726 to 750 of 2,373 Incident Response Jobs in the UK

teams as needed.• Improve and automate security operations by developing scripts, integrations, or workflows to reduce manual effort, enhance detection capabilities, and streamline incident response (e.g., building security automation in cloud or SIEM).• Integrate security into enterprise systems and processes, working closely with Network, Cloud, and DevOps … networks, and cloud architectures (Azure preferred), and how to secure them.Proven hands-on experience with security technologies, including some variety of SIEM, endpoint detection & response, identity/privileged access management, and cloud security tools.Excellent communication and documentation skills, with the ability to clearly explain complex security concepts to both ...

security policies, standards and control frameworks. Deliver security reporting and risk updates to Executive Leadership Teams, Boards, Audit Committees and key stakeholders. Lead security incident preparedness, response oversight and resilience planning. Drive cyber maturity improvements across people, process and technology. Manage security risk assessments and remediation programmes. Ensure … leading enterprise-wide cyber security programmes. Strong background covering: Operational Security Security Governance Cyber Risk Management Cyber Assurance Security Strategy Third-Party Security Management Incident Response & Cyber Resilience Experience overseeing or working alongside managed SOC services. Strong stakeholder management skills with the ability to engage both technical ...

security policies, standards and control frameworks. Deliver security reporting and risk updates to Executive Leadership Teams, Boards, Audit Committees and key stakeholders. Lead security incident preparedness, response oversight and resilience planning. Drive cyber maturity improvements across people, process and technology. Manage security risk assessments and remediation programmes. Ensure … leading enterprise-wide cyber security programmes. Strong background covering: Operational Security Security Governance Cyber Risk Management Cyber Assurance Security Strategy Third-Party Security Management Incident Response & Cyber Resilience Experience overseeing or working alongside managed SOC services. Strong stakeholder management skills with the ability to engage both technical ...

evolve container-based platforms using Kubernetes and Docker Define and maintain platform standards, patterns, and best practices Own Platform Reliability, Security & Performance Lead incident response, root cause analysis, and platform improvements Implement robust monitoring, observability, and alerting strategies Drive security improvements aligned to ISO27001, SOC2, and modern SDLC … with vulnerability management, PAM, secrets management, and secure access Platform & Operations Excellence Experience running and scaling highly available SaaS platforms Strong understanding of SRE, incident management, and operational best practices Experience implementing BCP/DR solutions across cloud and on-prem Leadership & Delivery Proven leadership experience managing technical teams ...

embed reliability engineering practices across systems that support live, business-critical environments.The successful candidate will play a key role in improving service reliability, observability, incident response, automation, and disaster recovery readiness across IMG platforms, while working closely with engineering, operations, and project stakeholders.Key Responsibilities and AccountabilitiesDesign, build … teams to improve release quality, resilience, and supportability.Act as an escalation point for production incidents, leading or supporting rapid diagnosis, mitigation, communication, and post-incident follow-up.Drive root cause analysis and corrective actions following incidents, with a focus on prevention and continuous improvement.Support the design, testing, and documentation ...

NIST benchmarks.Identity & Access Security: Define standards for Entra ID and Active Directory, overseeing requirements for Conditional Access, MFA, SSO, and PIM.Threat Detection & Incident Response: Own and operate the SIEM/SOAR stack, including Microsoft Sentinel and Defender XDR, to develop detection rules and support forensic investigations.Infrastructure Hardening: Enforce ...

NIST benchmarks. Identity & Access Security: Define standards for Entra ID and Active Directory, overseeing requirements for Conditional Access, MFA, SSO, and PIM.Threat Detection & Incident Response: Own and operate the SIEM/SOAR stack, including Microsoft Sentinel and Defender XDR, to develop detection rules and support forensic investigations. Infrastructure ...

reliability engineering practices across systems that support live, business-critical environments. The successful candidate will play a key role in improving service reliability, observability, incident response, automation, and disaster recovery readiness across IMG platforms, while working closely with engineering, operations, and project stakeholders. Key Responsibilities and Accountabilities Design … improve release quality, resilience, and supportability. Act as an escalation point for production incidents, leading or supporting rapid diagnosis, mitigation, communication, and post-incident follow-up. Drive root cause analysis and corrective actions following incidents, with a focus on prevention and continuous improvement. Support the design, testing, and documentation ...

applicable, and dependency scanning. Drive observability and production excellence by implementing logging, metrics, and tracing, creating actionable alerts, defining SLOs and SLIs, and leading incident response and post‐incident improvement activities. Embed security by design through secure coding practices, threat modelling, role‐based access control and least ...

automated testing for changes minimizing risk in always-on markets.Implement and enhance observability using CloudWatch, Prometheus, Grafana, and similar tools.Participate in operational ownership through incident response, post-incident improvement, and continuous hardening.Who you areDemonstrated expertise in owning production infrastructure as an engineer (Platform, SRE, or Infrastructure engineering ...

third-party SOC vendor. Triage, analyse and prioritise alerts, incidents, escalations, and investigations - validating severity, business impact, and regulatory implications of incidents Co-ordinate incident management and response activities aligned with defined policies, standards, and framework requirements by being the internal response facilitator and co-ordinator … operations. Skills, Qualifications, And Experience Previous hands-on experience in cybersecurity operations or security engineering roles. Experience of security monitoring, threat detection, incident response, and threat hunting methodologies. Strong working knowledge of endpoint security, identity and access management, authentication controls, privileged access management, and security hardening standards incl. ...

runtime platforms that make AI services reliable, secure, observable and supportable at Arm scale. You will work across Kubernetes, cloud, identity, secrets, networking, telemetry, incident management and automation to provide the production foundation for Arm’s AI platform.Participate in production support and our paid on-call rota for high … impact incident response.Production AI runtime platforms:Build/deploy and operate the infrastructure for centrally hosted AI platform services, including MCP server infrastructure, model gateway services and supporting control-plane components.Design runtime patterns for isolation, scalability, secure execution, capacity management and cost-aware operation.Automate provisioning, configuration, upgrades and lifecycle ...

reports and updates for senior management * Monitor regulatory developments and create appropriate compliance roadmaps * Support cybersecurity awareness and training across the organisation * Participate in incident response and post-incident reviews * Help develop and implement corrective measures following security incidents * Provide credible cybersecurity guidance to stakeholders across ...

evidenced and delivered throughout the project lifecycle. It’s a broad role covering security assurance, technical design, certification, risk, penetration testing, supplier security and incident response. What You’ll Be Doing Provide assurance against contractual security obligations for product and service deliverables, including ISO 27001, CE+ and DCC. Deliver … Design principles and perform risk assessments for new technologies and business initiatives. Participate in Change Advisory Board (CAB) meetings to provide security assurance. Support incident and business continuity response plans and act as part of the incident response team when required. Contribute to security working groups ...

scenario testing. Coordinate disaster recovery, technology recovery and business continuity capabilities. Develop resilience reporting, governance and assurance frameworks for Executive and Board collaborators. Lead response activities during major operational disruptions and technology crises. Maintain responsibility for overall technology operational resilience maturity. 2. Cyber Security Leadership Own and evolve … Security and Cyber Security functions through the Chief Information Security Officer. Ensure effective security operations, vulnerability management, identity and access management, threat detection and incident response capabilities. Maintain alignment with recognised security frameworks including ISO 27001 and NIST. Maintain strong cyber resilience against evolving security threats. Lead executive ...

scenario testing. Coordinate disaster recovery, technology recovery and business continuity capabilities. Develop resilience reporting, governance and assurance frameworks for Executive and Board collaborators. Lead response activities during major operational disruptions and technology crises. Maintain responsibility for overall technology operational resilience maturity. 2. Cyber Security Leadership Own and evolve … Security and Cyber Security functions through the Chief Information Security Officer. Ensure effective security operations, vulnerability management, identity and access management, threat detection and incident response capabilities. Maintain alignment with recognised security frameworks including ISO 27001 and NIST. Maintain strong cyber resilience against evolving security threats. Lead executive ...

products we build, covering everything from secure design reviews to threat modelling and penetration testing, ensuring security is embedded from the ground up.Threat Detection & Response (this role!) focuses on protecting the company by building a robust detection and automation platform. We’re proactive in our defence, constantly hacking ourselves … development paired with proactive health monitoring capabilities.Identifying opportunities to build or enhance internal tools that streamline threat detection processes, improve data visibility, and increase response efficiency.Leading complex incident investigations, coordinating efforts across the security, IT, and engineering teams to ensure rapid and effective containment, remediation, and recovery.Support ...

seeking an experienced Splunk Engineer to help design, build, and manage our Splunk SOAR service, with a strong focus on automation, security response, and service maturity. This role will be responsible for developing, reviewing, testing, and deploying Splunk SOAR playbooks into production environments, ensuring they are secure, reliable … Work closely with SOC analysts, security engineering teams, and stakeholders to optimise automation outcomes. Perform playbook tuning, troubleshooting, and enhancements to improve reliability and response times. Maintain clear technical documentation for playbooks, integrations, and processes. Support live security operations where SOAR automation is involved. Manage your own queue ...

seeking an experienced Splunk Engineer to help design, build, and manage our Splunk SOAR service, with a strong focus on automation, security response, and service maturity. This role will be responsible for developing, reviewing, testing, and deploying Splunk SOAR playbooks into production environments, ensuring they are secure, reliable … Work closely with SOC analysts, security engineering teams, and stakeholders to optimise automation outcomes. Perform playbook tuning, troubleshooting, and enhancements to improve reliability and response times. Maintain clear technical documentation for playbooks, integrations, and processes. Support live security operations where SOAR automation is involved. Manage your own queue ...

Operations and guide them to design and implement scalable, secure, highly available and fault-tolerant distributed systems. You will also own the areas of incident management and response, post-mortem analysis including running blameless postmortems, and continuous improvement of our Cloud services. You will be leveraging your software … including Data Plane, Control Plane,ClickHouse Core, etc) have monitoring and alerting in place to ensure timely detection and resolution of incidents.Enhance and refine incident response processes and post-mortem analysis for any outages in ClickHouse Cloud including working with the support team to communicate to the impacted ...

practice) that scales reliability improvements across many application flows. Defines and implements standards for: Service cataloging, SLO/SLI frameworks and error budgets, incident response maturity, blameless post-incident reviews, resiliency patterns, capacity, performance, and scalability engineering. Drives service reviews with evidence-based reporting (availability, latency, incident … credibly at all levels—from engineers to senior technology and business stakeholders. Uses enterprise-authorized AI capabilities within the work environment to accelerate major-incident triage, troubleshooting, and post-incident analysis, validating outputs and handling operational data according to sensitivity and security requirements. Leads reuse-first adoption ...

platform security, cloud and data security risks, and third-party/supply chain risk.Hands-on or advisory experience across IAM/PAM, vulnerability management, incident response, SIEM, and business continuity.Cloud landing zone design and segmentation: able to limit blast radius from a security incident through architecture choices ...

business initiatives, as well as participate in Change Advisory Board (CAB) meetings to provide security assurance Support the implementation, delivery, and exercising of incident and business continuity response plans, and contribute to the lessons identified process Act as a member of the incident response team … event of a security incident Contribute to security working groups, security steering boards, Executive and Board level reports, and any other management material as required Own the management of Security Aspect Letters, compliance with them, and the creation of any flow down variations to suppliers and own the management ...

security, cloud and data security risks, and third‐party/supply chain risk. Hands‐on or advisory experience across IAM/PAM, vulnerability management, incident response, SIEM, and business continuity. Cloud landing zone design and segmentation: able to limit blast radius from a security incident through architecture ...

Linux; network segmentation, SDN, and isolation techniques Security Technologies: EDR, NGFW, IDS, SIEM, SOAR, and related platforms Key Duties Support containment, recovery, and post‐incident remediation by identifying root causes and implementing technical fixes that reduce recurrence. Partner with product, engineering, and infrastructure teams to embed security within existing … engineering guidance. Experience applying and maintaining secure configurations across systems, networks, or applications. Ability to leverage AI tools to accelerate triage, remediation recommendations, and incident response, with appropriate human review and judgement. Knowledge of vulnerability management, common attack patterns, and mitigation techniques. (e.g., OWASP Top 10, MITRE ...