226 to 250 of 1,008 Incident Response Jobs in the UK

platforms. Drive AI security and observability: Build out dedicated auth/permissions for internal AI agents, establish deep monitoring/observability pipelines, and define incident response protocols for AI‐specific anomalies. Verification and Red Teaming: Lead continuous verification efforts and red teaming exercises to proactively identify vulnerabilities, prompt … that accurately reflect the real‐world performance and safety of our internal‐facing AI tooling and harnesses. Resilient Internal Infrastructure: AI security, monitoring, and incident response are treated as first‐class citizens, ensuring that any erratic agent behaviour in our internal platforms is immediately caught and mitigated before ...

looking for a DFIR Lead Cyber Operations Analyst, a VP-level role focused on cyber defense. This position demands expertise in digital forensics and incident response, and the ability to analyze malware and network activity while effectively communicating findings. The ideal candidate will excel under pressure, possess leadership ...

operates large-scale defensive capabilities for a major UK bank. The role drives strategic direction in cyber defence, detection engineering, threat hunting and incident response, while steering improvements across security platforms, tooling and processes. #J-18808-Ljbffr ...

correctness, compatibility, and safe rollout and rollback. Strengthen monitoring, alerting, and diagnostics to detect problems early and reduce customer impact. Participate in on‐call, incident response, and root‐cause analysis, and turn operational learnings into lasting engineering improvements. Work across product and infrastructure teams to ensure new systems … writing reliable, maintainable production code. Experience designing, building, or improving services, platforms, or shared infrastructure at scale. Familiarity with production reliability practices, including monitoring, incident response, root‐cause analysis, and operational readiness. Experience diagnosing performance, scalability, or reliability issues in production environments. Understanding of distributed systems, data storage ...

ownership and measurable outcomes. The remit also includes strengthening continuity arrangements across the business. You will improve business impact analysis, refresh recovery plans, support incident response and ensure resilience activity becomes part of everyday operational management. This role needs someone who can move comfortably between regulation, risk … analysis and support teams in producing clear, usable recovery plans Maintain oversight of important services, disruption tolerances and the resources that support them Improve incident response, escalation, crisis coordination and lessons learned activity Support the assessment and reporting of material technology incidents in line with DORA Plan ...

scale. Experience with agentic systems and using AI to support production operations, including familiarity with LLM-based tooling, AI-driven automation, or intelligent incident response systems. Ability to understand complex relationship between the organization and its environment, identify connections, adopt different perspectives and quickly respond to changing circumstances … production operations. Lead and contribute to the cross-SRE AI Ops program, driving the strategic adoption of AI/ML tools to improve incident response, reduce toil, and enhance service reliability across Ads SRE. Focus on optimizing existing systems, build infrastructure, and eliminate work through automation ...

Principles of Cyber Security, Level 2) equips you with the practical skills employers are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you ll gain hands-on experience that prepares you for today s fast-growing cyber security and IT roles. … Understand cyber security principles and core frameworks Threat Intelligence: Develop expertise to identify risks Testing: Conduct cyber security testing, identify vulnerabilities and implement controls Incident Response: Prepare for and respond to cyber security incidents Ethics: Understand legislation and ethical conduct within cyber security Professional Skills: Build professional skills ...

Principles of Cyber Security, Level 2) equips you with the practical skills employers are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you’ll gain hands-on experience that prepares you for today’s fast-growing cyber security and IT roles. … Understand cyber security principles and core frameworks Threat Intelligence: Develop expertise to identify risks Testing: Conduct cyber security testing, identify vulnerabilities and implement controls Incident Response: Prepare for and respond to cyber security incidents Ethics: Understand legislation and ethical conduct within cyber security Professional Skills: Build professional skills ...

initiatives across the software development lifecycle, helping teams identify and address security risks early. Participate in a shared on‐call rotation and lead security incident response, investigation, and remediation efforts. Drive security initiatives from problem definition through design, implementation, and measurable outcomes. Partner with teams building AI‐powered … designing, building, or securing authentication, authorization, identity, or enterprise security capabilities. Experience conducting architecture reviews and security assessments for complex systems. Hands‐on security incident response experience, including leading investigations and remediation efforts. Strong programming skills and experience building tools, automation, or developer‐focused solutions. Comfortable using modern ...

initiatives across the software development lifecycle, helping teams identify and address security risks early. Participate in a shared on-call rotation and lead security incident response, investigation, and remediation efforts. Drive security initiatives from problem definition through design, implementation, and measurable outcomes. Partner with teams building AI-powered … designing, building, or securing authentication, authorization, identity, or enterprise security capabilities. Experience conducting architecture reviews and security assessments for complex systems. Hands-on security incident response experience, including leading investigations and remediation efforts. Strong programming skills and experience building tools, automation, or developer-focused solutions. Comfortable using modern ...

disruption to business operations. The role partners closely with functional and business teams to embed legal and compliance considerations into internal systems, product development, incident response, and business operations. This position has no direct reports but operates at an executive level in the Law Department with significant influence … Strong contracting capability for data privacy and data governance terms, including data access and data rights provisions, security addenda, audit rights, and flowdown clauses. Incident response and regulatory engagement experience, including breach notifications, investigations, and interactions with regulators in the EU. Qualifications You Must Have J.D. (or equivalent ...

boundary traffic inspection, content filtering and advanced threat protection. Lead boundary security assessments and vulnerability remediation. Implement MOD-compliant boundary configurations and security baselines. Incident Management & Threat Response Lead boundary security incident detection, investigation and response. Manage security alerts, anomaly investigation and threat escalation. Coordinate incident response across boundary security team and customer security teams. Conduct post-incident reviews and implement preventative measures Maintain security event logs and provide compliance reporting to MOD. Technology & Service Development Evaluate and implement boundary security technologies and tools. Design automation and orchestration for boundary security operations. Lead ...

ensuring high availability, performance, and resilience of customer-facing systems during both normal operation and peak lottery events. The role combines hands‐on engineering, incident leadership, and ownership of the SRE improvement backlog and reporting, working across platform, product, and operational teams. Objectives of the role Own reliability outcomes … across services using SLOs, SLIs, and error budgets Improve availability, latency, and scalability across Instant-Win and Draw-based platforms Lead incident response and operational readiness, including peak jackpot events Drive automation and platform maturity, reducing manual operational effort Establish clear reporting on reliability, incidents, and service health ...

ensuring high availability, performance, and resilience of customer-facing systems during both normal operation and peak lottery events. The role combines hands‐on engineering, incident leadership, and ownership of the SRE improvement backlog and reporting, working across platform, product, and operational teams. Objectives of the role Own reliability outcomes … across services using SLOs, SLIs, and error budgets Improve availability, latency, and scalability across Instant-Win and Draw-based platforms Lead incident response and operational readiness, including peak jackpot events Drive automation and platform maturity, reducing manual operational effort Establish clear reporting on reliability, incidents, and service health ...

mitigation activities Oversee security architecture to ensure alignment with wider technology strategy Drive continuous improvement through security assessments, testing, and reporting Ensure effective incident detection, response, and recovery capabilities Lead vulnerability management and remediation across all technology environments Oversee third‐party security testing, including penetration testing and phishing … delivering cyber security strategies Strong understanding of security frameworks such as ISO 27001, NIST, Cyber Essentials Expertise in risk management, vulnerability assessment, and incident response Experience with enterprise security tools (e.g. SIEM, IDS, firewalls, encryption technologies) Knowledge of cloud and hybrid security environments Ability to communicate complex technical ...

transformation of its Security Operations capability and operating model. While the emphasis of the capability was previously on protective monitoring against commodity threats, reactive incident management, and escalation to third-party IT suppliers for remediation and response, the organisation is significantly expanding and developing its capability to create … responsibility for end-to-end technical cyber defence. The intended scope of services includes threat intelligence, attack surface management, proactive monitoring and threat hunting, incident management and response, supported by strong Security Engineering and DevSecOps practices. To support this transition, the organisation requires an experienced Principal Security Operations ...

with technical awareness , placing you at the centre of a live Security Operations Centre where you'll maintain situational awareness across multiple domains, coordinate incident response, and ensure effective operational decision-making. You'll act as the operational lead within a fast-paced control room environment, working closely … domains. Monitor live environments and assess alerts and incidents in real time. Perform initial triage and validation of alerts, reducing noise and ensuring accurate incident classification. Manage incident prioritisation and escalation in accordance with operational procedures. Coordinate response activities across SOC, NOC, Infrastructure and Security teams. Support ...

with technical awareness , placing you at the centre of a live Security Operations Centre where you'll maintain situational awareness across multiple domains, coordinate incident response, and ensure effective operational decision-making. You'll act as the operational lead within a fast-paced control room environment, working closely … domains. Monitor live environments and assess alerts and incidents in real time. Perform initial triage and validation of alerts, reducing noise and ensuring accurate incident classification. Manage incident prioritisation and escalation in accordance with operational procedures. Coordinate response activities across SOC, NOC, Infrastructure and Security teams. Support ...

with technical awareness , placing you at the centre of a live Security Operations Centre where you'll maintain situational awareness across multiple domains, coordinate incident response, and ensure effective operational decision-making. You'll act as the operational lead within a fast-paced control room environment, working closely … domains. Monitor live environments and assess alerts and incidents in real time. Perform initial triage and validation of alerts, reducing noise and ensuring accurate incident classification. Manage incident prioritisation and escalation in accordance with operational procedures. Coordinate response activities across SOC, NOC, Infrastructure and Security teams. Support ...

error budgets.* Proactively monitor platform health and performance using observability tooling.* Perform root cause analysis and implement permanent fixes for recurring incidents.* Participate in incident management and on-call support rotations where required.* Lead blameless post-incident reviews, capture lessons learned, and drive corrective actions through to completion. … logs, traces, synthetic monitoring, alerting, dashboards, and operational telemetry.* Ability to define actionable alerts that identify customer-impacting symptoms, reduce noise, and support rapid incident triage.* Proven capability in incident response, root cause analysis, blameless post-incident reviews, corrective action tracking, and operational learning.* Experience reducing ...

/7 operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC's Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance … using the Protective Monitoring platform and Internet resources to identify cyber-attacks/security incidents. Categorise all suspected incidents in line with the Security Incident policy Recognise potential, successful and unsuccessful intrusion attempts and compromises through reviews and further analysis of relevant event detail and incident summary information. ...

/7 operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC's Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance … using the Protective Monitoring platform and Internet resources to identify cyber-attacks/security incidents. Categorise all suspected incidents in line with the Security Incident policy Recognise potential, successful and unsuccessful intrusion attempts and compromises through reviews and further analysis of relevant event detail and incident summary information. ...

stability of software applications and systems. Provides operational support and leadership for production systems in a "you‐build‐it‐you‐run‐it" culture, including incident response, post‐incident learning, and continuous reliability improvements. Leads evaluation sessions with external vendors, startups, and internal teams to drive outcomes‐oriented ...

Model & Ways of Working**: Define and implement SRE ways of working and engagement patterns, aligning reliability practices with existing ITSM/ITIL processes (e.g., incident, problem, release and change) and modern engineering delivery.* **Reliability Measures (SLIs/SLOs) & Error Budgets**: Establish service measures and targets (SLIs/SLOs … Insight:** Shape observability approaches (metrics/logs/traces) and operational monitoring models that make reliability risks visible and actionable, improving operational decision-making.* **Incident Excellence & Continuous Learning:** Design incident analysis and improvement loops, including practical approaches that strengthen incident response and drive learning through post ...

Model & Ways of Working**: Define and implement SRE ways of working and engagement patterns, aligning reliability practices with existing ITSM/ITIL processes (e.g., incident, problem, release and change) and modern engineering delivery.* **Reliability Measures (SLIs/SLOs) & Error Budgets**: Establish service measures and targets (SLIs/SLOs … Insight:** Shape observability approaches (metrics/logs/traces) and operational monitoring models that make reliability risks visible and actionable, improving operational decision-making.* **Incident Excellence & Continuous Learning:** Design incident analysis and improvement loops, including practical approaches that strengthen incident response and drive learning through post ...