226 to 250 of 503 Incident Response Jobs in the UK

role in driving reliability, performance, and operational excellence across Ricoh's hybrid cloud and on-prem environments. You will help shape SRE practices, support incident and problem management, embed automation, and ensure infrastructure operations meet the highest security and compliance standards, including ISO 27001. This is a hands … managing error budgets for core services Implementing standards for availability, latency, performance, capacity, and scalability Leading and contributing to root-cause analysis and major incident reviews Supporting a blameless post-mortem culture with clear action tracking Defining and implementing SRE practices, tooling, and engineering standards Driving infrastructure-as-code ...

multiple domains. What You'll Be DoingProtect and secure Windows and Linux environments across corporate and production infrastructureEnhance endpoint security controls, monitoring, detection, and response capabilitiesHelp design, implement, and maintain cloud security controls across Azure and other cloud environmentsPartner with software engineers to embed security throughout the Software Development … modelling, and vulnerability remediationBuild and improve DevSecOps capabilities within CI/CD pipelinesLead vulnerability management activities, including scanning, prioritisation, risk assessment, and remediation trackingSupport incident response investigations and security monitoring activitiesDevelop security automation to improve operational efficiency and reduce riskContribute to security architecture reviews and technology assessmentsWork closely ...

environment rather than bolted on afterwards. You’ll be involved in 3rd line support, system hardening, vulnerability remediation, patching, access controls, monitoring and incident response , alongside infrastructure upgrades and wider technology projects. We’re looking for someone with around 3–5+ years’ experience across infrastructure, security engineering …/IP, DNS, firewalls, VPNs and proxies Terraform, Ansible, Python or Bash Docker and Kubernetes NIST, CIS Benchmarks and/or ISO 27001 Security incident investigation and remediation You don’t need to tick every box. What matters is a strong infrastructure background, credible hands-on security experience ...

management lifecycle for the UK estate, scanning, triage, prioritisation, patching and reporting, working with global colleagues to drive risk down and evidence progress. Security Incident Response: Act as a senior responder for security alerts and incidents, leading investigation, containment and post-incident review alongside the global ...

Monitor and triage security alerts within Splunk SIEM. Investigate security incidents including phishing attacks, credential abuse, malicious process activity, and suspicious network traffic. Support incident response activities through containment and escalation procedures. Maintain detailed security case documentation and investigation notes. Contribute towards operational metrics including MTTD and MTTR … detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with Windows, Linux, authentication systems, and endpoint security logs. Strong communication and stakeholder engagement skills. Desirable Skills ...

Monitor and triage security alerts within Splunk SIEM. Investigate security incidents including phishing attacks, credential abuse, malicious process activity, and suspicious network traffic. Support incident response activities through containment and escalation procedures. Maintain detailed security case documentation and investigation notes. Contribute towards operational metrics including MTTD and MTTR … detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with Windows, Linux, authentication systems, and endpoint security logs. Strong communication and stakeholder engagement skills. Desirable Skills ...

Monitor and triage security alerts within Splunk SIEM. Investigate security incidents including phishing attacks, credential abuse, malicious process activity, and suspicious network traffic. Support incident response activities through containment and escalation procedures. Maintain detailed security case documentation and investigation notes. Contribute towards operational metrics including MTTD and MTTR … detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with Windows, Linux, authentication systems, and endpoint security logs. Strong communication and stakeholder engagement skills. Desirable Skills ...

Monitor and triage security alerts within Splunk SIEM. Investigate security incidents including phishing attacks, credential abuse, malicious process activity, and suspicious network traffic. Support incident response activities through containment and escalation procedures. Maintain detailed security case documentation and investigation notes. Contribute towards operational metrics including MTTD and MTTR … detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with Windows, Linux, authentication systems, and endpoint security logs. Strong communication and stakeholder engagement skills. Desirable Skills ...

endpoint infrastructure Take ownership of complex technical problems through to resolution, coordinating with internal teams and third-party suppliers where required Participate in major incident management, providing technical expertise and supporting rapid service restoration Provide technical input into projects, migrations, upgrades and new technology deployments Identify opportunities to improve … security technologies Cyber Essentials best practices Endpoint protection and device security Email security and threat protection Backup and disaster recovery solutions Ransomware protection and incident response principles Infrastructure & Networking Windows Server administration Active Directory and Group Policy Server virtualisation (Hyper-V, VMware or similar) Firewalls and VPN technologies ...

cloud-first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2 … practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding ...

SASE, SDPs, and micro-segmentation strategies to reduce attack surface and lateral movement risks. Provide architectural leadership for security operations including monitoring, threat detection, incident response, and threat hunting. Drive integration with tools like Microsoft Sentinel, Defender, CrowdStrike Falcon, and Splunk. Manage security governance frameworks, oversee risk assessments ...

Logic Apps or SOAR experience Detection-as-Code and CI/CD pipeline experience PowerShell or Python scripting skills Experience supporting Threat Hunting or Incident Response activities Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have ...

navigate security case approvals and risk management frameworks. Technical Guidance: Provide hands-on direction to engineers on vulnerability remediation, secure coding standards, and incident response preparedness. Deep knowledge of secure networking, encryption standards, IAM, and zero-trust architectures. Hands-on experience with cloud security postures (AWS/Azure ...

navigate security case approvals and risk management frameworks. Technical Guidance: Provide hands-on direction to engineers on vulnerability remediation, secure coding standards, and incident response preparedness. Deep knowledge of secure networking, encryption standards, IAM, and zero-trust architectures. Hands-on experience with cloud security postures (AWS/Azure ...

navigate security case approvals and risk management frameworks. Technical Guidance: Provide hands-on direction to engineers on vulnerability remediation, secure coding standards, and incident response preparedness. Core Technical Skills Deep knowledge of secure networking, encryption standards, IAM, and zero-trust architectures. Hands-on experience with cloud security postures ...

navigate security case approvals and risk management frameworks. Technical Guidance: Provide hands-on direction to engineers on vulnerability remediation, secure coding standards, and incident response preparedness. Core Technical Skills Deep knowledge of secure networking, encryption standards, IAM, and zero-trust architectures. Hands-on experience with cloud security postures ...

navigate security case approvals and risk management frameworks. Technical Guidance: Provide hands-on direction to engineers on vulnerability remediation, secure coding standards, and incident response preparedness. Deep knowledge of secure networking, encryption standards, IAM, and zero-trust architectures. Hands-on experience with cloud security postures (AWS/Azure ...

navigate security case approvals and risk management frameworks. • Technical Guidance: Provide hands-on direction to engineers on vulnerability remediation, secure coding standards, and incident response preparedness. Core Technical Skills • Deep knowledge of secure networking, encryption standards, IAM, and zero-trust architectures. • Hands-on experience with cloud security postures ...

cyber security or security operations. Knowledge of enterprise security tooling such as SOAR, SIEM and EDR.Experience applying AI to security operations, threat detection or incident response. Experience deploying infrastructure-as-code. What we're looking forA collaborative and engaging approach to problem-solving, with a willingness to work ...

into automation, such as automated diagnosis and remediation for common alerts. Plans capacity, performance and resilience, and tests failover and recovery. Takes part in incident response and post-incident reviews, and follows up the actions. Control engineering, team and development Builds the bank's resilience, security, change ...

role in driving reliability, performance, and operational excellence across Ricoh's hybrid cloud and on‐prem environments. You will help shape SRE practices, support incident and problem management, embed automation, and ensure infrastructure operations meet the highest security and compliance standards, including ISO 27001.This is a hands‐on technical … SLOs and managing error budgets for core servicesImplementing standards for availability, latency, performance, capacity, and scalabilityLeading and contributing to root‐cause analysis and major incident reviewsSupporting a blameless post‐mortem culture with clear action trackingDefining and implementing SRE practices, tooling, and engineering standardsDriving infrastructure‐as‐code and automation across ...

code. Build CI/CD pipelines that support frequent, reliable deployments. Establish monitoring, logging, tracing and alerting, with clear service reliability targets. Lead incident response, on-call practices and reviews that turn production issues into lasting improvements. Develop resilience and disaster recovery plans. Implement secrets management, network protection … Experience with Terraform or comparable infrastructure-as-code tools. Knowledge of Docker, Kubernetes and CI/CD tooling. A solid understanding of observability and incident management. Strong cloud security knowledge and an understanding of operating within a regulated environment. An automation-first approach and confidence taking ownership ...

maintain secure, resilient infrastructure and platform services Champion security best practices across infrastructure design, configuration, and operations Support infrastructure hardening, vulnerability management, monitoring, and incident response activities Implement and maintain Infrastructure as Code solutions Collaborate with engineering, architecture, and security teams to improve platform reliability and security posture … working within complex enterprise environments Strong stakeholder engagement and problem-solving skills Desirable Experience Experience working within government or highly regulated environments Exposure to incident management and operational support activities Understanding of compliance-driven infrastructure delivery ...

enforce security and technical standards * Lead Infrastructure as Code (IaC) practices across teams and environments * Drive observability, monitoring, logging and audit controls * Support incident response, patching, compliance reporting and technical debt remediation * Partner with developers and delivery teams to improve engineering quality and security * Document security processes, controls ...

backup and disaster recovery, including annual restore drillsDriving cost and capacity optimisation, and owning the audits that keep the company aligned with its certificationsCoordinating incident response and mentoring developers in DevSecOps practiceWhat You'll BringProven DevOps or SRE experience with a recent focus on AWS cloud engineeringStrong Kubernetes ...