951 to 975 of 2,368 Incident Response Jobs in the UK

critical healthcare data that supports precision medicineKey ResponsibilitiesDesign and develop threat-led detections using threat intelligence and threat-hunting outputsCreate novel analytic techniques for incident detectionCollaborate with an MSP SOC to maintain and tune the detection catalogueBuild automated reporting dashboards using Microsoft Sentinel workbooksSupport security initiatives including … Employment Business and an Employment Agency as defined within The Conduct of Employment Agencies & Employment Businesses Regulations 2003.Keywords: Cyber Threat Engineer, Detection & Response Engineer, SIEM Engineer, Security Detection Engineer,T hreat Hunting Engineer, Security Automation Engineer, SOC Engineer, Incident Response Engineer, Cloud Security Engineer, Network Security Engineer ...

environment rather than bolted on afterwards. You’ll be involved in 3rd line support, system hardening, vulnerability remediation, patching, access controls, monitoring and incident response , alongside infrastructure upgrades and wider technology projects. We’re looking for someone with around 3–5+ years’ experience across infrastructure, security engineering …/IP, DNS, firewalls, VPNs and proxies Terraform, Ansible, Python or Bash Docker and Kubernetes NIST, CIS Benchmarks and/or ISO 27001 Security incident investigation and remediation You don’t need to tick every box. What matters is a strong infrastructure background, credible hands-on security experience ...

environment rather than bolted on afterwards. You’ll be involved in 3rd line support, system hardening, vulnerability remediation, patching, access controls, monitoring and incident response , alongside infrastructure upgrades and wider technology projects. We’re looking for someone with around 3–5+ years’ experience across infrastructure, security engineering …/IP, DNS, firewalls, VPNs and proxies Terraform, Ansible, Python or Bash Docker and Kubernetes NIST, CIS Benchmarks and/or ISO 27001 Security incident investigation and remediation You don’t need to tick every box. What matters is a strong infrastructure background, credible hands-on security experience ...

Prevention, Intellectual property storage, and SaaS application security. Alongside wider corporate security technical controls.Automation & Engineering: Write scripts and build tools to automate security workflows, incident response tasks, and audit evidence collection for compliance.Cross-Functional Collaboration: Work with IT and business operations to integrate security tools into everyday workflows. … engineering standards.Minimum QualificationsBachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.5+ years’ experience in Security Engineering, Corporate Security, Detection & Response, or a related field.Hands-on experience administering IAM platforms (e.g. Okta, GoogleWorkspace).Deep hands-on experience with GoogleWorkspace productsPractical hands-on experience with Cloud platforms ...

report directly to the CTO and have broad scope across the platform (from CI/CD pipelines to multi‐tenant APIs to incident response on authentication flows). Responsibilities Own the secure SDLC: drive SAST, dependency scanning, secrets detection, and PR‐blocking standards across every repository. Harden … Threat‐model product features before they ship, new Auth provider, expanded multi‐tenant APIs, connector executions, agent tool‐calling paths etc. Build detection and response capability around credential and authentication flows, with observability that closes incidents fast. Partner with engineering to raise the bar day‐to‐day: architecture reviews ...

driving continuous improvement across the security landscape. Key Responsibilities Lead and develop the organisation's cyber security strategy and roadmap Manage cyber security operations, incident response and investigations Drive improvements across security monitoring, threat detection and vulnerability management Develop and implement security policies, standards and governance frameworks Ensure … Manager, Security Operations Manager or similar leadership role Strong understanding of cyber security governance, risk management and compliance Experience managing security incidents and cyber response activities Experience leading or developing Security Operations Centre (SOC) capabilities Excellent stakeholder management and communication skills Experience operating within complex and highly regulated environments ...

vulnerabilities are identified, negotiated, and remediated swiftly. Strategic Partnership: Work hand‐in‐hand with our Managed Service Provider (MSP) for 24/7 monitoring, incident response, and threat resolution. Capability maturity: Conduct gap analysis of current and future tooling to define improvements in tooling. Tool Ownership … Salesforce (or a strong willingness to master the latter). Certifications: CISM, CISSP, or equivalent professional qualifications. Strategic Mindset: Proven experience in security strategy, incident management, and infrastructure security, vulnerability management and endpoint security. Communication: The ability to translate complex technical risks into "plain English" for non‐technical stakeholders. ...

stakeholders, architects, QA, DevOps, security, data and infrastructure teams. Drive production readiness including CI/CD, observability, resilience, security, automated testing, release management, runbooks, incident response and root cause analysis. Mentor engineers and senior consultants, building capability in modern engineering practices and supporting career development across the team. … integration SQL, NoSQL, data integration, streaming/event platforms such as Kafka, API management, data quality and operational data analysis Production support Monitoring, logging, incident management, RCA, performance tuning, runbooks, ServiceNow/Jira, SRE‐aligned operational readiness Experience delivering technology change for banking, insurance, wealth, asset management, risk, finance ...

alerting, and dashboards Define and improve SLIs, SLOs, and reliability metrics Proactively identify and resolve performance, availability, and reliability issues Lead and contribute to incident response, troubleshooting, and root cause analysis Automate operational processes and eliminate repetitive manual tasks Work closely with software engineers to improve deployment processes … understanding of metrics, logging, tracing, alerting, and system health Experience troubleshooting complex production environments Understanding of SLIs, SLOs, SLAs, and error budgets Experience with incident management and root cause analysis Good understanding of cloud networking, security, and infrastructure fundamentals Strong scripting/automation skills A strong understanding of reliability ...

laptops, mobile) are configured securely.Vulnerability Management: Run and remediate vulnerability scans; don’t just report the issues; help figure out how to fix them.Incident Response: Be a key part of our incident response team, investigating alerts and refining our "playbooks" for future threats.Identity & Access: Manage the lifecycle ...

Improving detection rules, correlation logic and SOC playbooks Investigating recurring alerts and reducing false positives Supporting vulnerability management and remediation activity Contributing to post-incident reviews and lessons learned Producing incident, vulnerability and SOC reporting Working closely with wider infrastructure, network, architecture and development teams Sharing knowledge … years' experience within a SOC or security operations environment, with solid hands-on exposure to areas such as: Security monitoring and alert triage Incident response SIEM platforms EDR technologies Threat analysis/threat intelligence Vulnerability management Detection engineering or SIEM tuning I'm particularly interested in speaking with ...

endpoint infrastructure Take ownership of complex technical problems through to resolution, coordinating with internal teams and third-party suppliers where required Participate in major incident management, providing technical expertise and supporting rapid service restoration Provide technical input into projects, migrations, upgrades and new technology deployments Identify opportunities to improve … security technologies Cyber Essentials best practices Endpoint protection and device security Email security and threat protection Backup and disaster recovery solutions Ransomware protection and incident response principles Infrastructure & Networking Windows Server administration Active Directory and Group Policy Server virtualisation (Hyper-V, VMware or similar) Firewalls and VPN technologies ...

through design conversations, code review, and pairing in a fully remote setup.Participate in on-call (EMEA rotation) for the services you build, and treat incident response and post-incident learning as part of the craft.Contribute to open source. Pyroscope is OSS. You will engage the community, review … company-funded usage budget so you can iterate quickly without unnecessary friction.We encourage pragmatic AI-assisted development: faster prototyping, test generation, refactors, documentation, and incident follow-ups, always paired with strong code review and quality standards. You'll also have access to frontier models (e.g., GPT-5.6, Claude Fable ...

design conversations, code review, and pairing in a fully remote setup. Participate in on-call (EMEA rotation) for the services you build, and treat incident response and post-incident learning as part of the craft. Contribute to open source. Pyroscope is OSS. You will engage the community … funded usage budget so you can iterate quickly without unnecessary friction. We encourage pragmatic AI-assisted development: faster prototyping, test generation, refactors, documentation, and incident follow-ups, always paired with strong code review and quality standards. You'll also have access to frontier models (e.g., GPT-5.6, Claude Fable ...

embedded from the outset. Monitor developments in AI regulation and advise on their implications for the Group's activities. Manage Data Breach and Incident Response Lead the legal response to personal data incidents and breaches, including severity assessment and advising on regulatory notification obligations. Manage notifications … within statutory timeframes and coordinate any required communications to affected data subjects. Coordinate breach response with Information Security, Compliance and Communications teams to ensure a timely and legally robust response. Manage proactive and reactive engagement with the ICO, including regulatory investigations and formal inquiries. Deliver Privacy Training and Awareness ...

upgrades, digital transformation, operational changes and AI rollouts. Identify and address legal and regulatory considerations across privacy, digital, cybersecurity and outsourcing domains. Cybersecurity & Incident Response Advise on cybersecurity legal obligations and internal policies. Support breach response, regulatory notifications, client communications and incident remediation. Lead on legal … dedicated line designed exclusively to assist job seekers with disabilities to apply online. Only messages left for this purpose will be considered. A response to your request may take up to two business days. #J-18808-Ljbffr ...

mitigating vulnerabilities and ensuring compliance with data protection laws (e.g., GDPR). Establish, implement, and maintain security policies, standards, and operational controls; support audits, incident response, vulnerability remediation, and ensure effective use of security tooling (eg., Sentinel, Defender for Cloud, SIEM). Work closely with Operational Risk, DevOps ...

testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct incident response planning and tabletop exercises Advise C-level executives on security strategy and risk management Requirements 8+ years in information security with consulting ...

Terraform/AWS CDK), container technologies such as Docker and Kubernetes, and scripting or programming languages including Python, Bash, C# or Go. Experience in incident response, threat hunting, detection engineering, digital forensics and DevSecOps environments would be highly advantageous. This contract will be inside IR35 ...

provisioning and deployment workflows (Terraform, GitHub Actions, GitOps) Package and deploy applications to customer environments Implement and optimise observability tooling (Prometheus, Grafana, Loki) Support incident response, monitoring, and backup/recovery planning Mentor project teams in DevSecOps practices and environment management Ensure cloud environments are secure, performant ...

Conditional Access, Identity Protection and privileged access Supporting vulnerability management and remediation Implementing data protection controls using Microsoft Purview Supporting threat monitoring, detection and incident response Providing security input into technology projects and architecture decisions Supporting security frameworks including NCSC CAF, ISO 27001, NIST CSF and CIS Controls ...

security controls Managing Entra ID security, including Conditional Access, Identity Protection and privileged access Supporting vulnerability management and remediation Supporting threat monitoring, detection and incident response Providing security input into technology projects and architecture decisions Supporting security frameworks including NCSC CAF, ISO 27001, NIST CSF and CIS Controls ...

proposed technology changes and provide recommendations to stakeholders. Promote security awareness and influence teams to adopt security best practices. Assist with cyber security incident response by identifying architectural weaknesses and recommending improvements. Continuously monitor emerging cyber threats, vulnerabilities, technologies, and regulatory changes to improve the organisation's security ...

observability capabilities. * Ensure platform resilience, availability and operational readiness. * Manage configuration, secrets and environment controls. * Embed security best practice throughout the delivery lifecycle. * Support incident response, troubleshooting and continuous improvement activities. * Work across engineering and assurance teams to ensure environments meet security and operational requirements. * Drive automation ...

Support governance, risk, compliance, and assurance activities. Contribute to security roadmaps and continuous improvement initiatives. Provide guidance on cloud security monitoring, threat management, and incident response capabilities. Support managed cloud security service engagements where required. Essential Skills & Experience Proven experience working as a Security Architect within complex enterprise ...