201 to 225 of 1,007 Incident Response Jobs in the UK

instrumenting services with observability (metrics, logs, and traces) so their health is visible. Take part in operating live services, including release management, alerting, and incident response, while actively reducing toil, technical debt, and manual effort through automation. Take ownership of personal learning paths, continually acquiring new skills, particularly … Infrastructure as Code to provision and manage environments in a repeatable, reviewable way. A willingness to take part in operational duties such as releases, incident response, and keeping live services healthy and reliable. You have an awareness of security principles and best practices to ensure secure software delivery. ...

workplace wellbeing initiatives. Support internal and external audits and ensure actions are completed. Record and report sustainability and energy-related information where required. Incident & Business Continuity Management Act as the first point of contact for workplace operational incidents. Coordinate incident response and service recovery activities. Escalate incidents … provide stakeholder communications where required. Work closely with Workplace, Security, IT, EHS, vendors, and building management teams. Support out-of-hours incident response where required. Support workplace resilience and business continuity planning. Skills & Experience Essential Experience in workplace operations, facilities management, or workplace experience in roles within ...

growth and innovation. You’ll define and lead our security strategy, establish governance and compliance frameworks, strengthen cloud and third‐party security, and drive incident response and resilience planning across the organisation. About You Experience & Expertise 10+ years’ experience in information security, including leadership‐level responsibility Proven experience … building and scaling security and privacy programmes within growing organisations Strong hands‐on knowledge of GDPR, PCI‐DSS, incident response, and resilience planning Experience working within cloud‐first environments, ideally AWS Strong understanding of security within e‐commerce, fintech, or customer‐data‐led businesses Comfortable operating as both ...

there is a clear path for the right person to grow the role and, in time, a team around them. Security Operations & Tooling Ownership Incident Response & Vulnerability Execution Governance, Continuity & Collaboration Requirements Hands‐on experience administering and hardening the Microsoft stack Intune, Defender for Endpoint and Entra … macOS Platform SSO. Working knowledge of email authentication SPF, DKIM and DMARC. Experience working alongside an external MDR/SOC partner for detection and incident response. A grounding in network security fundamentals, segmentation, wireless authentication and secure access ideally on Cisco Meraki. Hands‐on experience with vulnerability management tooling ...

United Kingdom. The role focuses on defining and overseeing information security strategy, policies and governance to protect critical assets. The successful candidate will drive incident response, risk management and regulatory compliance, while partnering with executive leadership to align security with business goals and deliver measurable security improvements. #J ...

will monitor, investigate, and respond to security events, and partner with IT and business units to improve our security posture. The role emphasizes incident response, threat hunting, and continuous improvement of security tools and processes within a global environment. #J-18808-Ljbffr ...

regulators and law enforcement Mentor the analyst team and act as senior escalation point for major incidents What You'll Bring: 5+ years in incident response or SOC environments, ideally with managed services (MSSP) exposure A proven record leading complex investigations - ransomware and breach cases you can walk … advantage) A well-developed threat hunting toolkit: YARA rules, IOC development, timeline analysis and adversary profiling Cloud investigation experience - Azure and/or AWS incident response, log analysis and cloud-native threats The communication skills to translate deep technical findings for senior, non-technical audiences A natural mentoring ...

Provide engineering support for Citrix VDI environments and enterprise-scale identity and endpoint platforms. • Collaborate with cross functional teams to ensure service readiness, effective incident response, and continuous improvement. • Contribute to enterprise service engineering documentation, standards, and automation where applicable. **Qualifications:** *Required:** Active TS/SCI with Poly … service environment. • Experience leading service transitions from on prem to Azure. • Strong documentation habits and ability to communicate complex technical issues clearly. • Familiarity with incident response, root cause analysis, and enterprise change management. • Relevant certifications: Microsoft, Citrix, Tanium, Splunk, or similar.-**What You Can Expect:****A culture ...

partnered with a growing cyber security business in Buckinghamshire, supporting customers with threat monitoring, incident response, and managed security services. They are looking for a Level 3 SOC Analyst to join their experienced SOC team, leading complex investigations and acting as the technical escalation point for major security … develop detection rules, automate workflows, and continuously improve SOC operations The ideal Level 3 SOC Analyst will have: Strong commercial experience within a SOC, incident response, or cyber security operations environment Experience investigating complex threats including ransomware, malware, account compromise, and targeted attacks Hands-on experience with SIEM ...

long-term technical vision for the platform, aligning with business outcomes and regulatory requirements. Champion a "you-build-it-you-run-it" culture, overseeing incident response and identifying opportunities to automate remediation. Ensure successful collaboration across teams and stakeholders, driving consensus on architectural and delivery trade-offs. Identify … technical and non-technical stakeholders. Ability to translate business objectives into team-level tasks and priorities. Experience managing production systems, including on-call rotations, incident response, and reliability engineering. Experience leading multi-team adoption of enterprise-authorized AI-assisted development and delivery tools, including defining governance/ways ...

defend Morgan Stanley Network. The Cyber, Data, Risk and Resilience (CDRR) division provides first-line defences for information and cyber security, fraud, resilience, response and recovery, and technology risk and controls. The organization also includes Morgan Stanley's Firmwide Data Office, International Technology offices, and the Non-Financial Risk … bring to the role: 3-5 years of experience directly in Cybersecurity related fields (Hunt, Intelligence, Detection Engineering, Blue Teaming, Pen testing, Incident Response, SOC Operations, Cyber Risk) or relevant educational experience. Ability to work with customers, gather requirements and distil them into complete solutions. Detailed understanding ...

report to the Cyber Operations and Engineering Manager. This role focuses on defining, maintaining, and testing resilience plans for the organisation, including Business Continuity , Incident Response , and Disaster Recovery . You will work closely with multiple teams across the IT department and the wider business to ensure that … will include: Conducting analysis on business systems to understand and document the impact, scope, and recovery path in relation to cyber incidents. Contribution to incident reviews to ensure learnings are taken to improve our resilience. Identifying and escalating weaknesses in the resilience strategy. Working with project and change teams ...

capability, ensuring effective protection of the organisation’s systems, data, and services. Reporting into the Head of Cyber Security, you will oversee security operations, incident response, security engineering, vulnerability management, and the performance of outsourced security partners. Working closely with internal Technology teams and third-party providers … with business objectives. What we're looking for We're looking for an experienced cyber security professional with a strong background in security operations, incident response, and security engineering within a complex technology environment. You will have experience managing security platforms and third-party security service providers, alongside ...

with teams primarily based in the US Establish and drive adoption of engineering best practices within your team, including the operational rigor (on‐call, incident response, postmortems) required for infrastructure that other teams and external partners depend on Contribute to engineering‐wide initiatives as a member … depth to guide architectural decisions and engage credibly in technical discussions Experience operating production distributed systems, with an understanding of what reliability, observability, and incident response require at scale Excellent communication skills, with the ability to build consensus across teams and time zones Demonstrated success building a culture ...

Cyber Essentials) Experience overseeing governance, risk, and assurance activities Broad technical understanding across networks, cloud, infrastructure Hands-on experience leading or coordinating cyber incident response Ability to translate technical risk into clear, business-focused messaging Experience producing reports, dashboards, and presenting to senior stakeholders Strong people leadership skills … System (ISMS) Ensure alignment with standards such as ISO 27001 and Cyber Essentials Identify, assess, and mitigate cyber risks, maintaining the risk register Lead incident response capability, ensuring plans are tested and effective Monitor the threat landscape and advise on emerging risks and mitigations Manage and develop ...

vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent. Experience in application security architecture, security code reviews, security testing, incident response, or security infrastructure. Experience with coding/scripting in one or more languages (e.g., Python, C, C++, Java, Ruby, or PowerShell). … Preferred Qualifications Experience with AWS services or other cloud offerings. Experience in one or more of the following: application security frameworks, security code reviews, incident response, security infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls. Knowledge of one or more of the following ...

security foundations that enable teams to move quickly with confidence. The team owns critical cloud security capabilities including detection engineering, cloud security monitoring, incident response, cloud security controls, and the security tooling that protects Fin's production environments. The team is responsible for securing the cloud platforms … across our cloud environments. Develop detection engineering capabilities that identify attacker behaviour and reduce time to detection and response. Lead cloud security investigations and incident response activities in partnership with engineering teams. Participate in a shared on‐call rotation and help coordinate containment, remediation, and recovery efforts during ...

security foundations that enable teams to move quickly with confidence. The team owns critical cloud security capabilities including detection engineering, cloud security monitoring, incident response, cloud security controls, and the security tooling that protects Fin's production environments. The team is responsible for securing the cloud platforms … across our cloud environments. Develop detection engineering capabilities that identify attacker behaviour and reduce time to detection and response. Lead cloud security investigations and incident response activities in partnership with engineering teams. Participate in a shared on‐call rotation and help coordinate containment, remediation, and recovery efforts during ...

champion new ideas to evolve our systems responsibly over time. Engineers on the team are involved throughout the software lifecycle, including design, deployment, observability, incident response, and long-term platform evolution. Our technologies We work primarily in C++ and some Python, running mostly on Linux, with continued support … environments. Strong experience designing and building multi-threaded or concurrent applications. Experience owning software across the full lifecycle, including design, implementation, testing, deployment, observability, incident response, and long-term evolution. Ability to make pragmatic system design decisions across performance, scalability, reliability, maintainability, and compatibility constraints. An eagerness ...

seeking a DFIR Lead Cyber Operations Analyst at VP level in Knutsford. In this key role, you will deliver advanced digital forensics and incident response while leading complex investigations. You will collaborate with internal teams and law enforcement, and produce clear reports under pressure. Ideal candidates will have ...

findings and translating them into actionable remediation plans. Supporting security assurance, risk assessments, and control validation activities. Collaborating with Security Architecture and Cyber Security Incident Response teams to elevate the overall security posture. Assisting with audit, compliance, and evidence-gathering activities when required. Essential Experience: We're looking … external penetration testing engagements. The ability to recognise common vulnerabilities and security gaps. Familiarity with regulated or Critical National Infrastructure (CNI) environments. Exposure to incident response and CSIRT functions. Relevant Microsoft or security certifications (e.g., SC-200, SC-300, SC-400, AZ-500, CCSP). What ...

versioning, contracts, and backward compatibility. Advance operational excellence by defining SLOs, improving observability and alerting, hardening on‐call procedures and runbooks, and leading incident response and post‐mortems. Solve complex distributed system challenges (such as throughput, latency, consistency, and data modeling) with pragmatic decision‐making and balanced tradeoffs. … design, and event‐driven systems, as well as experience with containerization and orchestration (Docker, Kubernetes). Strong operational mindset: expert in observability, monitoring, incident response, performance engineering, and adherence to security best practices. Familiarity with CI/CD pipelines, automated testing strategies (unit, integration, e2e), and modern DevOps ...

/7 security operations team across a multi-client MSSP environment. You will act as the senior technical authority for threat detection, incident response, and operational excellence, while mentoring analysts and driving innovative SOC improvements. You will stay hands-on, lead complex escalations, refine playbooks, and collaborate with … Threat Intelligence, Engineering and Incident Response to deliver high-value security #J-18808-Ljbffr ...

Palo Alto Networks is seeking a client-facing Principal Consultant to lead reactive services engagements and manage incident response from start to finish. You will guide clients through containment and long-term remediation, leveraging your expert knowledge in digital forensics. This weekend schedule position runs Friday to Monday ...

Life on the team As the Cyber Incident Readiness Lead, you will shape and define how Computacenter responds to and prepares for cyber incidents. This role is responsible for building, maintaining and evolving the end-to-end security incident management framework, alongside owning a structured security incident exercise programme that ensures the organisation is ready to respond when it matters. You will own how Security Incident Management operates across Cyber Security, ensuring the framework is clear, effective and continuously improved, from triage through to response and testing. This includes designing and running realistic incident ...