2,401 to 2,425 of 2,444 Incident Response Jobs in the UK

with will take you seriously because you've been in the same code they have.The scope is broad: application security, infrastructure security, detection and response, and the assurance work that keeps our certifications standing. You won't be covering it alone. The security team is seven people and growing … infrastructure and engineering teams: identify the signals worth collecting, write rules that catch real attacks without drowning us in noise, and build the response playbooks behind them.Incident Response -Lead security investigations into the production environment end to end, from first signal to root cause, across incidents and fraud. ...

Support to manage and support critical enterprise AI based applications in a fast-paced production environment. The role requires hands-on expertise in monitoring, incident management, troubleshooting, release support, and ensuring high availability and stability of business-critical platforms. In this role, youll make an impact in the following … analysis (RCA) for recurring issues and drive permanent fixes. Analyze production logs, identify failure patterns, and create actionable dashboards to improve service monitoring and incident response. Coordinate with development, infrastructure, database, network, and business teams for issue resolution. Support application deployments, change requests, weekend releases, and post-release validations. ...

controls aligned to ISO27001, Cyber Essentials Plus and the firm's wider data, AI and innovation strategies. Overseeing security operations, monitoring, detection and response across areas such as SOC, SIEM, XDR, vulnerability management and incident response. Embedding security by design into projects, change and solution architecture, including identity ...

solutions. Develop and implement self‐healing automation for recurring failures. Service Operations & Support (Managed Services) Provide L2/L3 support aligned with ITIL practices (incident, problem, change management). Participate in on‐call rotations and handle critical incident response. Maintain detailed SOPs, runbooks, knowledge‐base articles, and client … debugging, data validation, and optimization; experience with Azure SQL DB or SQL Server; familiarity with data modeling concepts and warehouse performance tuning. Support & Incident Management – Strong troubleshooting and analytical skills for root cause analysis; exposure to ITSM tools such as ServiceNow and Jira. Preferred Qualifications Microsoft Certifications (e.g. ...

safeguard customers and the organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy … mitigating identity related and cyber enabled fraud impacting HMRC services. Working within the FPC, the role blends cyber security, data analytics, and operational fraud response, combining advanced analytical techniques and threat based thinking, to protect customers and HMRC from emerging threats.A Cyber Fraud Senior Analyst is responsible for detecting ...

safeguard customers and the organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy … mitigating identity related and cyber enabled fraud impacting HMRC services. Working within the FPC, the role blends cyber security, data analytics, and operational fraud response, combining advanced analytical techniques and threat based thinking, to protect customers and HMRC from emerging threats.A Cyber Fraud Senior Analyst is responsible for detecting ...

safeguard customers and the organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy … mitigating identity related and cyber enabled fraud impacting HMRC services. Working within the FPC, the role blends cyber security, data analytics, and operational fraud response, combining advanced analytical techniques and threat based thinking, to protect customers and HMRC from emerging threats.A Cyber Fraud Senior Analyst is responsible for detecting ...

safeguard customers and the organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy … mitigating identity related and cyber enabled fraud impacting HMRC services. Working within the FPC, the role blends cyber security, data analytics, and operational fraud response, combining advanced analytical techniques and threat based thinking, to protect customers and HMRC from emerging threats.A Cyber Fraud Senior Analyst is responsible for detecting ...

safeguard customers and the organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy … mitigating identity related and cyber enabled fraud impacting HMRC services. Working within the FPC, the role blends cyber security, data analytics, and operational fraud response, combining advanced analytical techniques and threat based thinking, to protect customers and HMRC from emerging threats.A Cyber Fraud Senior Analyst is responsible for detecting ...

safeguard customers and the organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy … mitigating identity related and cyber enabled fraud impacting HMRC services. Working within the FPC, the role blends cyber security, data analytics, and operational fraud response, combining advanced analytical techniques and threat based thinking, to protect customers and HMRC from emerging threats.A Cyber Fraud Senior Analyst is responsible for detecting ...

safeguard customers and the organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy … mitigating identity related and cyber enabled fraud impacting HMRC services. Working within the FPC, the role blends cyber security, data analytics, and operational fraud response, combining advanced analytical techniques and threat based thinking, to protect customers and HMRC from emerging threats.A Cyber Fraud Senior Analyst is responsible for detecting ...

safeguard customers and the organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy … mitigating identity related and cyber enabled fraud impacting HMRC services. Working within the FPC, the role blends cyber security, data analytics, and operational fraud response, combining advanced analytical techniques and threat based thinking, to protect customers and HMRC from emerging threats.A Cyber Fraud Senior Analyst is responsible for detecting ...

Cortex XDR, Illumio, Sentinel, Purview, Azure Responsibilities Implement and manage security controls, XDR, vulnerability management and PAM. Support threat hunting, security monitoring and incident response. Deliver cyber security projects and implement new security technologies. Support InfoSec compliance, risk management and security frameworks. Identify and respond to cyber threats … Illumio Core/CloudSecure and Microsoft Security. Knowledge of Defender, Azure AD, Purview and Sentinel. Experience with SIEM/SOAR, endpoint security and incident management. Good understanding of IT systems, networking and security best practice. Keywords: Cyber Security Engineer, Cyber Security Consultant, Cyber Security Specialist, XDR, Cortex XDR, Illumio ...

planning and implementing appropriate security controls to ensure that the information within is kept secure.Key functions/outputs:1. Vulnerability Scanning & Reporting2. Endpoint Security3. Incident Management & Tickets4. System Hardening5. Change Work6. Participation in Regular Meetings7. DocumentationMain Objectives:Vulnerability Scanning & ReportingPerform regular vulnerability scans and generate reports utilising the below … Control: ensuring that access controls have been implemented correctly to only allow authorised users to gain access to certain data and systems.Incident Management & Tickets:Incident Identification: help to recognise and confirm potential incidents through alerts, logs and user reports. This includes distinguishing between true threats and false positives.Incident Response ...

guardrails for infrastructure, including Terraform modules, pipeline patterns, and observability practices. Owning end-to-end observability (logging, metrics, tracing, alerting, on-call) and driving incident response. Preparing the entire cloud estate for rigorous SOC 2 and ISO 27001 audits, and managing cloud cost at scale. What You Bring 7+ … technical direction. Experience designing Terraform modules and CI/CD pipelines that other engineers build on. End-to-end ownership of observability, including incident practice. Comfort with cloud networking (VPCs, private networking, DNS, load balancers, VPNs, firewalls) and provisioning production databases. Strong Python or Bash for automation. #J ...

centric risks, including supply chain attacks using tools for SBOM tracking, and targeting critical unpatched legacy infrastructure.Design, deploy, and operationalize AI Detection and Response (AIDR) solutions to protect proprietary models and systems from novel threats like prompt injection, data poisoning, and model inversion/extraction.Automate critical security workflows using … Agentic/SIEM integration to achieve high operational velocity and enable rapid response to millisecond attack speeds generated by autonomous adversary AI.Execute regular offensive security operations, including AI Red Teaming and penetration testing of generative and agentic systems.Lead the defense against Shadow AI by developing and deploying AI access ...

centric risks, including supply chain attacks using tools for SBOM tracking, and targeting critical unpatched legacy infrastructure. Design, deploy, and operationalize AI Detection and Response (AIDR) solutions to protect proprietary models and systems from novel threats like prompt injection, data poisoning, and model inversion/extraction. Automate critical security … workflows using Agentic/SIEM integration to achieve high operational velocity and enable rapid response to millisecond attack speeds generated by autonomous adversary AI.Execute regular offensive security operations, including AI Red Teaming and penetration testing of generative and agentic systems. Lead the defense against Shadow AI by developing ...

reduce operational overhead. Improve observability, reliability, and operational efficiency across thousands of GPUs. Develop systems for capacity planning, scheduling, fleet health monitoring, and incident response. Identify infrastructure bottlenecks and implement solutions that improve utilization, scalability, and performance. Partner closely with research, platform, networking, and systems teams to continuously improve … rather than relying on manual processes. Have experience with Kubernetes, Linux systems, container orchestration, or distributed infrastructure. Understand infrastructure observability, monitoring, capacity planning, and incident management. Enjoy identifying cross-team pain points and building reusable platforms that improve developer productivity. Are comfortable working across software engineering and systems operations ...

cases, architectures, and deployments to ensure alignment with cyber security policies, regulatory requirements, and internal governance expectations.Build and maintain monitoring, detection, and response capabilities for AI-related threats and misuse scenarios.Identify opportunities to use AI to enhance cyber security operations, such as alert triage, threat analysis, playbook automation, knowledge … related security role.Strong understanding of core security domains such as identity and access management, cloud security, application security, data protection, logging and monitoring, and incident response.Knowledge of AI/ML and LLM concepts, including model deployment patterns, APIs, embeddings, vector stores, prompt handling, and common AI security risks.Experience securing ...

cases, architectures, and deployments to ensure alignment with cyber security policies, regulatory requirements, and internal governance expectations. Build and maintain monitoring, detection, and response capabilities for AI-related threats and misuse scenarios. Identify opportunities to use AI to enhance cyber security operations, such as alert triage, threat analysis, playbook … security role. Strong understanding of core security domains such as identity and access management, cloud security, application security, data protection, logging and monitoring, and incident response. Knowledge of AI/ML and LLM concepts, including model deployment patterns, APIs, embeddings, vector stores, prompt handling, and common AI security risks. ...

Ensure the reliability, availability, and scalability of the systems, platforms, and technology through the application of software engineering techniques, automation, and best practices in incident response. Accountabilities Build Engineering: Development, delivery, and maintenance of high-quality infrastructure solutions to fulfil business requirements ensuring measurable reliability, performance, availability, and ease … use. Including the identification of the appropriate technologies and solutions to meet business, optimisation, and resourcing requirements. Incident Management: Monitoring of IT infrastructure and system performance to measure, identify, address, and resolve any potential issues, vulnerabilities, or outages. Use of data to drive down mean time to resolution. Automation ...

Network Automation Developer to join a large enterprise engineering environment, supporting the development and maintenance of automation solutions that improve network efficiency, visibility and incident response. This is an excellent opportunity for a technically minded engineer with Python and networking experience who wants to develop their expertise within … automation and infrastructure issues. Follow established engineering standards, designs and operational processes. Work alongside senior automation engineers on defined development tasks and enhancements. Support incident and problem management activities. Contribute to automation initiatives involving CI/CD and Infrastructure as Code . Maintain code and documentation using version control ...

Network Automation Developer to join a large enterprise engineering environment, supporting the development and maintenance of automation solutions that improve network efficiency, visibility and incident response. This is an excellent opportunity for a technically minded engineer with Python and networking experience who wants to develop their expertise within … automation and infrastructure issues. Follow established engineering standards, designs and operational processes. Work alongside senior automation engineers on defined development tasks and enhancements. Support incident and problem management activities. Contribute to automation initiatives involving CI/CD and Infrastructure as Code . Maintain code and documentation using version control ...

customers understand their security posture, alerts, incidents, and recommendations in clear business terms, while using strong technical knowledge across SOC operations, monitoring, detection, and incident response. The position is ideally hybrid from Hammersmith, with UK-remote options also considered and regular travel to customer sites, particularly across London … Must Have: Senior experience within a SOC, Cyber Security, Security Operations or Technical Account Management environment. Strong understanding of SOC operations, monitoring, alerting and incident response. Exceptional written and verbal English communication skills. Ability to explain complex cybersecurity concepts to non-technical stakeholders. Strong customer-facing and relationship-management ...

About the company the company is a global consulting firm that partners with leaders to drive change and create value. With deep industry expertise, and enabled by advanced technology, the firm helps clients to deliver ...