326 to 350 of 1,009 Incident Response Jobs in the UK

manage IaC using tools like AWS CloudFormation, and Azure Resource Manager (ARM) Automate environment provisioning for development, testing, and production. Monitoring, Logging, and Incident Management Set up advanced monitoring and alerting solutions using tools like AWS CloudWatch, Azure Monitor Define strategies for incident response and conduct root ...

Create and manage IaC using tools like AWS CloudFormation, and Azure Resource Manager (ARM)* Automate environment provisioning for development, testing, and production.Monitoring, Logging, and Incident Management* Set up advanced monitoring and alerting solutions using tools like AWS CloudWatch, Azure Monitor* Define strategies for incident response and conduct ...

baselines Support vulnerability management - scanning, patching coordination, remediation tracking Build and maintain detection rules, alerts, and automation (SOAR) in partnership with the SOC Support incident response - containment, investigation, and remediation of confirmed threats Automate security processes via scripting (Python, PowerShell, Terraform/IaC) Work with architects to implement ...

maintain security tooling across cloud environments Work with engineering teams to improve security, reliability, and operational resilience Implement monitoring, logging, and alerting solutions Support incident response, troubleshooting, and continuous improvement activities Contribute to automation initiatives and security-by-design practices Requirements Experience working with AWS cloud environments Hands ...

maintain security tooling across cloud environments Work with engineering teams to improve security, reliability, and operational resilience Implement monitoring, logging, and alerting solutions Support incident response, troubleshooting, and continuous improvement activities Contribute to automation initiatives and security-by-design practices Requirements Experience working with AWS cloud environments Hands ...

maintain security tooling across cloud environments Work with engineering teams to improve security, reliability, and operational resilience Implement monitoring, logging, and alerting solutions Support incident response, troubleshooting, and continuous improvement activities Contribute to automation initiatives and security-by-design practices Requirements Experience working with AWS cloud environments Hands ...

practice implementation Work closely with development teams to identify and remediate security vulnerabilities Develop monitoring, logging and compliance controls across cloud platforms Support security incident response and vulnerability remediation activities Promote DevSecOps best practices and contribute to a strong security culture Skills & Experience Commercial experience in a DevSecOps ...

practice implementation Work closely with development teams to identify and remediate security vulnerabilities Develop monitoring, logging and compliance controls across cloud platforms Support security incident response and vulnerability remediation activities Promote DevSecOps best practices and contribute to a strong security culture Skills & Experience Commercial experience in a DevSecOps ...

practice implementation Work closely with development teams to identify and remediate security vulnerabilities Develop monitoring, logging and compliance controls across cloud platforms Support security incident response and vulnerability remediation activities Promote DevSecOps best practices and contribute to a strong security culture Skills & Experience Commercial experience in a DevSecOps ...

skills. Experience working within large-scale enterprise, government, or regulated environments. Desirable Experience Experience supporting Security Operations Centre (SOC) functions. Exposure to threat hunting, incident response, or cyber investigations. Knowledge of cloud security principles and modern enterprise architectures. Experience working with security monitoring and intelligence platforms. Familiarity with ...

design engineering and ensure compliance with CLIENT security standards. Enable and govern Infrastructure as Code (IaC) practices across teams and environments. Contribute to incident response, patching cycles and compliance reporting, ensuring lessons learned are captured and actions tracked. Document security processes, controls and operational runbooks in Confluence. ...

many of these technologies/areas as possible is highly desirable: Security Frameworks (NIST, CIS etc.) PAM Tools and Technologies AWS Security Incident Response Endpoint Security (including mobile devices, Windows and Linux) Job Benefits We have a high-performance culture which is balanced evenly with world-class well ...

including IAM, SIEM, and data classification Anticipate emerging threats, leverage AI/ML for predictive security, and set the technology vision Lead the Security Incident Response Programme Governance, risk, and compliance (GRC) Define and own the GRC programme, including the ISMS, policy framework, risk registers, and audit readiness ...

into CI/CD pipelines and DevSecOps practices.* Proven capability in risk assessments, threat modeling, and control gap analysis.* Experience collaborating with SOC and Incident Response teams during security events.* Working knowledge of security frameworks and regulations (NIST, ISO 27001, CIS, GDPR, etc.).* Ability to translate technical ...

Sentinel (architecture, deployment, analytics rules, workbooks, playbooks); Microsoft Defender for Endpoint and Defender for Cloud; SIEM/SOC operations; Azure Logic Apps; vulnerability remediation; incident response. Threat Hunting & Detection: Hands-on experience using KQL, Microsoft Defender XDR, and threat intelligence sources to hunt threats and support investigations. Cyber Defence ...

Sentinel (architecture, deployment, analytics rules, workbooks, playbooks); Microsoft Defender for Endpoint and Defender for Cloud; SIEM/SOC operations; Azure Logic Apps; vulnerability remediation; incident response. Threat Hunting & Detection: Hands-on experience using KQL, Microsoft Defender XDR, and threat intelligence sources to hunt threats and support investigations. Cyber Defence ...

Kubernetes-based environments. You will be at the intersection of security and engineering, developing scalable tooling, automating security controls, and enabling robust detection and response capabilities across our cloud infrastructure. In this role, you will require deep technical expertise in cloud environments, Kubernetes security, and platform automation. You will … work closely with Incident Response Engineers and platform teams to ensure that security is seamlessly integrated into our infrastructure and operational workflows. Your role will require participation in a rotating on-call schedule outside of core business hours and over the weekend to ensure security incidents ...

shape and drive how the firm builds and operates reliable, observable, secure, and cost‐efficient systems on AWS. Working closely with development, platform, and incident management teams, you will define reliability in measurable terms and build the tooling and processes to achieve it, improving platform speed, stability, and scalability. … chaos engineering experiments to strengthen resilience and recovery. Automate operational processes to reduce manual intervention and toil across the stack. Support major incident response, root‐cause analysis, and continual improvement actions. Collaborate cross‐functionally to raise standards for stability, security, performance, and compliance. Required skills & experience 3+ years ...

through to a fix. You'll act as the technical authority for the operational team: taking ownership of complex incident resolution and root cause analysis, leading platform engineering and hardware lifecycle work, and mentoring Infrastructure Engineers as they develop their own skills. You're expected to be comfortable making … high-stakes calls under pressure during major incidents, and to drive resolution when nobody else can. Day to day, that means leading the technical response to P1 and P2 major incidents, managing Dell VxRail and VMware VCF platform lifecycle operations, overseeing Veeam backup architecture and Azure DR strategy ...

Relationships: CTTO - Direct line manager. Governance, infrastructure risk, and FinOps accountability. CISO (Head of Security) - Close working relationship. Security operations implementation, IAM policy, and incident escalation. Director of Platform Engineering - Coordinates on DevSecOps integration and CI/CD infrastructure requirements. • Head of Infrastructure & Cloud - Direct report. Hosting strategy, cloud … internal IT operations across a distributed estate - multiple sites or subsidiaries Commercial awareness: has owned cloud cost management and FinOps outcomes with measurable results Incident management and on-call leadership - has run major incident response at group level Strong vendor management: MSP relationships, colocation contracts, cloud provider ...

role in helping our customers achieve greater visibility, performance, and reliability across their IT estates—contributing to their operational success through proactive insight and incident prevention. What you'll do Design, implement, and manage observability solutions using industry-leading tools such as Dynatrace (primary), Grafana, and Splunk Collect … ServiceNow) and CI/CD pipelines to enable proactive alerting and resolution workflows Act as a Monitoring & Observability SME within customer delivery teams Support incident response activities and postmortems by identifying patterns, root causes, and optimisation opportunities Work collaboratively with cross-functional teams to define and implement best ...

risks, influencing product strategy, and serving as the subject matter expert for the SecOps and Vulnerability Management strategy as well as embedding detection and response capabilities on a modern technology stack. You will collaborate globally, supporting audit, regulatory, and risk initiatives, with a focus on cloud computing and emerging … management platform that automatically prioritizes infrastructure and application flaws utilizing real-world exploit intelligence and asset criticality. Build and optimize SOAR playbooks to automate incident response workflows, accelerate threat containment, and streamline vulnerability ticketing. Provide senior technical escalation support during critical security incidents and drive post-incident ...

while contributing to our modern infrastructure strategy. What youll be doing As an Infrastructure Engineer, you will: Participate in a 24/7 major-incident on-call rota Develop, support, and enhance infrastructure across multiple office locations and cloud environments Design and implement standardised templates, configuration baselines, and self … third-party vendors to ensure the health and availability of hosted or outsourced services Collaborate with the Security Operations Centre on threat detection and incident response activities Take ownership of incidents and problems through to resolution or formal handover Conduct root-cause analysis to identify and address underlying ...

with experience across ServiceNow IRM, SecOps or both. Whether your background is focused on Risk Management, Policy and Compliance, Vendor Risk, Audit Management, Security Incident Response or Vulnerability Response, there is flexibility to shape the position around your main area of expertise. This is a genuinely client … experience across ServiceNow IRM, SecOps or both Knowledge of modules such as Risk Management, Policy and Compliance, Vendor Risk, Audit Management, SIR or Vulnerability Response Technical experience covering configuration, customisation and solution design Confidence running workshops and working with both technical and non-technical stakeholders A good understanding ...

firewalls, Nessus, and vulnerability remediation. Experience working with SOC teams and supplier security assessments. Familiarity with CAF, CE+, NIST, CIS Controls, ISO 27001. Strong incident response, analytical, and problem solving skills. Knowledge of AI/ML risks and AI governance. Experience with phishing campaigns, penetration testing, and remediation. ...