901 to 925 of 2,371 Incident Response Jobs in the UK

Relationships: CTTO - Direct line manager. Governance, infrastructure risk, and FinOps accountability. CISO (Head of Security) - Close working relationship. Security operations implementation, IAM policy, and incident escalation. Director of Platform Engineering - Coordinates on DevSecOps integration and CI/CD infrastructure requirements. • Head of Infrastructure & Cloud - Direct report. Hosting strategy, cloud … internal IT operations across a distributed estate - multiple sites or subsidiaries Commercial awareness: has owned cloud cost management and FinOps outcomes with measurable results Incident management and on-call leadership - has run major incident response at group level Strong vendor management: MSP relationships, colocation contracts, cloud provider ...

role in helping our customers achieve greater visibility, performance, and reliability across their IT estates—contributing to their operational success through proactive insight and incident prevention.What you'll doDesign, implement, and manage observability solutions using industry-leading tools such as Dynatrace (primary), Grafana, and SplunkCollect and analyse telemetry data … tools (e.g. ServiceNow) and CI/CD pipelines to enable proactive alerting and resolution workflowsAct as a Monitoring & Observability SME within customer delivery teamsSupport incident response activities and postmortems by identifying patterns, root causes, and optimisation opportunitiesWork collaboratively with cross-functional teams to define and implement best practices ...

with Linux/Unix systems administration and hardening, Windows systems security and Group Policy management, Network security: firewalls, VPNs, network segmentation, routing, Endpoint Detection & Response (EDR) tools (CrowdStrike, Microsoft Defender for Endpoint, etc.), SIEM platforms (Splunk, ELK Stack, Datadog), Identity & Access Management (IAM) concepts and tools (Active Directory, OKTA … deep understanding of security control frameworks, risk management and governance, including Risk management frameworks (NIST, ISO 27001, COBIT), security control design and documentation, incident response procedures and evidence preservationYou have excellent stakeholder management skills, with the ability to communicate effectively with technical teams, auditors and senior business leadersWhat ...

role in helping our customers achieve greater visibility, performance, and reliability across their IT estates—contributing to their operational success through proactive insight and incident prevention. What you'll do Design, implement, and manage observability solutions using industry-leading tools such as Dynatrace (primary), Grafana, and Splunk Collect … ServiceNow) and CI/CD pipelines to enable proactive alerting and resolution workflows Act as a Monitoring & Observability SME within customer delivery teams Support incident response activities and postmortems by identifying patterns, root causes, and optimisation opportunities Work collaboratively with cross-functional teams to define and implement best ...

risks, influencing product strategy, and serving as the subject matter expert for the SecOps and Vulnerability Management strategy as well as embedding detection and response capabilities on a modern technology stack. You will collaborate globally, supporting audit, regulatory, and risk initiatives, with a focus on cloud computing and emerging … vulnerability management platform that automatically prioritizes infrastructure and application flaws utilizing real-world exploit intelligence and asset criticality.Build and optimize SOAR playbooks to automate incident response workflows, accelerate threat containment, and streamline vulnerability ticketing.Provide senior technical escalation support during critical security incidents and drive post-incident root ...

management lifecycle for the UK estate, scanning, triage, prioritisation, patching and reporting, working with global colleagues to drive risk down and evidence progress. Security Incident Response: Act as a senior responder for security alerts and incidents, leading investigation, containment and post-incident review alongside the global ...

risks, influencing product strategy, and serving as the subject matter expert for the SecOps and Vulnerability Management strategy as well as embedding detection and response capabilities on a modern technology stack. You will collaborate globally, supporting audit, regulatory, and risk initiatives, with a focus on cloud computing and emerging … management platform that automatically prioritizes infrastructure and application flaws utilizing real-world exploit intelligence and asset criticality. Build and optimize SOAR playbooks to automate incident response workflows, accelerate threat containment, and streamline vulnerability ticketing. Provide senior technical escalation support during critical security incidents and drive post-incident ...

703Skills: Technology Resilience, Operational Resilience, Incident Management, Problem Management, Change Management, ServiceNow, Business Continuity, Disaster Recovery, Stakeholder Management, Financial Services, Cloud (AWS/Azure/Oracle), Root Cause Analysis, Regulatory Compliance, DORA, KPI/SLA Management, Release Management, Business Impact Analysis, Senior Leadership, ITIL 4, ISO22301, ISO/… around 25 through a period of genuine transformation.What you'll be doing:Own and execute the Technology Resilience and Production Operations strategy, including Incident, Problem, Event and Change Management, driving automation and an agile approach to improve stability, security and speed at scaleBuild and govern an internationalised Centre ...

access provisioning in partnership with ITSM. Implement, operate and continually improve cyber defences across endpoints and SaaS platforms: vulnerability management, EDR/SIEM, and incident response. Manage vendors and core infrastructure partners, ensuring cost-effective delivery, timely patching, and contract governance. Maintain secure, high-performance connectivity for offices, labs … similar) Endpoint Management (Intune, Jamf, or similar) Corporate Networking (LAN/Wi-Fi/VPN/firewalls) Cyber Security Operations (EDR, SIEM, vulnerability management, incident response) Demonstrated ability to define and enforce standards and processes that combine agility with control. Strong vendor and stakeholder-management capability. Excellent communication ...

compliance and engagement with Qualified Security Assessors (QSAs).* Drive cyber awareness programs and phishing simulations to embed a security-aware culture.* Manage security incident response planning and coordinate with Security Operations Centre (SOC).* Report regularly to PayTech Executive Leadership and Edenred Group CISO on security program … Azure, GCP).* Excellent communication skills, able to convey complex security topics to non-technical stakeholders.* Pragmatic, calm, and resilient under pressure during incident management.Be part of a dynamic and strategic security leadership team within a pioneering FinTech environment. Influence the protection of critical technologies and data, contribute ...

compliance and engagement with Qualified Security Assessors (QSAs).* Drive cyber awareness programs and phishing simulations to embed a security-aware culture.* Manage security incident response planning and coordinate with Security Operations Centre (SOC).* Report regularly to PayTech Executive Leadership and Edenred Group CISO on security program … Azure, GCP).* Excellent communication skills, able to convey complex security topics to non-technical stakeholders.* Pragmatic, calm, and resilient under pressure during incident management.Be part of a dynamic and strategic security leadership team within a pioneering FinTech environment. Influence the protection of critical technologies and data, contribute ...

compliance and engagement with Qualified Security Assessors (QSAs). Drive cyber awareness programs and phishing simulations to embed a security-aware culture. Manage security incident response planning and coordinate with Security Operations Centre (SOC). Report regularly to PayTech Executive Leadership and Edenred Group CISO on security program … Azure, GCP). Excellent communication skills, able to convey complex security topics to non-technical stakeholders. Pragmatic, calm, and resilient under pressure during incident management. Why Join Us? Be part of a dynamic and strategic security leadership team within a pioneering FinTech environment. Influence the protection of critical technologies ...

responsible for identifying, analyzing, and responding to threats targeting Cloudflare and its customers. INTERDICT encompasses three main sub-functions: PhishGuard: Email Managed Detection and Response (MDR) service. Cloudflare Managed Defense (CMD): 24/7 monitoring, detection, and mitigation of security events across Cloudflare products. Detection Engineering: Develops, maintains … cohesive operational security function that provides continuous, proactive protection against network, application, and email-based threats. This integrated structure ensures rapid detection, coordinated response, and improved security outcomes for Cloudflare and its customers. About The Role Senior Response Engineer (Network Security focused) within the Cloudflare Managed Defense Center ...

cloud‐first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud‐native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2 … practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign‐On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding ...

cloud-first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2 … practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding ...

tooling, and platform controls. On the information security side, you'll provide the technical expertise that underpins our ISO 27001 and Cyber Essentials certifications, incident response, and day-to-day governance. If you've always wanted to work somewhere that treats security as a first-class concern rather … first point of contact for infrastructure queries across the team, maintaining clear and current documentation accessible to all colleagues. Information Security Provide the technical response to security incidents, including containment, eradication, and recovery, escalating to the CFO and Head of Engineering as required. Conduct DPIA technical reviews ...

particularly across Kubernetes and container images Triage and validate vulnerabilities, including developing PoCs where appropriate Manage IAM and key management controls Support product security incident response, root-cause analysis and remediation Develop detection engineering capabilities, IDS/IPS rules and technical runbooks Monitor emerging threats and continuously improve ...

spikes and technical investigations into emerging threats, tools, and best practices. Review designs and implementations to ensure compliance with security principles and policies. Support incident response, vulnerability management, and remediation activities where required. Provide guidance and mentoring to delivery teams on security best practices and secure development approaches. ...

processes and improve the consistency of infrastructure and application deployments. Support development teams with infrastructure design, troubleshooting, performance analysis, and production readiness. Participate in incident response, root-cause analysis, and preventative improvement work. Embed security, access control, secrets management, and governance requirements into platform tooling. Collaborate with technology ...

central topology and the replication between them. Own infrastructure as code, CI/CD pipelines and automated, repeatable deployments. Implement observability, monitoring, alerting and incident response across distributed clusters using Prometheus, Grafana and Loki. Harden systems and embed the security controls needed for accreditation, covering network policy, secrets ...

Support the evolution of modern identity and access security models across the platform.Contribute to platform resilience, continuity planning and recovery readiness.Work closely with cyber incident response teams on security events, investigations and risk management activities.Help define and communicate security metrics, risk indicators and platform security trends to senior ...

managing WAF infrastructure using Terraform or other Infrastructure as Code (IaC) technologies.Proven ability to support large-scale production environments, with responsibility for change implementation, incident response, and threat mitigation.Bachelor's degree in Computer Science, Engineering, Information Technology, or a related field preferred, or equivalent industry experience.Strong industry expertise ...

infrastructure using Terraform or other Infrastructure as Code (IaC) technologies. Proven ability to support large-scale production environments, with responsibility for change implementation, incident response, and threat mitigation. Bachelor's degree in Computer Science, Engineering, Information Technology, or a related field preferred, or equivalent industry experience. Strong industry ...

compliance with client’s security standards and technical standards. Enable and govern Infrastructure as Code (IaC) practices across teams and environments and contribute to incident response, patching cycles and compliance reporting, ensuring lessons learned are captured and actions tracked Also, document security processes, controls and operational runbooks ...

ensure compliance with client’s security standards and technical standards.Enable and govern Infrastructure as Code (IaC) practices across teams and environments and contribute to incident response, patching cycles and compliance reporting, ensuring lessons learned are captured and actions tracked Also, document security processes, controls and operational runbooks ...