351 to 375 of 2,297 Incident Response Jobs in the UK

will manage security incidents and review security alerts, determine if the security events are false positives, true positives, or false negatives, while working with incident responders on known or suspected security threats. The Senior SOC Analyst will work on log analysis, vulnerabilities and emerging threats, threat hunting and incident response that adhere to best practices and recognized control frameworks while mentoring analysts and being their escalation point. You will help provide security metrics, threat landscape updates and emerging trends. This role requires both deep analytical skills for threat detection and response, as well as technical engineering ...

production at scale, with deep instrumentation and strong operational rigor. You will partner across engineering to deliver secure software, improve stability, and lead incident response and continuous improvement.Job responsibilitiesDesign, develop, troubleshoot, and deliver secure, high-quality production software and services for AI infrastructureBuild backend services and APIs that … quantization, parallelism, and speculative decodingLead reliability engineering for large language model endpoints through capacity planning, load and soak testing, safe rollouts, failover, and incident response for outages and model-quality regressionsParticipate in on-call rotations, lead incident triage and mitigation, and produce clear post-incident root ...

manage external audits for ISO 14298 and customer requirements. Lead corrective/preventive actions and maintain certification evidence. Deliver training on security procedures and incident response; maintain competency records. Lead incident response, investigations, root-cause analysis, reporting, and corrective/preventive actions. Assess and monitor security … leadership, coaching, communication, and stakeholder management skills; able to influence across functions. Analytical, data-driven, and proficient with Microsoft 365 tools and security/incident management systems. Preferred Skills Regular travel to Leicester (10%) & limited travel to group sites for project support and knowledge sharing. Compensation package 25 days ...

operating companies. You'll combine technical expertise with operational leadership to improve monitoring, strengthen threat detection, optimise security tooling and lead the response to security incidents.This is a hands-on role where you'll have genuine influence over how Security Operations evolves. You'll shape the roadmap, improve operational … continual improvement of our Security Operations capability, working closely with Security Engineering, technology teams and third-party partners to strengthen monitoring, detection and incident response across the business.You'll own the end-to-end incident management lifecycle, coordinating responses to security incidents, driving investigations, facilitating lessons learned ...

Cloud, and manages tooling through infrastructure-as-code. They run a quarterly penetration test programme and are continuously building out our detection and response capability. It's a small team with broad scope, which means your work is visible, your opinions are heard, and there are meaningful problems … solve will matter. Does this sound like you? You're a senior security engineer who operates credibly across cloud security, detection tooling, and incident response, without being narrowly specialised. You own meaningful parts of the security stack, contribute hands‐on to Azure cloud hardening, and show up reliably ...

production at scale, with deep instrumentation and strong operational rigor. You will partner across engineering to deliver secure software, improve stability, and lead incident response and continuous improvement. Job responsibilities Design, develop, troubleshoot, and deliver secure, high-quality production software and services for AI infrastructure Build backend services … quantization, parallelism, and speculative decoding Lead reliability engineering for large language model endpoints through capacity planning, load and soak testing, safe rollouts, failover, and incident response for outages and model-quality regressions Participate in on-call rotations, lead incident triage and mitigation, and produce clear post-incident ...

Response. The role is hybrid with offices in London and Cardiff, requiring in-person collaboration at least one day per week and a strong incident response background. You will document incident notes, findings and containment steps, support tabletop exercises, and contribute to cloud forensics efforts across ...

business goals and risk appetite.Create actionable roadmaps for implementing security initiatives, prioritising activities based on risk and business impact.Support clients in developing and testing incident response plans and business continuity strategies.Contribute to thought leadership initiatives, developing white papers, presentations, and blog posts to share expertise.Provide specialist technical advice … Maritime, Space, Cyberspace).Experience of working within Defensive Cyber Operations with an in-depth knowledge of at least one specialisation (security monitoring, network operations, Incident Response/Management, Threat Intelligence, Vulnerability Management or Cyber Operations).Experience working in or with Government organisations, including the handling of assets subject ...

modelling and architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective actionsLead incident response efforts, including investigation and remediation of security breachesSupport our internal security awareness and training programs, advocating the DevSecOps mindset that we have … minimise risk and impact to usA proactive approach to staying updated with the latest security threats, vulnerabilities and mitigation techniquesThorough understanding of the incident response process (preparation, identification, containment, eradication, recovery, lessons learned)What skills are desirable:In-depth knowledge of network security, including core routing and switching ...

trusted engineering partner to the desk, ensuring systems are stable, performant, and aligned with business needs. Support live trading environments, including incident response, root cause analysis, and post mortem leadership. Work as a core member of the software engineering team, participating in daily standups and design discussions. Contribute … across trading systems, including automated remediation, self‐healing workflows, and resilience engineering. Use enterprise‐authorized AI capabilities within the work environment to accelerate major‐incident triage, troubleshooting, and post‐incident analysis, validating outputs and handling operational data according to sensitivity and security requirements. Lead reuse‐first adoption ...

security cyber defence team supporting critical national infrastructure and sensitive government programmes. This role requires a proactive security professional with strong monitoring, analysis, and incident triage capabilities within a Security Operations Centre environment. SOC Analyst - Key Responsibilities Monitor and analyse security alerts from SIEM and security tooling platforms Perform … triage and investigation of security events and potential incidents Conduct threat hunting and identify indicators of compromise Escalate and coordinate incident response activities where required Analyse endpoint, network, and cloud security telemetry Develop and improve detection rules and use cases Produce detailed investigation and incident reports Collaborate ...

Cloud, and manages tooling through infrastructure-as-code. They run a quarterly penetration test programme and are continuously building out our detection and response capability. It's a small team with broad scope, which means your work is visible, your opinions are heard, and there are meaningful problems … problems you solve will matter.Does this sound like you You're a senior security engineer who operates credibly across cloud security, detection tooling, and incident response, without being narrowly specialised. You own meaningful parts of the security stack, contribute hands-on to Azure cloud hardening, and show ...

investigation and analysis, acting as the escalation point for complex or high‐severity incidents. They conduct root cause analysis, guide L1 analysts, and support incident containment and remediation efforts. The role operates within a high-performance compute environment, working shift‐based 24x7 operations and receiving a shift premium … hours. Key Responsibilities Investigate escalated incidents to determine attack vectors, scope, and potential impact. Correlate events across multiple data sources to build a comprehensive incident narrative. Execute containment, eradication, and recovery activities in coordination with IT/OT stakeholders. Lead response for medium to high‐severity incidents ...

reliability priorities.Act as a trusted engineering partner to the desk, ensuring systems are stable, performant, and aligned with business needs.Support live trading environments, including incident response, root cause analysis, and post mortem leadership. Work as a core member of the software engineering team, participating in daily standups … across trading systems, including automated remediation, self healing workflows, and resilience engineering. Uses enterprise-authorized AI capabilities within the work environment to accelerate major-incident triage, troubleshooting, and post-incident analysis, validating outputs and handling operational data according to sensitivity and security requirements.Leads reuse-first adoption ...

trusted engineering partner to the desk, ensuring systems are stable, performant, and aligned with business needs. Support live trading environments, including incident response, root cause analysis, and post mortem leadership. Work as a core member of the software engineering team, participating in daily standups and design discussions. Contribute … across trading systems, including automated remediation, self healing workflows, and resilience engineering. Uses enterprise-authorized AI capabilities within the work environment to accelerate major-incident triage, troubleshooting, and post-incident analysis, validating outputs and handling operational data according to sensitivity and security requirements. Leads reuse-first adoption ...

trusted engineering partner to the desk, ensuring systems are stable, performant, and aligned with business needs. Support live trading environments, including incident response, root cause analysis, and post mortem leadership. Work as a core member of the software engineering team, participating in daily standups and design discussions. Contribute … across trading systems, including automated remediation, self healing workflows, and resilience engineering. Uses enterprise-authorized AI capabilities within the work environment to accelerate major-incident triage, troubleshooting, and post-incident analysis, validating outputs and handling operational data according to sensitivity and security requirements. Leads reuse-first adoption ...

production at scale, with deep instrumentation and strong operational rigor. You will partner across engineering to deliver secure software, improve stability, and lead incident response and continuous improvement. Job responsibilities Design, develop, troubleshoot, and deliver secure, high-quality production software and services for AI infrastructure Build backend services … quantization, parallelism, and speculative decoding Lead reliability engineering for large language model endpoints through capacity planning, load and soak testing, safe rollouts, failover, and incident response for outages and model-quality regressions Participate in on-call rotations, lead incident triage and mitigation, and produce clear post-incident ...

security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles … . Designing and implementing secure AWS architectures that align with security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security ...

security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles … . Designing and implementing secure AWS architectures that align with security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security ...

security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles … . Designing and implementing secure AWS architectures that align with security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security ...

security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles … . Designing and implementing secure AWS architectures that align with security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security ...

help identify, assess, and manage risks, while providing practical security guidance that enables secure and productive ways of working. The role spans security monitoring, incident response, vulnerability management, supplier assurance, compliance, reporting, and security awareness. You will contribute to the ongoing development of the firm’s security capabilities … escalation point for security queries from the Service Desk, IT, and Risk and Compliance teams, including DSAR evidence gathering where appropriate. Support incident response activities including triage, investigation, containment, documentation, remediation tracking, and post-incident review. Support business continuity and disaster recovery activity, helping restore protected services ...

large-scale security capabilities that protect the UK’s largest digital bank.You’ll provide strategic direction for cyber defence, detection engineering, threat hunting and incident response, while driving continuous improvement across security operations platforms, tooling and processes. Leading a high-performing team, you’ll strengthen operational resilience, coordinate … effective response to cyber threats and incidents, champion a threat-led approach to defence, and help shape a world-class security operation that enables the Group to go faster, safely.Why Join us If you think all banks are the same, you’re wrong. We’re a pioneering, fast-changing ...

large-scale security capabilities that protect the UK’s largest digital bank.You’ll provide strategic direction for cyber defence, detection engineering, threat hunting and incident response, while driving continuous improvement across security operations platforms, tooling and processes. Leading a high-performing team, you’ll strengthen operational resilience, coordinate … effective response to cyber threats and incidents, champion a threat-led approach to defence, and help shape a world-class security operation that enables the Group to go faster, safely.Why Join us If you think all banks are the same, you’re wrong. We’re a pioneering, fast-changing ...

large-scale security capabilities that protect the UK’s largest digital bank.You’ll provide strategic direction for cyber defence, detection engineering, threat hunting and incident response, while driving continuous improvement across security operations platforms, tooling and processes. Leading a high-performing team, you’ll strengthen operational resilience, coordinate … effective response to cyber threats and incidents, champion a threat-led approach to defence, and help shape a world-class security operation that enables the Group to go faster, safely.Why Join us If you think all banks are the same, you’re wrong. We’re a pioneering, fast-changing ...