451 to 475 of 2,252 Incident Response Jobs in the UK

purple team events.Review and develop security operations center dashboards for anomalous activity.Demonstrate subject matter expert across typical security disciplines, vulnerability, Endpoint Detection and Response(EDR), Security Information and Event Managemen (SIEM) etc.Minimum qualifications:Bachelor's degree or equivalent practical experience.Completed relevant industry course/certification offerings such … more programming languages.Active, or the ability to obtain, a Developed Vetting (DV) UK security clearance.Preferred qualifications:Security+ or similar Cyber Security/Incident Response related certifications.Experience responding to security incidents on Kubernetes.Experience analyzing, triaging, and remediating common information security incidents.Understanding of common attacker tactics, tools, and techniques.Excellent problem ...

teams (client networking and virtualization) to support infrastructure projects and support issues. Participate in out-of-hours on-call rota, providing operational support and incident response outside of standard business hours Provide networking expertise to support virtualization platforms, including: VMware vSphere/ESXi Microsoft Hyper-V Nutanix Participate … network architecture reviews, capacity planning, and performance tuning Create and maintain technical documentation, network diagrams, and operational procedures Support change management, incident response, and root cause analysis Work effectively as part of a global, remote team, including occasional out-of-hours support if required. Required Skills & Experience CCNA ...

Aggreko in Glasgow is seeking a Security Operations Team Lead to steer a global security operations function, drive incident response, and lead strategic security initiatives across the organisation. You will manage agile teams, align with ISO27001, Cyber Essentials Plus, NIS-2 and SOX audits, and hands ...

Methods is seeking a Senior Cyber Analyst to lead complex investigations and incident response, providing strategic direction to maintain a robust security posture for clients. You will own detection rules and playbooks for Microsoft Sentinel, Defender XDR, SIEM, SOAR, EDR and XDR, while mentoring the Cyber Services team. ...

core priority of this role. The successful candidate will take a leading part in strengthening and evolving the firm's security posture in response to an increasingly sophisticated threat landscape, including emerging risks associated with AI.This is a technically demanding role that combines proactive security ownership with infrastructure delivery. … capabilities.This role is office-based and requires five days per week on-site presence.Key ResponsibilitiesLead the firm's security operations function, owning threat detection, incident response, and vulnerability management end-to-endMonitor, triage, and respond to security events across the environment, including log analysis, anomaly detection, and threat ...

core priority of this role. The successful candidate will take a leading part in strengthening and evolving the firm's security posture in response to an increasingly sophisticated threat landscape, including emerging risks associated with AI. This is a technically demanding role that combines proactive security ownership with infrastructure … office‐based and requires five days per week on‐site presence. Key Responsibilities Lead the firm's security operations function, owning threat detection, incident response, and vulnerability management end‐to‐end Monitor, triage, and respond to security events across the environment, including log analysis, anomaly detection, and threat ...

tools and agents we build or deploy, including non-human identitiesAdvise on safe adoption of AI coding and agentic tools across engineeringCompliance and incident responseWork with GRC to translate regulatory and compliance requirements (e.g. SOC 2, ISO 27001) into concrete technical controlsLead or support incident response … modelling and architectural security reviewDeep understanding of common attack vectors and application/infrastructure vulnerabilities (e.g. OWASP Top 10)A thorough understanding of the incident response process and Zero Trust architecture principlesExperience managing penetration testing engagements and working with engineering on remediationComfortable reading and writing code (Python ...

gapsSupport OPCOs in implementing security controls, standards, and procedures in accordance with GCG’s cybersecurity requirementsProvide guidance on cybersecurity governance, risk management, vulnerability management, incident response, data protection, identity and access management, and third-party risk managementDevelop SOPs, templates, checklists, and guidance documents to support consistent adoption … including NIST CSF, CIS Controls, ISO 27001, and risk management principlesDemonstrated experience assessing and improving cybersecurity maturity programsKnowledge of security governance, compliance, vulnerability management, incident response, identity and access management, and data protectionStrong analytical and problem-solving capabilities with the ability to translate technical risks into business impactAbility ...

Flagstone is seeking a senior security engineer to own and operate detection and incident response across our Azure cloud security stack. You will work hands-on with Microsoft Sentinel, Defender for Cloud, and XDR tooling, while coordinating remediation with engineering squads. You'll drive security through code, pipelines ...

that align strategies and business objectives to ensure that our clients can maintain operational continuity. You will ensure compliance with relevant regulations, plan client incident response and recovery, and manage resilience projects.Responsibilities:Develop and implement comprehensive cyber resilience strategies to ensure the organization's ability to anticipate, withstand … from cyber incidents.Design and deploy resilience solutions that integrate with existing security frameworks and address key areas such as business continuity, disaster recovery, and incident response.Conduct detailed risk assessments to identify vulnerabilities and threats, and implement strategies to mitigate these risks and strengthen overall resilience.Advise clients on best practices ...

Experienced building detection rules (SIEM, EDR, or cloud-native tooling) Deep understanding of attack patterns (MITRE ATT&CK framework) SOC operations, threat analysis, or incident response Datadog & Cloud Monitoring Hands-on Datadog OR equivalent Sentinel/SIEM experience Azure Monitor and Log Analytics familiarity GCP Cloud Logging … similar) Security & Compliance Knowledge of financial services threats (insider threats, data theft, credential abuse) Understanding of regulatory requirements (DORA, FCA, SOC2) Familiarity with incident response frameworks Comfortable in 24/7 on-call environment during integration crisis period Ideal candidate: Seasoned Security engineer who can operate independently Experience ...

availability, security and resilience of key network services. Key Responsibilities Lead the delivery of secure network boundary services and operations. Manage security monitoring, incident response and service performance. Oversee boundary security technologies including firewalls, IDS/IPS and related security controls. Drive continuous service improvement and operational excellence. … leadership experience managing security operations or managed service teams. Strong knowledge of enterprise firewalls, IDS/IPS, SIEM and threat monitoring technologies. Experience leading incident response and service delivery within secure environments. Excellent stakeholder management and communication skills. Desirable Experience within Defence, Government or National Security environments. Certifications ...

vulnerabilities and compromises, utilizing advanced tools and techniques to detect anomalies and contribute to the development of strategies for security investigation, threat mitigation, and incident response Produce actionable threat intelligence products including IOC development, exploit analysis reports, and threat actor tracking to inform detection engineering and security operations … Computer Science, Cybersecurity, Data Science, or related disciplines 5+ years of experience in cybersecurity threat intelligence or operations, with a focus on threat detection, incident response, and security infrastructure management Demonstrated expertise in multiple security domains, including network security, malware analysis, threat hunting, threat intelligence production, and security ...

that align strategies and business objectives to ensure that our clients can maintain operational continuity. You will ensure compliance with relevant regulations, plan client incident response and recovery, and manage resilience projects. Responsibilities: Develop and implement comprehensive cyber resilience strategies to ensure the organization's ability to anticipate … cyber incidents. Design and deploy resilience solutions that integrate with existing security frameworks and address key areas such as business continuity, disaster recovery, and incident response. Conduct detailed risk assessments to identify vulnerabilities and threats, and implement strategies to mitigate these risks and strengthen overall resilience. Advise clients ...

Datadog, and safe release practices Oversee database and schema evolution practices - migrations, data integrity, and performance - in partnership with platform and infrastructure teams Lead incident response for backend-owned systems - triage, escalation, post-incident reviews, and runbook quality Mentor engineers on PHP (Yii/Yii2), Go, Security … platform operations - with solid breadth across design, build, test, and run Track record of owning production systems end-to-end: implementation, rollout, monitoring, incident response, and follow-up Experience leading technical delivery on complex, ambiguous initiatives involving multiple engineers, dependencies, or teams Strong architectural judgement - evaluating trade-offs ...

availability of easyJet's information and information systems through effective security engineering, tooling and technical controls.Working closely with colleagues across Technology, Security Operations and Incident Response, you'll help ensure our security services remain resilient, effective and ready to support the evolving needs of the business.THE ROLEAs … vulnerability remediation and security control improvement activities.Producing and maintaining technical documentation, runbooks and operational guidance.Supporting security investigations and remediation activities alongside Security Operations and Incident Response teams.Providing security-focused technical support and consultancy to Technology teams across the business.Contributing to the development and delivery of the security engineering ...

judgment calls and iterating with stakeholders rather than waiting for perfect clarity.Mentor and coach junior engineers, promoting best practices in code quality, data architecture, incident response, and operational excellence.Participate in architectural decisions and long-term strategy planning for our enterprise-wide data infrastructure, with a focus on cost … modern data stack.Deep knowledge of Snowflake data warehouse design, optimization, and cost modeling.Experience owning production systems, including on-call rotations (e.g., PagerDuty, Opsgenie), incident response, and postmortem processes.Strong understanding of data architecture concepts, including data lakes, event-driven architectures (e.g., Kafka), ETL/ELT, and data mesh.Proficiency with ...

calls and iterating with stakeholders rather than waiting for perfect clarity. Mentor and coach junior engineers, motivating best practices in code quality, data architecture, incident response, and operational excellence. Participate in architectural decisions and long-term strategy planning for our enterprise-wide data infrastructure, with a focus … data stack. Deep knowledge of Snowflake data warehouse design, optimization, and cost modeling. Experience owning production systems, including on-call rotations (e.g., PagerDuty, Opsgenie), incident response, and postmortem processes. Strong understanding of data architecture concepts, including data lakes, event-driven architectures (e.g., Kafka), ETL/ELT, and data ...

fintech. They're looking for a Senior Security Operations Analyst to sit at the heart of their Information Security function, owning threat detection and incident response at real scale. Senior Security Operations Analyst Salary - £54,000 - £65,000 + bonus Location - Manchester or Leeds - Hybrid The opportunity SIEM … Networks, DevOps and an outsourced SOC. Threat intelligence & hunting - monitor intelligence from multiple sources, identify trends and emerging threats, and lead coordinated hunting activity. Incident response - analyse, contain, and remediate security incidents, communicating clearly across teams and escalating where needed. EDR - day-to-day interaction with the Endpoint ...

readiness.Strengthen our cloud, application and infrastructure security across a global digital asset platform.Devise robust operational flows & technical systems to safeguard client and company funds.Drive incident response, security operations, vulnerability management and operational resilience.Devise and implement a comprehensive AI governance & safety strategy.Maintain and play a role in operating … cryptocurrency, digital assets, blockchain or financial technology.Demonstrated success leading global Security Engineering & GRC teams.Strong knowledge of cloud security (GCP and AWS), application security, incident response, identity and access management, and modern security architectures.Operational experience with self-custody systems (including HSMs), and designing processes to safeguard funds.Experience presenting ...

cloud, application and infrastructure security across a global digital asset platform. Devise robust operational flows & technical systems to safeguard client and company funds. Drive incident response, security operations, vulnerability management and operational resilience. Devise and implement a comprehensive AI governance & safety strategy. Maintain and play a role … digital assets, blockchain or financial technology. Demonstrated success leading global Security Engineering & GRC teams. Strong knowledge of cloud security (GCP and AWS), application security, incident response, identity and access management, and modern security architectures. Operational experience with self-custody systems (including HSMs), and designing processes to safeguard funds. ...

experienced IT Security Operations & Assurance Analyst to join its close-knit Information Security team.This is a varied role combining hands-on security operations and incident response with security engineering, vulnerability management and assurance. You will act as a key escalation point for security alerts, while helping to improve … firmThe successful candidate will have:* Experience within security operations, a SOC, information security or a broader technical IT environment* Strong security monitoring, investigation and incident response capabilities* A broad understanding of operating systems, endpoint security, networking, identity and access management, and modern authentication* Experience with technologies such ...

Consulting is seeking a Senior Consultant to lead incident response engagements, perform digital forensics, and advise clients on cyber risk. The role requires strong analytical skills and knowledge of frameworks, with hybrid travel to client sites in London and beyond. You will work with top-tier firms ...

active international productions.Monitor, analyze, and report on production security posture and key control performance metrics for each production.Partner with global InfoSec, Risk, Threat Intelligence, Incident Response, Training, and Governance teams to align production needs with enterprise programs.Prepare and present dashboards and reports on security trends, compliance status … access telemetry.Support the standardization and scalability of production security practices across production titles and business units.Ensure and track production security culture, awareness, and response readiness.Amplify the reach of security training and awareness initiatives by coordinating rollout to productions, ensuring consistent messaging and participation tracking.Gather feedback from productions to help ...

seeking a hands-on Information Security Analyst to protect our AWS-based environment and data centre assets. You will own security monitoring, automation, and incident response across IAM, logs, and endpoints, while collaborating with IT to codify policy and protection. The ideal candidate has strong IT/ ...