301 to 325 of 1,874 Incident Response Jobs in the UK

configuration, database schema creation, and operational workflows across cloud and on-prem platforms.* Support production systems with a focus on high availability, disaster recovery, incident response, vulnerability management, patching, and change management.* Containerize applications and support deployments using container orchestration platforms.* Partner with development teams to understand application … engineering tools to accelerate development, automation, troubleshooting, documentation, and operational workflows.* Identify, design, and help implement AI-enabled operational capabilities for infrastructure automation, observability, incident response, and platform engineering.* Contribute to the strategy for safe, practical, and secure adoption of AI across infrastructure and DevOps practices.* Lead ...

customer-facing network environments. This is an excellent opportunity for a cybersecurity professional who enjoys working across network security, threat management, vulnerability assessment and incident response within a technically challenging environment. The Role As a Security Engineer, you'll play a key role in maintaining, improving and protecting … development of security policies, procedures and standards Providing cybersecurity guidance to engineering and IT teams Maintaining SIEM, IDS and IPS technologies Contributing to incident response and security management processes Producing technical documentation and security reports Supporting continuous improvement of network and information security controls About ...

security infrastructure, responding to threats, and ensuring compliance across systems. You’ll work with various cyber security solutions while driving security best practices and incident response. If you have experience in cybersecurity tools, governance, and access management—and want to use your skills to support a mission that changes … critical role in protecting our digital infrastructure. You’ll lead the implementation and management of SIEM systems, Fortinet security tools, and endpoint detection & response (EDR) while conducting vulnerability assessments and penetration testing to stay ahead of cyber threats. You’ll enhance identity and access management (IAM) by maintaining Active ...

practical use of AI‐assisted features within security tools to improve efficiency and consistency. Maintain andenhanceourtools and platforms to continuously improve ourintelligence,detection and response capability. Perform in-depth investigation and analysis of security alertsto identify and promptly respond to securityevents. Collaboratewith key stakeholders during investigations to gather further … information and coordinate response actions. Derive value fromrelevant threat intelligence to drive proactive action. Influencethe strategic direction of our team by presenting insight into the security events, alerts and incidents we handle. Maintain a broad understanding of IT/online environments and key company assets to enhance decision making ...

improve detection capabilities and contribute to the ongoing maturity of the SOC. You will also: Monitor and investigate security events across enterprise environments Perform incident response activities and support remediation efforts Analyse network traffic, endpoint activity and system logs Improve detection rules using MITRE ATT and CK techniques … desirable Python, PowerShell or other scripting experience would be advantageous Key Skills SOC Analyst, Senior SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk, SIEM, Incident Response, Threat Detection, Cyber Security, MITRE ATT and CK, Blue Team, NSD #J-18808-Ljbffr ...

/CD pipelines Operational Delivery & Strategic Projects: Lead network delivery for strategic initiatives (e.g., data centre migrations, office relocations, cloud landing zones) Manage incident response for critical infrastructure events; lead post-mortems and remediation Collaborate with infrastructure teams to build monitoring, alerting, and observability stacks that surface security … configuration management (Ansible, etc.) Proficiency with network monitoring and observability tools (e.g., Splunk, Datadog, New Relic, Elasticsearch, Prometheus, RSA NetWitness, Tenable) Strong incident response and troubleshooting background; comfort operating in high-pressure environments Experience mentoring junior/mid-level engineers and building security culture within technical teams Desirable ...

/CD pipelines Operational Delivery & Strategic Projects: Lead network delivery for strategic initiatives (e.g., data centre migrations, office relocations, cloud landing zones) Manage incident response for critical infrastructure events; lead post-mortems and remediation Collaborate with infrastructure teams to build monitoring, alerting, and observability stacks that surface security … configuration management (Ansible, etc.) Proficiency with network monitoring and observability tools (e.g., Splunk, Datadog, New Relic, Elasticsearch, Prometheus, RSA NetWitness, Tenable) Strong incident response and troubleshooting background; comfort operating in high-pressure environments Experience mentoring junior/mid-level engineers and building security culture within technical teams Desirable ...

improve detection capabilities and contribute to the ongoing maturity of the SOC. You will also: Monitor and investigate security events across enterprise environments Perform incident response activities and support remediation efforts Analyse network traffic, endpoint activity and system logs Improve detection rules using MITRE ATT and CK techniques … application to our client in conjunction with this vacancy only. Key Skills SOC Analyst, Senior SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk, SIEM, Incident Response, Threat Detection, Cyber Security, MITRE ATT and CK, Blue Team ...

ingestion of our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture. The role is hybrid (3 days in office) & based in Birmingham What you’ll be doing Data Ingestion … performance of the SIEM infrastructure. Security Engineering Contribute to security engineering projects, transitions, and transformations. Work closely with security operations and associated security incident response systems Stay informed about emerging threats and security best practices. Essential Skills/Experience Proven experience in SIEM Detection Engineering. Experience using cyber ...

other compliance requirements. Develop and improve security policies, procedures and governance frameworks. Establish and maintain risk registers and support security governance forums. Support incident response planning, tabletop exercises and crisis management activities. Provide advice across areas including vulnerability management, identity and access management, cloud security, security operations … beneficial: ISO 27001/ISO 27005 NIST CSF CIS Controls SOC 2 NIS2/DORA Risk management and governance Security operations and monitoring Incident response Vulnerability management Cloud security, particularly Microsoft Azure and Microsoft 365 This is a UK-based role and applicants must have the full ...

deployment, testing, go-live and ongoing operational support. Work with technical and non-technical stakeholders to deliver secure and practical outcomes. Support security monitoring, incident response and continuous improvement initiatives. Contribute to security architecture reviews and technology roadmap discussions. Ensure security controls remain effective across both cloud … Microsoft Purview and Data Loss Prevention (DLP) implementation and enhancement. Ongoing development of Microsoft 365 and Azure security controls. Improvements to monitoring, detection and response capabilities across the security estate. What We're Looking For We're interested in speaking with candidates who can demonstrate experience of: Assessing technical ...

deployment, testing, go-live and ongoing operational support. Work with technical and non-technical stakeholders to deliver secure and practical outcomes. Support security monitoring, incident response and continuous improvement initiatives. Contribute to security architecture reviews and technology roadmap discussions. Ensure security controls remain effective across both cloud … Microsoft Purview and Data Loss Prevention (DLP) implementation and enhancement. Ongoing development of Microsoft 365 and Azure security controls. Improvements to monitoring, detection and response capabilities across the security estate. What We're Looking For We're interested in speaking with candidates who can demonstrate experience of: Assessing technical ...

# Major Incident Manager LeadManchesterApply for this job* Permanent* Experienced Professionals* Cloud Infrastructure Management* ID 493235-en\\_GB## **About the job you’re considering**An exciting opportunity to join Capgemini as a Major Incident Manager Lead, supporting a diverse portfolio of high-profile clients.In this role, you will … lead and oversee the end-to-end major incident management process, ensuring swift resolution and minimal business impact. You will be a confident decision-maker and analytical problem solver, thriving in high-pressure environments. As the primary point of contact during major incidents, you will coordinate cross-functional teams ...

Morgan in London is looking for a Security Operations Senior Associate to strengthen threat analysis and incident response across our cybersecurity program. You will detect, assess, and respond to threats, coordinating with cross-functional teams to improve security controls and awareness. The role requires hands-on experience with ...

operation, and continuous improvement of a critical Security Operations Centre (SOC) supporting MOD programme. You will be hands on responsible for Vulnerability Management, incident management, and SOC services meet agreed quality and assurance standards within a highly regulated environment. Key Responsibilities Act as the escalation point for all security … incidents Conduct Vulnerability Management and incident response activities Prepare report incidents and SOC performance metrics to SOC Leadership Work hands on with SIEM detection tooling and prepare reporting used for the use-case development Contribute to reporting and configuration changes, enhancements, and operational alignment Ensure incident workflows ...

Consultant to join us in London. As an Associate Consultant you will provide technical expertise and consultative solutions in the field of Digital Forensics, Incident Response, Cyber Security and eDiscovery for our clients. Our clients include Law Firms, Fortune 500 multi-nationals, and Government/Law Enforcement. … regional and international Discovery & Data Insights teams (DFIR/Legal Technologies/Data Analytics) as well as working closely with our Cyber Response and Crisis Management divisions as well as our Investigations teams. As an Associate Consultant you will play a crucial role in supporting our team of experienced ...

Amazon EU SARL (UK Branch) is seeking technical Security Engineers for AWS Security Incident Response to learn rapidly and work in teams to keep customers secure. You will lead security response, explain concepts to non-technical audiences, and operate with AWS technologies at scale. Responsibilities include threat … triage, incident handling, and collaboration with partner teams, with on-call duties and commitment to continual learning and improvement of security controls. #J-18808-Ljbffr ...

capacity, serving as the senior escalation point for complex incidents and advanced investigations. You will drive detection engineering, threat hunting, automation and incident response capabilities across global operations. You will lead major incident responses, design robust detection models, and mentor junior SOC staff, contributing to the maturity ...

when they occur, quickly recover service. Partner with development teams to improve system reliability, observability, and release velocity. Participate in on-call rotations, incident response, postmortems, and root cause analysis and resolution. Be a vocal advocate of strong/sound engineering practices that allow us to build, deploy … platforms: Azure, AWS, or GCP.* Knowledge on Docker and Kubernetes.* Observability tools like Datadog, Dynatrace or similar.* Implement and maintain CI/CD pipelines.* Incident response and running blameless post-mortems.* Proficient in Git workflows.## ## ## Preferred qualifications * Minimum 8-10 years in the industry* Experience ...

Data & Cyber team advises insurers and corporates on breach response, policy interpretation and multi-insurer claims, combining incident response with regulatory engagement. Based in Bristol, the Associate/Senior Associate role supports partners, supervises juniors, and handles complex cyber coverage matters, including ransomware scenarios, data privacy issues ...

risks in runtime and cloud environments, supporting remediation Support the development and operation of runtime security tooling for production risk visibility Contribute to security incident response activities, including triage and investigation Develop and maintain incident response processes, runbooks, and detection capabilities Work with risk, governance ...

risks in runtime and cloud environments, supporting remediation Support the development and operation of runtime security tooling for production risk visibility Contribute to security incident response activities, including triage and investigation Develop and maintain incident response processes, runbooks, and detection capabilities Work with risk, governance ...

core priority of this role. The successful candidate will take a leading part in strengthening and evolving the firm's security posture in response to an increasingly sophisticated threat landscape, including emerging risks associated with AI. This is a technically demanding role that combines proactive security ownership with infrastructure … office‐based and requires five days per week on‐site presence. Key Responsibilities Lead the firm's security operations function, owning threat detection, incident response, and vulnerability management end‐to‐end Monitor, triage, and respond to security events across the environment, including log analysis, anomaly detection, and threat ...

Entasis Partners is partnered with a leading organisation to appoint two Senior CSIRT Analysts into a technically advanced security team. You will work across incident response, threat hunting, detection engineering and security operations to continually improve detection and response capabilities. You'll engage in real security problem ...

complex security concepts to technical and non-technical audiences Advising on security architectures, controls and technologies Developing cyber security strategies and implementation roadmaps Supporting incident response and business continuity planning Applying frameworks including NIST, ISO 27001, CIS and CAF Providing specialist advice across complex Defence and Government environments … Security environments Knowledge of security frameworks including NIST, ISO 27001, CIS or CAF Experience within areas such as security architecture, cyber risk, vulnerability management, incident response, security monitoring or threat intelligence Strong stakeholder management and client-facing communication skills Understanding of network security, encryption, authentication and access controls ...