676 to 700 of 2,372 Incident Response Jobs in the UK

DevOps teams to embed security into CI/CD pipelines. Lead the deployment of zero-trust architectures, security automation, and monitoring solutions. Support security incident detection, investigation, and response alongside the SOC and Red Team. Threat & Vulnerability Management Perform regular security assessments, vulnerability scans, and penetration tests, prioritizing … remediation efforts. Develop automated remediation for common security risks and misconfigurations. Monitor and analyze security logs and alerts, fine-tuning detections and response playbooks. Risk & Compliance Support Work with GRC and compliance teams to implement security controls aligned with ISO 27001, NIST, SOC 2, and GDPR. Support security reviews ...

looking for an experienced Cyber Security Analyst Tier 2 to join our Cyber Security Operations Centre (CSOC), providing advanced threat detection, investigation and response services while acting as an escalation point for our Tier 1 analysts. As a Tier 2 Cyber Security Analyst, you'll be a key member … continuously improve our security operations capability. Key responsibilities include: Monitoring and investigating alerts generated by our SIEM platforms Performing advanced threat triage, analysis and response activities Supporting incident response investigations and root cause analysis Acting as an escalation point and mentor for Tier 1 analysts Conducting security ...

Participate in infrastructure projects, migrations and technology refresh programmes. Manage infrastructure security through appropriate change, configuration and release-management processes. Participate in Cyber Security Incident Response Team (CSIRT) activities, including incident investigation, containment, recovery and the continuous improvement of incident readiness. Person Specification Qualifications Educated ...

Kubernetes (K8s) and container images.Triage, validate (including writing PoCs), and prioritize scanning tool findings.Communicate security issues to stakeholders and manage remediation throughout the SDLCIncident Response and ComplianceSupport product security incident response, including root cause analysis, mitigation strategies, and creation of technical runbooks.Apply Detection Engineering principles, setting baseline … security parameters and maintaining IDS/IPS rules.Conduct post-incident analysis and lessons learned and refine response strategies.Monitor emerging threats proactively integrate new protections and ensure compliance with standards (OWASP, NIST).Basic RequirementsBasic Requirements & QualificationsExperience & Education: 7+ years in Security/Application Engineering; Bachelor’s degree in Computer ...

container images. Triage, validate (including writing PoCs), and prioritize scanning tool findings. Communicate security issues to stakeholders and manage remediation throughout the SDLCIncident Response and ComplianceSupport product security incident response, including root cause analysis, mitigation strategies, and creation of technical runbooks. Apply Detection Engineering principles, setting baseline … security parameters and maintaining IDS/IPS rules. Conduct post-incident analysis and lessons learned and refine response strategies. Monitor emerging threats proactively integrate new protections and ensure compliance with standards (OWASP, NIST).Basic RequirementsBasic Requirements & QualificationsExperience & Education: 7+ years in Security/Application Engineering; Bachelor's degree ...

principles Cyber Threat & Risk Management Assess cyber threat landscapes and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident response, threat intelligence and cyber defence capabilities Architect security monitoring, detection and response solutions Develop cyber resilience and business continuity frameworks Cloud ...

/2027 , based in London on a hybrid model (around 60% on site) , and would suit someone who already has strong SOC/incident response experience and is looking to take the next step in a critical national environment. Why this role stands out Length & stability: Contract … environments to determine the nature and scope of incidents. Support and implement containment, eradication and recovery actions. Help coordinate incidents and contribute to post-incident reviews and lessons learned. Identify and support continuous improvements to incident investigation and response processes. Work closely with other Cyber Defence functions ...

/2027 , based in London on a hybrid model (around 60% on site) , and would suit someone who already has strong SOC/incident response experience and is looking to take the next step in a critical national environment. Why this role stands out Length & stability: Contract … environments to determine the nature and scope of incidents. Support and implement containment, eradication and recovery actions. Help coordinate incidents and contribute to post-incident reviews and lessons learned. Identify and support continuous improvements to incident investigation and response processes. Work closely with other Cyber Defence functions ...

projects, migrations and technology refresh programmes.· Manage the security of the infrastructure through appropriate change, configuration and release-management processes.· Participate in Cyber Security Incident Response Team (CSIRT) activities, including incident investigation, containment, recovery, and continuous improvement of incident readiness.PERSON SPECIFICATION (essential requirements)QualificationsEducated to degree ...

projects, migrations and technology refresh programmes. Manage the security of the infrastructure through appropriate change, configuration and release-management processes. Participate in Cyber Security Incident Response Team (CSIRT) activities, including incident investigation, containment, recovery, and continuous improvement of incident readiness. PERSON SPECIFICATION (essential requirements) Qualifications Educated ...

Cyber Security Consultant - Incident and Vulnerability Management Duration: 30/11/2026 Pay: up to £610 per day (umbrella) Location: Preston, London or Birmingham UK, Hybrid - 30% office 70% home CONTRACTOR MUST BE MOD SC CLEARED AND BE A SOLE UK NATIONAL Role Summary The Security Incident … transition to a multi-supplier (SIAM) model within a Defence environment. The role focuses on understanding, aligning and governing existing high-severity security incident management (S3/S4) and vulnerability management processes across suppliers. Ensuring a consistent, risk-based approach in line with client policy and regulatory requirements, supported ...

Description:Job Title: Security Detection & Response Specialist Corporate Title: Up to Assistant Vice President Location: Chester Company Overview:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth … rolling North Wales hills and the banks of the serene River Dee.Role Description:We are seeking a motivated and analytically driven Security Detection & Response Analyst (SDR) to join the GIS Monitoring and Triage team. This role supports cybersecurity operations across threat detection, investigation, response, and continuous service improvement.The ...

Description: Job Title: Security Detection & Response Specialist Corporate Title: Up to Assistant Vice President Location: Chester Company Overview : At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth … rolling North Wales hills and the banks of the serene River Dee. Role Description: We are seeking a motivated and analytically driven Security Detection & Response Analyst (SDR) to join the GIS Monitoring and Triage team. This role supports cybersecurity operations across threat detection, investigation, response, and continuous service ...

/7 operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance … using the Protective Monitoring platform and Internet resources to identify cyber-attacks/security incidents. Categorise all suspected incidents in line with the Security Incident policy Recognise potential, successful and unsuccessful intrusion attempts and compromises through reviews and further analysis of relevant event detail and incident summary information. ...

/7 operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance … using the Protective Monitoring platform and Internet resources to identify cyber-attacks/security incidents. Categorise all suspected incidents in line with the Security Incident policy Recognise potential, successful and unsuccessful intrusion attempts and compromises through reviews and further analysis of relevant event detail and incident summary information. ...

proactive Senior Cyber Security Analyst to help protect the university’s systems, services, data and cloud environments. You will lead the detection, investigation and response to cyber threats, strengthen security controls, manage cyber risks and support the secure delivery of digital services. Working across technical and business teams … will ensure security is embedded into projects, operations and service delivery. Main Duties and Responsibilities You will: Lead investigation, containment and response to cyber security incidents. Identify, assess and mitigate threats and vulnerabilities. Manage and optimise security tools and controls, including EDR and vulnerability management platforms. Monitor the evolving ...

proactive Senior Cyber Security Analyst to help protect the university’s systems, services, data and cloud environments. You will lead the detection, investigation and response to cyber threats, strengthen security controls, manage cyber risks and support the secure delivery of digital services. Working across technical and business teams … will ensure security is embedded into projects, operations and service delivery. Main Duties and Responsibilities You will: • Lead investigation, containment and response to cyber security incidents. • Identify, assess and mitigate threats and vulnerabilities. • Manage and optimise security tools and controls, including EDR and vulnerability management platforms. • Monitor the evolving ...

proactive Senior Cyber Security Analyst to help protect the university’s systems, services, data and cloud environments. You will lead the detection, investigation and response to cyber threats, strengthen security controls, manage cyber risks and support the secure delivery of digital services. Working across technical and business teams … will ensure security is embedded into projects, operations and service delivery. Main Duties and Responsibilities You will: • Lead investigation, containment and response to cyber security incidents. • Identify, assess and mitigate threats and vulnerabilities. • Manage and optimise security tools and controls, including EDR and vulnerability management platforms. • Monitor the evolving ...

proactive Senior Cyber Security Analyst to help protect the university’s systems, services, data and cloud environments. You will lead the detection, investigation and response to cyber threats, strengthen security controls, manage cyber risks and support the secure delivery of digital services. Working across technical and business teams … will ensure security is embedded into projects, operations and service delivery. Main Duties and Responsibilities You will: Lead investigation, containment and response to cyber security incidents. Identify, assess and mitigate threats and vulnerabilities. Manage and optimise security tools and controls, including EDR and vulnerability management platforms. Monitor the evolving ...

Senior Network Security EngineerScotland/HybridSchedule: Rotating shift (includes nights/weekends)Salary up to 80,000You will own incidents end-to-end across Incident, Major Incident, Change, Problem, and Service Request workflows (ITIL-aligned), leading real-time response to live DDoS attacks and complex network events … networking, cybersecurity, or infrastructureDegree in Computer Science or a related fieldStrong networking fundamentals — TCP/IP, routing, Layer 1–3 troubleshootingProven experience in incident response and customer-facing technical rolesThe temperament to own and resolve incidents under real pressureExcellent communication skills — clear, calm, customer-readyScripting and automation ability ...

Engineer Scotland/Hybrid Schedule: Rotating shift (includes nights/weekends) Salary up to £80,000 You will own incidents end-to-end across Incident, Major Incident, Change, Problem, and Service Request workflows (ITIL-aligned), leading real-time response to live DDoS attacks and complex network events … cybersecurity, or infrastructure Degree in Computer Science or a related field Strong networking fundamentals TCP/IP, routing, Layer 13 troubleshooting Proven experience in incident response and customer-facing technical roles The temperament to own and resolve incidents under real pressure Excellent communication skills clear, calm, customer-ready ...

drive resilience due diligence activities across Civil Aerospace, identifying capability gaps and implementing practical, business-aligned resilience solutions with an immediate focus on cyber incident readiness. This role will establish and embed a scalable resilience framework across the business, ensuring operational continuity, improved incident preparedness, and alignment … disruption. This is a highly visible transformation and delivery role requiring strong stakeholder leadership, programme management capability, and enterprise thinking. Key Accountabilities Cyber Incident ReadinessLead the Civil Aerospace cyber resilience readiness programme with an initial focus on major cyber incident preparednessDevelop coordinated business response and recovery capabilities ...

initial 12-month contract, based in Glasgow with a hybrid work pattern (3 days in the office). The role covers security incident detection, response, and improvements across both OT and IT environments, aligned with SPEN's cyber security transformation programme. You will coordinate across in-house … outsourced SOC teams, configure SIEM tools, oversee post-incident reviews, and ensure compliance with policy and SLAs while driving #J-18808-Ljbffr ...

safe delivery and automated releases.Collaborate with SRE and Ops on monitoring, observability, logging and tracing (Prometheus, Grafana, ELK, Jaeger/Zipkin) to ensure SLAs, incident response and release & incident management.Drive performance tuning, capacity planning and cost optimization for cloud environments and container orchestrations (Kubernetes, Docker).Design … practices, technical debt management, and introduce architectural and process improvements to increase developer productivity.Drive observability of business and technical metrics, build runbooks and improve incident postmortems and remediation processes.Qualifications10+ years of software engineering experience with 3+ years in a management or technical lead role, delivering distributed systems and cloud ...

responses. Partner with the DPO on data governance and breach notification obligations. Manage third-party and supply chain security risk, including critical outsourcing oversight. Incident management & operations: Own the security incident response plan; lead major incident management for cyber events. Operate and improve security monitoring, SIEM ...