251 to 275 of 1,008 Incident Response Jobs in the UK

working. Experience with leveraging AI for AppSec and CloudSec. AWS Certified Security – Speciality or equivalent practical AWS security experience. Terraform or CloudFormation expertise. Incident‐management or incident‐response experience. Experience with Splunk or similar logging/SIEM platforms. Experience with security metrics, dashboards or reporting that helped ...

operations, improve cyber resilience and influence security awareness across a large and complex organisation. If you enjoy combining technical security expertise with threat intelligence, incident response and user engagement, this contract offers the opportunity to make a visible impact from day one. What's on Offer? £413.40 … Opportunity to work alongside experienced cyber security professionals within a mature security function. Broad, varied role covering Security Operations, Threat Intelligence, Security Awareness and Incident Response. A high-profile enterprise environment that will strengthen your CV. Immediate start with the potential for contract extension. The Role Working closely with ...

summary Are you passionate about patient safety, governance and using data to drive meaningful improvements in healthcare? Join Elysium Healthcare as an Incident Reporting Administrator and play a key role in supporting and improving our incident management and patient safety reporting systems. In this rewarding role, you will … responsible for supporting the development, maintenance and continuous improvement of Elysium's Incident Management System (IMS), ensuring it enables the safe, effective and compliant management of patient safety events. Working closely with clinical teams, governance leads, IT colleagues and external stakeholders, you will help ensure the system aligns with ...

strategy and operating model (build vs. buy vs. MSSP); maximize value from SIEM, SOAR, IAM, PAM, EDR, DLP, DSPM, and CTI platforms. Security Operations & Incident Response Accountable for SOC performance (24×7 detection, response, threat hunting), DFIR, purple‐team/assurance, ransomware preparedness, and crisis playbooks. Maintain … executive incident communications, regulator notifications, and post‐incident improvements. Act as escalation point for any security related service failures or major incidents. Threat and Vulnerability Management Support the TVM team in continuously reducing vulnerability levels in the organisation. Recommend procedural improvements and reporting to drive constant improvement. Drive ...

Senior Cyber Incident Manager at Tesco, you will lead responses to high-severity cyber incidents, ensuring swift action and minimal disruption. Collaborating across teams, you’ll enhance incident management practices and drive strategic initiatives to maintain Tesco's leadership in cyber defense. Your expertise in incident response ...

security tooling end to end (EDR/XDR, SIEM, identity, vulnerability management, email security, DLP), including the deployments already in flight. Own security incident and breach response: deciding severity, directing containment, regulatory notification (ICO, UKGC) and post-incident review. Production incidents belong to Engineering’s on-call … team. You own the security path and the call on when an incident is, or might become, a security event. Direct security across a cloud-native AWS estate: platform, payment flows, APIs, player data. 4. Own governance, risk and compliance Own the GRC programme: risk register, policies, control framework ...

with Helm and Kustomize usage Database DevOps: Liquibase, Flyway (incl. Redgate Flyway), Bytebase, Atlas (Ariga), Sqitch, SchemaHero, Redgate SQL Change Automation, DBmaestro Site reliability & incident response (incl. AI-assisted): incident management and postmortems (PagerDuty, Opsgenie, incident.io, Rootly, FireHydrant, Blameless); AIOps/AI SRE (Resolve.ai, Cleric, Traversal, Neubird ...

testing capabilities. The successful candidate will play a critical role in maintaining operational readiness across the organisation by coordinating crisis management activities, supporting major incident response efforts, managing scenario testing programmes, and driving remediation and continuous improvement initiatives. The role will work closely with business, technology, cyber security … operation of the crisis management framework and act as a key coordinator during significant disruption events, helping ensure effective response, communication, governance and recovery activities across the enterprise. What you'll bring: Proven experience within operational resilience, crisis management, business continuity, incident management, operational risk or a related ...

performing security team. About the Role As the SOC Manager, you will be responsible for leading the Security Operations Centre, ensuring effective security monitoring, incident response and threat intelligence capabilities while shaping the future direction of the SOC. Working closely with internal stakeholders, external vendors and managed security … experience with the ability to develop and evolve SOC capabilities. Demonstrated experience leading and managing high-performing cyber security teams. Strong understanding of security incident management and response processes. Experience delivering and managing effective security monitoring capabilities. Proven experience in threat intelligence, threat assessment and cyber risk management. ...

Security Operations capability. This is more than a leadership role. You'll remain hands-on in the fight against cyber threats, leading investigations, driving incident response, mentoring analysts, and strengthening our detection and response capabilities across multiple complex client environments. Whether you're already leading … operational discussions with stakeholders, partners and custom ers. What You'll Bring: Proven experience working within a Security Operations Centre (SOC). Strong incident detection, investigation and response experience. Deep understanding of network and host-based attack techniques. Hands-on experience with SIEM technologies such as Microsoft Sentinel ...

Analyse resource utilization, optimise for performance and cost, and implement automated scaling and rightsizing. Produce dashboards and reports for operational and business stakeholders. Lead incident response for cloud infrastructure issues, including root cause analysis and post-mortem documentation Develop and test disaster recovery and business continuity plans ...

/CD for multiple ecosystems. Drive reliability, scalability, and observability for the Libraries platform: define SLOs, build monitoring and alerting, and lead incident response and post‐incident improvements. Solve complex dependency and build issues in production environments, from toolchain and compiler problems to CI/CD flakiness ...

improve our ISMS as the backbone for our security controls and initiatives. Drive ongoing improvement of our security processes, tooling, and standards. Lead security incident response and post-incident reviews, turning lessons into stronger defences. Partner with stakeholders across the business to plan, prioritise, and resource security … AI. Deep knowledge of security frameworks and security best practice (ISO 27001, NIST, OWASP, CIS). Strong command of security risk management, governance, and incident response. Cloud security expertise (Azure preferred), network security, and identity and access management (IAM), with fluency across modern tooling e.g. SIEM ...

planning, scaling strategies, and resource efficiency across large GPU‐backed clusters. Partner with ML, platform, and software teams to establish clear production readiness standards. Incident Response & On-Call Participate in a 24/7 on‐call rotation as first‐line response for cloud and cluster‐related incidents. … Lead incident triage, escalation, communications, and root cause analysis. Translate post‐incident learning into durable architectural or automation improvements. Continuously reduce alert noise and recurring operational burden. Observability & Operational Excellence Design and operate monitoring, logging, tracing, and alerting systems that enable rapid detection and recovery. Build dashboards that ...

This is a unique hybrid position that combines operational leadership with technical awareness . You'll take ownership of the live operational picture, coordinating incident response across cyber, network, infrastructure and physical security teams while ensuring informed, timely decision-making. This role is ideal for someone who thrives … fast-paced control room environment and can confidently lead operational response without needing to be a deep technical specialist. Key Responsibilities Maintain a single operational view across cyber, network, service and physical security domains. Monitor live operational environments and assess alerts and incidents in real time. Perform initial triage ...

Azure DevOps Pipelines : Design, build, and maintain secure, high‐speed CI/CD pipelines within Azure DevOps to automate code promotion and MLOps workflows. Incident Management : Lead the response, containment, and resolution of critical platform outages, serving as a primary escalation point for high‐priority cloud and infrastructure … fixes to prevent recurrence. Third‐Party Operational Coordination : Act as the direct engineering point of contact for external support teams, actively collaborating on active incident tickets, complex escalations, and day‐to‐day infrastructure maintenance. Cross‐Functional Communication : Document complex technical architectures clearly and articulate system requirements, post‐mortems ...

solvers (e.g. Gurobi) and ensure model performance, correctness, explainability, and maintainability. Establish strong engineering practices: code review, automated testing, CI/CD, release management, incident response, and post‐incident learning. Build observability into optimisation services (KPIs, logs, traces) and manage performance tuning (latency, throughput, cost) across environments. …/ELT, caching strategies, data quality checks, reproducible inputs/outputs. DevOps: CI/CD, infrastructure as code, containerisation (e.g. Docker), monitoring/alerting, incident management. Quality: unit/integration tests, performance tests, model validation frameworks, feature flags. Benefits Competitive base salary. 25 days holiday, pension scheme, life assurance ...

limited to) Azure infrastructure failover, M365 backup/restore, network infrastructure failover. Act as one of the primary points of contact for incident response, and Major Incident Management (MiM). Participate in monthly continuous improvement meetings and collaborate with stakeholders to define recovery objectives, including Recovery Time ...

scalability and efficiency of SOC services. Working across SIEM, endpoint, and orchestration platforms (primarily Palo Alto XSOAR), you will reduce analyst workload, accelerate incident response, and enhance decision-making across customer environments. Key Responsibilities Automation Development – Design, build, and maintain scalable automation workflows across detection and response platforms. Integration & Orchestration – Deliver cross-platform automation enabling fast, reliable response actions. Lifecycle Management – Develop, deploy, and continuously optimise automation for performance, resilience, and coverage. Collaboration & Requirements Gathering – Work with SOC and engineering teams to identify automation opportunities. Documentation – Produce clear documentation to support delivery, troubleshooting, and continuous ...

KPIs, across incidents, service requests and change, reporting honestly on where things stand and what you are doing about it Chair or oversee incident, problem and change management processes, including major incident response and post‐incident reviews Work with the functional consultants to prioritise and sequence … live, business‐critical enterprise system, ideally Oracle Cloud (Fusion) or a comparable ERP/HCM/EPM platform Solid grounding in ITIL‐based incident, problem and change management, and the judgement to know when to escalate and when to let a process run Experience managing SLAs, service reporting ...

This is a unique hybrid position that combines operational leadership with technical awareness . You'll take ownership of the live operational picture, coordinating incident response across cyber, network, infrastructure and physical security teams while ensuring informed, timely decision-making. This role is ideal for someone who thrives … fast-paced control room environment and can confidently lead operational response without needing to be a deep technical specialist. Key Responsibilities Maintain a single operational view across cyber, network, service and physical security domains. Monitor live operational environments and assess alerts and incidents in real time. Perform initial triage ...

This is a unique hybrid position that combines operational leadership with technical awareness . You'll take ownership of the live operational picture, coordinating incident response across cyber, network, infrastructure and physical security teams while ensuring informed, timely decision-making. This role is ideal for someone who thrives … fast-paced control room environment and can confidently lead operational response without needing to be a deep technical specialist. Key Responsibilities Maintain a single operational view across cyber, network, service and physical security domains. Monitor live operational environments and assess alerts and incidents in real time. Perform initial triage ...

helping keep everything running smoothly behind the scenes while we deliver for our customers. You’ll get hands-on with AWS, working across monitoring, incident response, automation, and CI/CD — all the good stuff that keeps modern platforms fast, reliable, and scalable. This isn’t a role … support across multiple applications. Monitor system health, including application environments, scheduled jobs, integrations, and message queues, and contribute to logging and alerting standards. Support incident management activities, including triage, troubleshooting, escalation, root cause analysis (RCA), and continuous improvement based on incident trends. Assist with routine maintenance tasks such ...

vulnerability scanners, and data encryption solutions. Manage vulnerability management programs, including regular scanning, penetration testing, and remediation of identified weaknesses. Lead and manage security incident response, including detection, analysis, containment, eradication, recovery, and post-incident review. Develop and maintain robust disaster recovery and business continuity plans related … NIST, Cyber Essentials), and best practices. Hands-on experience with security technologies such as firewalls, SIEM, IDS/IPS, vulnerability scanners, endpoint detection and response (EDR), and identity management solutions. Experience with cloud security (e.g., Azure Security). Proven experience in managing security incidents and conducting incident response. ...

programme supporting over 6,000 users. This role combines ownership of security awareness initiatives and KnowBe4 administration with hands-on cyber security operations, including incident investigation, threat analysis, vulnerability management, and Microsoft Defender-based security monitoring. Client Details This company operates within the property industry. Description Administer and manage … management information Develop engaging cyber awareness content across multiple communication channels Deliver security awareness training to technical and non-technical audiences Support security incident investigations and response activities Collaborate with internal and external SOC teams Investigate security alerts and indicators of compromise (IOCs) Conduct threat intelligence research ...