1 to 25 of 74 Incident Response Jobs in the East of England

Overview: Interested in defending a global tech company from the latest cyber threats? Arm is seeking a passionate, experienced Senior Manager of Cybersecurity Incident Response to join our growing Cyber Defence Operations (CDO) team, protecting Arm against current and future cyber-attacks! Situated within Arm's Enterprise Security … function, this role will lead Arm's global incident response team across the US, UK and India, including acting as a senior technical and operational leader for major cyber incidents. CDO enables Arm to be successful, delivering scalable and defendable security services that not only provide ...

ongoing and long-term thereafter) IR35 status: Inside IR35 (Umbrella) Cyber Threat Operations Specialist Job Description: An opportunity has arisen in the Active Defence Incident Response Team within Digital Excellence (DEX) for a Cyber Threat Operations specialist. Supporting the Active Defence & Incident Response Manger in assisting … cyber security environment and provide robust threat hunting, detection Engineering and analysis within a high performing team environment. Responsibilities: To support the Active Defence Incident Response Manager in assisting Information Management UK meet the challenges and demands of countering the Cyber Threat. Support for the operational functions ...

opportunity has arisen in the Active Defence Incident Response Team within Digital Excellence (DEX) for a Cyber Threat Operations specialist. Supporting the Active Defence & Incident Response Manger in assisting DEX meet the challenges and demands of countering the Cyber Threat. The successful applicant will drive … cyber security environment and provide robust threat hunting, detection Engineering and analysis within a high performing team environment. Responsibilities: To support the Active Defence Incident Response Manager in assisting Information Management UK meet the challenges and demands of countering the Cyber Threat. Support for the operational functions ...

continuous improvement of the Bango Platform end-to-end — from the infrastructure and pipelines that build and deploy it, to the observability and incident response that keep it running to agreed service levels. You combine three things that have historically sat in separate teams: platform and cloud infrastructure … engineering, automation and delivery pipeline ownership, and proactive/reactive reliability engineering including incident response and customer impact management. You design, build and operate the automation, observability and platform capabilities that other engineering teams rely on, and you are equally comfortable diagnosing a live incident ...

robust Information Security Management System (ISMS) aligned to ISO/IEC 27001. You will act as the central authority for information security governance, incident management and continuous improvement across the organisation. What You'll Be Doing Governance & Compliance: Implement and enforce client ISMP requirements across GSA, including security assurance … core IT controls, including identity and access management, MFA, endpoint protection, logging, monitoring and baseline security configuration across office and operational locations. SOC Integration & Incident Management: Oversee security monitoring, log availability, alerting and incident response processes, ensuring effective integration with the client SOC and any managed security ...

tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security event reporting, and content maintenance (tuning). What we are looking for Key Responsibilities Serves as a senior member … optimization of enterprise security platforms, overseeing lifecycle management including break-fix, patching, version upgrades, and integration with broader security ecosystems. Directs complex security incident response efforts across multiple vectors-endpoint protection, EDR, malware analysis, network and computer forensics-ensuring rapid containment and root cause analysis. Designs and executes ...

busy Security Operations Centre while remaining hands-on with technical investigations. You will act as the senior escalation point during your shift, leading incident response, mentoring analysts and ensuring high standards across investigations. You will also: Lead Major Incident investigations and technical response activities Analyse advanced … Lead Strong experience leading complex cyber security investigations Commercial experience with Microsoft Sentinel and Splunk Enterprise Security Excellent understanding of MITRE ATT and CK, incident response and threat-informed defence Strong networking knowledge including TCP/IP, DNS, HTTP/S, SMTP, LDAP and VPN technologies Experience analysing ...

capabilities for critical services. You Have: 8+ years of experience leading or advising on enterprise technology, resilience, cybersecurity, infrastructure, disa ster recovery, business continuity, incident response, or crisis management disciplines for large, complex European or global organizations Experience with advising executive stakeholders and leading senior-level advising … capabilities, and develop ing practical improvement roadmaps that help clients harden infrastructure, improve alignment to NIST CSF categories, strengthen recovery and continuity strategies, test response capabilities, and mature program governance over time Experience in a consult ing or corporate advisory role, including with a top-tier consulting company ...

Bango Platform. You hold everything expected of a Site Reliability Engineer — owning reliability end-to-end across the infrastructure, delivery pipelines, observability and incident response that keep the platform running to agreed service levels — but at greater scope, complexity and influence, and you take responsibility for lifting … that have historically sat in separate teams: platform and cloud infrastructure engineering, automation and delivery pipeline ownership, and proactive/reactive reliability engineering including incident response and customer impact management. What sets the senior role apart is not simply doing this work to a higher standard, but becoming ...

will contribute to the evaluation and implementation of solutions that drive resilience and risk reduction across the business.In the event of a disruption or incident, you will support the coordination of response activities, assist with root cause analysis, and help prepare communications for internal stakeholders and key customers. … This includes contributing to incident reports and supporting the presentation of findings and remediation plans.As a Business Continuity and Risk Analyst, you will build effective working relationships across Bango teams, helping to keep colleagues informed of policy and process changes and supporting them in identifying, managing, and escalating functional ...

with experience developing assurance artefacts such as SyOPs, RMADs, Security Impact Assessments, risk assessments, and accreditation evidence. Experience leading assurance initiatives, audits, control assessments, incident response activity, and vulnerability management using tools such as Nessus, Trivy, Tenable, or similar platforms. Ability to brief and influence senior stakeholders, mentor … Security Impact Assessments, Security Management Plans, risk assessments, and governance documentation. Drive maturity of assurance processes, tooling, reporting, and governance across multiple programmes. Lead incident response capability development, including response plans, playbooks, testing, exercising, and Tabletop Exercises (TTXs). Manage vulnerability, risk, audit, control assessment, and compliance ...

queries and monitoring logic across cloud, endpoint, network and application environments. Develop tooling and automation to improve security telemetry, alert enrichment, investigation workflows and response times. Conduct threat hunting using adversary behaviours, TTPs and frameworks such as MITRE ATT&CK, incorporating findings into security controls and detections. Create … continuously improve incident runbooks, playbooks and detection processes based on findings from real-world investigations. Work with the external SOC and internal engineering teams to strengthen monitoring coverage, investigate escalations and continuously improve detection and response capability. Participate in an on-call rotation. Requirements Hands-on experience investigating ...

Demonstrable experience as a SOC Analyst Strong hands-on experience with SIEM, including Microsoft Sentinel Experience monitoring, triaging, and investigating security incidents Knowledge of incident response lifecycle and root cause analysis Experience with Microsoft Defender (essential) KQL knowledge desirable Ability to work independently and manage complex cyber investigations … Technical Exposure: IBM QRadar Microsoft Defender/EDRMicrosoft Sentinel (essential) Microsoft Entra ID/Azure AD Email threat response Incident Experience: Phishing & Business Email Compromise Malware & Ransomware Account Compromise Privilege Escalation Insider Threats DLP & Data Exfiltration Alerts Suspicious Authentication Activity Knowledge of: MITRE ATT&CK, Cyber Kill Chain ...

easyJet's information and information systems through effective security engineering, tooling and technical controls. Working closely with colleagues across Technology, Security Operations and Incident Response, you'll help ensure our security services remain resilient, effective and ready to support the evolving needs of the business. THE ROLE … security control improvement activities. Producing and maintaining technical documentation, runbooks and operational guidance. Supporting security investigations and remediation activities alongside Security Operations and Incident Response teams. Providing security-focused technical support and consultancy to Technology teams across the business. Contributing to the development and delivery of the security ...

changing and challenging world in which we operate. Critical accountabilities include: Develop and lead the organisation's global Business Continuity, Crisis Management and Incident Response strategy, ensuring resilience objectives are embedded across all business functions and regions. Own and continuously enhance the global BCR framework, including business impact … analysis, continuity and recovery planning, testing and assurance, threat awareness and horizon scanning, and programme maturity improvement. Take a lead role in the response to major incidents and crises, providing governance and advice, executive support, and post-incident reviews to strengthen organisational preparedness and recovery capabilities. Drive ...

team's time-zone spread to ensure responsive support well beyond any single region. This position owns end-to-end employee support operations including incident response, request fulfillment, onboarding, offboarding, and executive‐level support. The Technical Support Manager will drive continuous improvement of support workflows, knowledge bases … coverage model using EMEA and India working hours, with well‐defined cross‐region handoff processes Own end‐to‐end employee support operations including incident response, request fulfillment, onboarding, offboarding, and white‐glove support for leadership Define and maintain SLAs and quality standards; track and report on ticket volume ...

team's time-zone spread to ensure responsive support well beyond any single region. This position owns end-to-end employee support operations including incident response, request fulfillment, onboarding, offboarding, and executive-level support. The Technical Support Manager will drive continuous improvement of support workflows, knowledge bases … coverage model using EMEA and India working hours, with well-defined cross-region handoff processesOwn end-to-end employee support operations including incident response, request fulfillment, onboarding, offboarding, and white-glove support for leadershipDefine and maintain SLAs and quality standards; track and report on ticket volume, resolution time ...

investigating and responding to threats while strengthening the controls that protect our systems, networks and data. Your responsibilities will span security monitoring, risk review, incident response and liaison with local and national partners. You will also contribute to the wider ICT service, including Microsoft 365 administration, infrastructure updates … Security Analyst - Key Responsibilities: - Monitor security systems, identify and investigate cyber threats, and respond to incidents while maintaining clear documentation and up-to-date incident response procedures - Design, implement, maintain and monitor security measures across systems and networks, including firewalls, intrusion detection, anti-virus, authentication, log management ...

effective. You will help design, implement, maintain and monitor security measures across our systems and networks. You will also keep cyber security documentation and incident response procedures up to date, support regular testing and help deliver practical cyber security awareness and training for employees and Councillors. Alongside your … service to all service users, including employees, members and other customers. To ensure all members of the ICT team are aware of the Cyber Incident response and escalation process and support the Technical Delivery Manager to regularly test and review these processes. To keep abreast of emerging threats ...

ways: Provide leadership and oversight of data center operations across EMEA, ensuring safe, secure, and compliant execution in a 24x7 mission-critical environment. Lead incident response, change execution, and escalation coordination across infrastructure, network, facilities, and security teams. Oversee vendor access, onsite activities, and service delivery to maintain … ways: Provide leadership and oversight of data center operations across EMEA, ensuring safe, secure, and compliant execution in a 24x7 mission-critical environment. Lead incident response, change execution, and escalation coordination across infrastructure, network, facilities, and security teams. Oversee vendor access, onsite activities, and service delivery to maintain ...

testing programme, managing remediation plans and analysing security data, vulnerabilities and incidents to drive continuous improvement. Implement and monitor KRIs and control effectiveness. Enhance Incident Preparedness Develop and lead incident response planning, including tabletop exercises, working closely with operational, technical and information governance teams to improve resilience. … knowledge of the Data Security Protection Toolkit Understanding and implementation experience COBIT 2019 Skills/Experience Essential Significant experience of protective monitoring and security incident management Previous experience within large complex organisation in related area of activity Demonstrable experience of producing qualitative work to aggressive timescales Demonstrable experience ...

monitoring KPI's · Ensure compliance with IT security policy standards, including encryption, secure disposal, build hardening, monitoring, patching and access controls · Lead security incident response and contribute to major incident management control · Ensure effective communications outside of the IT team · Production of an appropriate IT infrastructure strategy ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

operation and continuous improvement of EMBL-EBIs cybersecurity capabilities. Working alongside infrastructure, platform and service teams, you will be responsible for vulnerability management, incident response, security monitoring, operational security processes and the implementation of technical security controls. This is a hands-on technical role focused on protecting EMBL … Tenable, Qualys or Rapid7. Familiarity with SIEM and security automation platforms such as Microsoft Sentinel, Splunk or Elastic. Experience implementing endpoint detection and response (EDR/XDR) technologies. Understanding of Identity Governance and Privileged Access Management. Knowledge of cyber security frameworks and implementing and maintaining effective security controls. Experience ...