incident response through to ISO 27001, Cyber Essentials Plus, cloud security, supplier assurance and the secure adoption of AI. What’s on offer: • Hybrid working … Develop and deliver the firm's cyber security strategy and maturity roadmap • Own and continuously improve security operations and the outsourced SOC • Lead cyber incident investigation and response • Oversee vulnerability management, penetration testing and remediation programmes • Maintain ownership of ISO 27001 and Cyber Essentials Plus • Establish security architecture ...

while also owning continuous improvement of playbooks, dashboards, and operational processes. Additionally, the role collaborates with global Vodafone Cyber Security teams, including CERT and Incident Management, to support major incident investigations and cross functional initiatives.* Define, maintain and continuously improve Cyber Defence playbooks for SigFW related events.* Develop … clear and actionable incident reporting to support effective prioritisation, escalation and decision making.* Support development and production integration of Signalling Intrusion Detection Systems (SigIDS).* Design and maintain operational dashboards and analytics to improve signalling security situational awareness.* Perform continuous monitoring and triage of signalling security events in line ...

runtime platforms that make AI services reliable, secure, observable and supportable at Arm scale. You will work across Kubernetes, cloud, identity, secrets, networking, telemetry, incident management and automation to provide the production foundation for Arm's AI platform. Participate in production support and our paid on-call rota … high impact incident response. Production AI runtime platforms: Build/deploy and operate the infrastructure for centrally hosted AI platform services, including MCP server infrastructure, model gateway services and supporting control-plane components. Design runtime patterns for isolation, scalability, secure execution, capacity management and cost-aware operation. Automate provisioning ...

deep understanding of information security technologies, you will aid in triaging threat intelligence from multiple sources and add contextual information to the security incident, perform additional analysis and based on the business impact will recommend the response actions and escalation path. You will be guided by Threat Intelligence … analysts, including objectives setting, performance management/reviews, training & development, and BAU activities including shift cover etc. Perform advanced event and incident analysis, including baseline establishment and trend analysis. Support on-call arrangements as part of a Rota, to support L1 Analysts working out of hours Support Major Incident ...

approve OT technology deployments from a cybersecurity perspective. Support the secure adoption of Industrial IoT (IIoT), cloud-connected systems, and remote access solutions. Incident Response & Operational Security Develop and maintain OT-specific incident response processes. Lead investigations and response activities for OT cybersecurity incidents. Coordinate ...

Office. Full time, 35 hours per week. We are happy to discuss flexible working! Top 3 skills needed for this role: Security Operations Leadership & Incident Response Risk, Governance & Regulatory Compliance Technical Depth in Monitoring & Security Engineering What this role is all about: You will be joining a vibrant … team of security analysts and a service delivery manager with specific skill sets. This role provides cyber security leadership through risk management, threat monitoring, incident response, resilience planning, training, and CSIRT team support. In addition to your daily responsibilities, you will be playing a part in the longer ...

Cyber Essentials , and Cyber Essentials Plus certifications. Produce security metrics , dashboards , and security reports to inform security strategy . Lead and coordinate security incident response and post-incident improvements . Conduct third-party security assessments and manage vendor security assurance . Requirements 4+ years' experience … skills across complex IT environments. Proactive approach to security , with a focus on continuous improvement and best practice . Experience leading or supporting security incident response and remediation . Strong reporting , analysis , and security metrics capabilities. Excellent communication , stakeholder engagement , and documentation skills. Benefits Excellent salary Pension Private ...

cloud security technologies. Key responsibilities will include: Operating and optimising Cortex Cloud and Cortex XSIAM platforms Developing and tuning threat detection rules and automated response playbooks Supporting incident response activities, including investigation and remediation Managing Cloud Security Posture Management (CSPM) capabilities Improving Kubernetes and container security posture … platforms Prisma Access and secure access technologies AWS security services and cloud-native security controls Kubernetes and container security Threat detection, threat hunting, and incident response Security automation and orchestration Zero Trust security architecture Palo Alto security technologies, including NGFW and Panorama SIEM technologies and API integrations Desirable ...

learning products. As the team takes end-to-end ownership of the platforms it runs, you will build the CI/CD, observability, and incident-management practices that keep those services stable, secure, and performant across international markets. This is a Vice President-level role and an integral part … evolves the team's CI/CD pipelines, release automation, and deployment tooling Establishes reliability practices (SLOs, error budgets, runbooks) and leads production incident response and post-incident review Builds and operates observability across the team's AI/ML services (metrics, logging, tracing, alerting) Automates infrastructure ...

learning products. As the team takes end-to-end ownership of the platforms it runs, you will build the CI/CD, observability, and incident-management practices that keep those services stable, secure, and performant across international markets. This is a Vice President-level role and an integral part … evolves the team's CI/CD pipelines, release automation, and deployment tooling Establishes reliability practices (SLOs, error budgets, runbooks) and leads production incident response and post-incident review Builds and operates observability across the team's AI/ML services (metrics, logging, tracing, alerting) Automates infrastructure ...

activity, hunting for threats and working out what happened, how it happened and, most importantly, what to do about it. You’ll sit across incident response, threat hunting, detection engineering and security operations, working closely with technical teams and other security specialists to keep improving the organisation … someone who really understands security, rather than someone who simply knows how to follow a playbook. Your background could be in CSIRT, SOC, incident response, detection engineering, threat hunting, threat intelligence, red teaming or security engineering. You’ll ideally have experience with: Cyber security incident investigation ...

with experience developing assurance artefacts such as SyOPs, RMADs, Security Impact Assessments, risk assessments, and accreditation evidence. Experience leading assurance initiatives, audits, control assessments, incident response activity, and vulnerability management using tools such as Nessus, Trivy, Tenable, or similar platforms. Ability to brief and influence senior stakeholders, mentor … Security Impact Assessments, Security Management Plans, risk assessments, and governance documentation. Drive maturity of assurance processes, tooling, reporting, and governance across multiple programmes. Lead incident response capability development, including response plans, playbooks, testing, exercising, and Tabletop Exercises (TTXs). Manage vulnerability, risk, audit, control assessment, and compliance ...

with experience developing assurance artefacts such as SyOPs, RMADs, Security Impact Assessments, risk assessments, and accreditation evidence. Experience leading assurance initiatives, audits, control assessments, incident response activity, and vulnerability management using tools such as Nessus, Trivy, Tenable, or similar platforms. Ability to brief and influence senior stakeholders, mentor … Security Impact Assessments, Security Management Plans, risk assessments, and governance documentation. Drive maturity of assurance processes, tooling, reporting, and governance across multiple programmes. Lead incident response capability development, including response plans, playbooks, testing, exercising, and Tabletop Exercises (TTXs). Manage vulnerability, risk, audit, control assessment, and compliance ...

with experience developing assurance artefacts such as SyOPs, RMADs, Security Impact Assessments, risk assessments, and accreditation evidence. Experience leading assurance initiatives, audits, control assessments, incident response activity, and vulnerability management using tools such as Nessus, Trivy, Tenable, or similar platforms. Ability to brief and influence senior stakeholders, mentor … Security Impact Assessments, Security Management Plans, risk assessments, and governance documentation. Drive maturity of assurance processes, tooling, reporting, and governance across multiple programmes. Lead incident response capability development, including response plans, playbooks, testing, exercising, and Tabletop Exercises (TTXs). Manage vulnerability, risk, audit, control assessment, and compliance ...

HITACHI ENERGY UK LIMITED is hiring a Cybersecurity Incident Response Analyst to join the Cyber Defense Center. You will support Security Monitoring services, assist in incident investigations, and work with Incident Managers during high-priority events across a 24/7 framework in a hybrid, England ...

performance and security while helping colleagues grow. Work with Data Engineering colleagues on interfaces, data contracts, data quality and operational failure modes. Contribute to incident response, post-incident learning and continuous improvement of the services you support. Document technical decisions and operational knowledge so the team … wider platform environment. AI-assisted engineering tools such as Claude Code or Codex, used with disciplined review and validation. Agile planning, code review, incident response and collaborative technical documentation. Why you’ll love it here Salary c. £66k Flexible, hybrid working. You'll spend a minimum ...

availability standards. Supply Chain Resilience: Assess the security posture of third-party APIs and integrations to prevent data leaks or service disruptions. Operational Excellence & Incident Response Incident Commander: Lead the response to information security incidents. Act as the primary escalation point, coordinating containment while providing clear ...

frameworks Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident response, threat intelligence and cyber defence capabilities Architect security monitoring, detection and response solutions Design business continuity and cyber resilience frameworks Compliance … architecture role Proven experience designing enterprise-scale security architectures Strong background in defence, aerospace or government security programmes Demonstrated expertise with security operations, incident response and threat management Track record of leading security transformation and programme implementations Technical Knowledge Deep expertise in security architecture frameworks, methodologies and best ...

selection, lifecycle planning, investment cases and build-versus-buy decisions. Improve the automation, repeatability, resilience and operational effectiveness of security services. Define monitoring, logging, incident response, evidence capture and operational control requirements. Ensure that new and changed services can be transitioned effectively into SOC, MDR, service desk … Designing and assuring security across identity, networks, endpoints, cloud infrastructure, virtualisation and data protection. Defining architectures for security monitoring, vulnerability management, privileged access and incident response. Producing high-level designs, reference architectures, decision records, threat models and implementation guidance. Leading security design reviews or participating in architecture governance ...

Analyse logs from endpoints, networks, cloud services and security tools to detect suspicious behaviour Escalate incidents where appropriate and work closely with engineering and incident response teams Develop and improve SIEM detection rules and alert tuning to reduce false positives Produce clear incident reports and maintain accurate … documentation Participate in the on-call rota and support major incident response when required Contribute to the continuous improvement of SOC processes, tooling and operational procedures Skills & Experience Experience working withi n a 24/7 Security Operations Centre ( SOC) or equivalent cyber security environment Strong hands ...