826 to 850 of 2,372 Incident Response Jobs in the UK

functions; enabling organisations to more quickly and widely adopt emerging technologies while ensuring the integrity of their intellectual property; information flow during disaster response scenarios, and zero‐trust/least‐privilege environments for M&A, attorney‐client privileged communications, etc. And we’ve only scratched the surface. … technical security authority in high‐stakes customer procurement reviews, vendor risk assessments (DDQs), and defense customer evaluations. Oversee Security Operations: Build and manage internal incident response capabilities, continuous monitoring, vulnerability management, and employee security awareness programs. What we are looking for Progressive Experience: 6–10 years in cybersecurity ...

order routing, trade flow, and post-trade issuesLead the 'follow the sun' support model coordination, working closely with global teams in APAC and USDrive incident management practices, trend identification, and post-mortem analysis. Collaborate with development teams to influence platform improvements based on support insightsOccasional weekend work will … hoursPositive approach to the day-to-day, with the resilience to handle high-pressure production incidentsDesiredExperience with Site Reliability Engineering (SRE) practices, including monitoring, incident response, and post-mortem analysisProven experience applying AI or machine-learning models to optimise workflows, identify patterns, and drive intelligent automation solutionsHands ...

other passenger-facing devices that are critical to daily service delivery. You will lead a multi-disciplinary team responsible for ensuring high availability, rapid incident response, and seamless customer experience across all front office technology. Key Responsibilities Lead the end-to-end support and operation of front office … major incidents affecting ticketing systems, gates, validators, kiosks, and associated platforms , coordinating rapid resolution with engineering and field teams. Drive operational excellence across: Incident management Ticket prioritisation and queue management Root cause analysis (RCA) Service performance and uptime Work closely with field engineers, maintenance teams, and operational stakeholders ...

execute the Cloud Security Strategy Manage vendor relationships with AWS, Wiz, CrowdStrike, Cata Networks, Cribl, and Splunk Adopt Agentic AI in detection and response capabilities Lead and support security incidents and mentor teams in incident scenarios Establish AI-augmented risk and vulnerability management practices Liaise with Data Protection … Optimization Keywords Hard Skills Security Operations Network Security Identity Security Application Security Data Security Configuration Management Automation Systems Cloud Infrastructure (AWS, GCP, Azure) Incident Response Service Management Soft Skills Strong Communication Skills Analytical Problem-Solving Change Management Mentoring and Training Collaboration Industry Keywords ECommerce Agile Methodologies Service Lifecycle ...

aligned to MOD security requirements Coordinate DevSecOps engineers, developers, testers and infrastructure teams Create and maintain security processes, technical standards and operational runbooks Support incident response, patching, risk management and compliance activity Expereince required: You'll need strong hands-on experience across: AWS | Kubernetes/EKS | Terraform | GitHub ...

skills. Experience working within large-scale enterprise, government, or regulated environments. Desirable Experience Experience supporting Security Operations Centre (SOC) functions. Exposure to threat hunting, incident response, or cyber investigations. Knowledge of cloud security principles and modern enterprise architectures. Experience working with security monitoring and intelligence platforms. Familiarity with ...

written and verbal communication skills.Experience working within large-scale enterprise, government, or regulated environments.Desirable ExperienceExperience supporting Security Operations Centre (SOC) functions.Exposure to threat hunting, incident response, or cyber investigations.Knowledge of cloud security principles and modern enterprise architectures.Experience working with security monitoring and intelligence platforms.Familiarity with SIEM technologies ...

communication skills. Experience working within large-scale enterprise, government, or regulated environments. Desirable ExperienceExperience supporting Security Operations Centre (SOC) functions. Exposure to threat hunting, incident response, or cyber investigations. Knowledge of cloud security principles and modern enterprise architectures. Experience working with security monitoring and intelligence platforms. Familiarity with ...

Groups, IAM, ACM, and KMS Support infrastructure deployments using CloudFormation Manage storage infrastructure using S3, including life cycle policies and access controls Participate in incident response, troubleshooting, and root cause analysis Follow and support security standards, change management, and release governance processes Contribute to sprint planning, refinement ...

automation and tooling that let a lean team monitor and protect players, developers, employees and the platform at global scale and serve as security incident commander in the region. This is a highly autonomous role where you will be a primary decision-maker, core to our mission to maintain … highly capable 24/7/365 monitoring and response capability.While you will work in close collaboration with peers at our US West Coast Headquarters, the time difference requires an engineer who can operate independently, making critical decisions without immediate oversight. We favor engineering our way out of toil ...

GDPR, the Data Protection Act 2018 and relevant FCA expectations. Strengthen cyber operations and resilience Lead security monitoring, threat management, vulnerability management, incident response and cyber preparedness across NewDay’s technology environment. Maintain effective incident playbooks, escalation routes, exercises and lessons-learned processes. Oversee the technology ...

system reliability, performance, and operational efficiency Advance automation, Infrastructure as Code approaches, and promote self-healing systems using AI/ML techniques Develop robust incident management frameworks and lead major incident response activities for critical systems Implement blameless postmortems and deliver systemic improvements across production environments Establish … systems, and telemetry-driven insights Hands‐on experience with automation, Infrastructure as Code (Terraform or CloudFormation), and CI/CD practices Deep understanding of incident management processes, ITSM standards, and ITIL principles Knowledge of resilience design patterns, high availability, and fault‐tolerant architectures Familiarity with AI/ML‐driven ...

system reliability, performance, and operational efficiency Advance automation, Infrastructure as Code approaches, and promote self‐healing systems using AI/ML techniques Develop robust incident management frameworks and lead major incident response activities for critical systems Implement blameless postmortems and deliver systemic improvements across production environments Establish … systems, and telemetry‐driven insights Hands‐on experience with automation, Infrastructure as Code (Terraform or CloudFormation), and CI/CD practices Deep understanding of incident management processes, ITSM standards, and ITIL principles Knowledge of resilience design patterns, high availability, and fault‐tolerant architectures Familiarity with AI/ML‐driven ...

inclusive, psychologically safe environment; with leadership tailored to individual strengths and motivations. Platform Engineering, Operations & Reliability Cloud platform and key services are reliable, incident detection and resolution are smooth due to proactive monitoring, well‐maintained alerts/logs, and complete observability coverage. Platform resilience and DR planning/testing … operational, working across the business with validated requirements and outcomes. Backup, restore and resilience mechanisms are regularly tested, ensuring the platform can recover predictably. Incident management processes are consistently followed, including timely post‐incident reviews (PIRs) and completion of follow‐up actions. On‐call is well staffed, sustainably ...

operational efficiency. Security Operations & Risk Management Monitor and analyse browser security events, policy violations and suspicious user activity to support threat detection and incident response activities. Support investigations involving browser session activity, data protection events and secure application access controls. Monitor, analyse, and respond to network security incidents … vulnerabilities, and emerging threats. Support threat detection, containment, remediation, and post-incident reviews. Ensure network security controls remain effective, compliant, and aligned with evolving cyber threats. Conduct security assessments, rule reviews, and network segmentation activities. Security Architecture & Standards Ensure network architectures comply with security standards, secure-by-design principles ...

operational efficiency. Security Operations & Risk Management Monitor and analyse browser security events, policy violations and suspicious user activity to support threat detection and incident response activities. Support investigations involving browser session activity, data protection events and secure application access controls. Monitor, analyse, and respond to network security incidents … vulnerabilities, and emerging threats. Support threat detection, containment, remediation, and post-incident reviews. Ensure network security controls remain effective, compliant, and aligned with evolving cyber threats. Conduct security assessments, rule reviews, and network segmentation activities. Security Architecture & Standards Ensure network architectures comply with security standards, secure-by-design principles ...

first security stack already in place, it is an exciting time to join the business and learn your craft as we mature our detection, response, and automation capabilities across a global estate. You will work alongside the wider IT team - Infrastructure, Network, Development, DevOps, and Service Desk - gaining … understanding of how security supports the business. The purpose of this role is to build a working knowledge of security operations, protective monitoring, and incident handling by working closely with, and learning from, the wider InfoSec team. Reporting to the Associate Director - Cyber Security, with day-to-day guidance ...

technologies and business initiatives, as well as participate in Change Advisory Board (CAB) meetings to provide security assuranceSupport the implementation, delivery, and exercising of incident and business continuity response plans, and contribute to the lessons identified processAct as a member of the incident response team … Plans, Risk Registers and Risk Assessments, Security Requirements Documents, Security Aspects Letters, Threat Models and Vulnerability Assessments, Security Architecture Documents, Compliance & Audit Reports, and Incident & Recovery PlansExperience in the assurance or implementation of information or cybersecurity management systems that have achieved certification to ISO 27001, CE+, or DCC standardsExperience ...

problems.Develops secure high-quality production code, and reviews and debugs code written by others.Adds to team culture of diversity, opportunity, and respect.Develops and maintains incident response procedures, including root cause analysis and postmortem documentation.Required Qualifications, Capabilities, and Skills:Experience with formal training or certification on software engineering concepts.Strong … understanding of SRE principles, including SLIs, SLOs, error budgets, and incident management.Ability to manage highly technical team of Site Reliability Engineers.Experience leading teams in the safe use of enterprise-authorized AI capabilities within the work environment for reliability engineering workflows, including validation habits and awareness of data sensitivity.Ability ...

directly to the Infrastructure Platforms Manager. This position is crucial in implementing and maintaining robust security measures across our infrastructure, as well as managing incident response.The role involves developing, implementing, and sustaining security solutions designed to protect our systems against constantly evolving cyber threats, with a focus on transitioning … firewalls•Proactive collaboration with InfoSec to align CrowdStrike and other key security platforms with our security strategy and policies•Leading or participating in incident response efforts, conducting root cause analysis, and developing runbooks for incident handling•Monitoring for security threats, analysing alerts, and responding to incidents using ...

high-quality production code, and reviews and debugs code written by others. Adds to team culture of diversity, opportunity, and respect. Develops and maintains incident response procedures, including root cause analysis and postmortem documentation. Required Qualifications, Capabilities, and Skills: Experience with formal training or certification on software engineering … concepts. Strong understanding of SRE principles, including SLIs, SLOs, error budgets, and incident management. Ability to manage highly technical team of Site Reliability Engineers. Experience leading teams in the safe use of enterprise-authorized AI capabilities within the work environment for reliability engineering workflows, including validation habits and awareness ...

British Airways is seeking a Cyber Incident Lead to join our security team. You’ll coordinate incident response across the BA estate, working 24/7 to identify, contain, and recover from cyber incidents. You’ll develop processes, present technical concepts to varied stakeholders, and help strengthen ...

Matter Expert (SME) forthe cyber security analysts, the Senior Cyber Security Analyst willguide analysts in performing Business As Usual (BAU) activities,including daily checks, incident response (IR), event monitoring,and response etc.Additionally, they will work closelywith team lead/manager to manage workloads, drive initiatives,uplift ...

real-world attack techniquesMap customer log sources to detection use cases to assess coverage and identify gapsDesign and implement SOAR automations, integrations and response workflowsDevelop and document customer incident response playbooks aligned to detection outputsTranslate threat intelligence and operational learnings into improved detections and automationsDeliver detection … MITRE ATT&CK, including use case design, ruleset development and coverage assessmentLog source mapping and normalisation to support detection use casesNetwork Detection and Response technologies such as Vectra AI, Corelight or similarCloud security and telemetry, particularly within Azure environmentsThreat intelligence integration and enrichment to support detection and responseDevelopment ...

performance of core business platforms Oversee 1st/2nd line support escalation, acting as the senior point of contact for critical issues Lead major incident management, root cause analysis, and post‐incident reviews Technical Leadership Provide hands‐on technical guidance across cloud infrastructure, application support, and DevOps practices … develop a team of Platform Operations Engineers, setting clear objectives and performance standards Manage team capacity, shift coverage (including North American EST support), and incident response models Foster a high‐performance, accountable, and collaborative team culture Drive hiring, onboarding, and ongoing development of team members Stakeholder Management ...