1 to 25 of 30 Incident Response Jobs in the East of England

Overview:Interested in defending a global tech company from the latest cyber threats? Arm is seeking a passionate, experienced Senior Manager of Cybersecurity Incident Response to join our growing Cyber Defence Operations (CDO) team, protecting Arm against current and future cyber-attacks! Situated within Arm’s Enterprise Security … function, this role will lead Arm’s global incident response team across the US, UK and India, including acting as a senior technical and operational leader for major cyber incidents.CDO enables Arm to be successful, delivering scalable and defendable security services that not only provide for the protection ...

About the role: As a Senior Cyber Incident Manager at Tesco, you will command the response to high-severity cyber incidents, safeguarding a complex retail ecosystem that serves millions of customers globally. Operating at the forefront of cyber defence, you will lead crisis response efforts, ensuring decisive … action, minimal disruption, and protection of customer trust. This role is pivotal in shaping Tesco’s incident management maturity, driving strategic readiness and resilience across the organisation. You will combine operational excellence with forward-looking innovation to ensure Tesco remains a leader in cyber incident response.What ...

busy Security Operations Centre while remaining hands-on with technical investigations. You will act as the senior escalation point during your shift, leading incident response, mentoring analysts and ensuring high standards across investigations. You will also: Lead Major Incident investigations and technical response activities Analyse advanced … Lead Strong experience leading complex cyber security investigations Commercial experience with Microsoft Sentinel and Splunk Enterprise Security Excellent understanding of MITRE ATT and CK, incident response and threat-informed defence Strong networking knowledge including TCP/IP, DNS, HTTP/S, SMTP, LDAP and VPN technologies Experience analysing ...

network estate (including Cisco Meraki). The role is hands-on and operational, partnering with IT teams to implement security controls, supportmonitoringand incident response through Sophos MDR, and improve cyber resilience by supporting Disaster Recovery (DR) testing and Business Continuity (BC) readiness. Key Responsibilities Cloud Security (Azure) Implement … whererequiredand ensure changes follow change control. Enable and review network security logging/alerting (e.g., syslog/SIEM integrations where applicable). Monitoring, Detection & Incident Response (Sophos MDR) Act as the internal technical point of contact for Sophos MDR and ensure smooth collaboration with MDR analysts. Maintain coverage ...

team in Peterborough to help protect Carter Jonas’s systems, data, and information assets. The role combines hands-on security operations with vulnerability management, incident response, cyber risk, governance, assurance and continual improvement of the organisation’s security posture. The post holder will work with IT, Compliance … logs and events across key platforms including SIEM, EDR/XDR, Microsoft Defender, Microsoft Sentinel, email security, cloud security and network monitoring tools.Support timely incident response, containment, remediation, recovery and post-incident review activity with internal teams and third-party providers.Maintain the vulnerability management programme, including scanning ...

enterprise environments. The role combines technical leadership, people management, cyber defence strategy, stakeholder engagement, service delivery, and business growth responsibilities.The position leads security monitoring, incident response, security tooling, compliance initiatives, and operational resilience programmes while ensuring alignment with business and customer objectives.Key ResponsibilitiesSecurity Operations & Incident ManagementOwn incident response, escalation management, and major security incident coordination.Drive continuous improvement of detection and response capabilities.Ensure SLA, KPI, and service commitments are consistently achieved.Security Engineering & Technology LeadershipProvide strategic oversight for SIEM, EDR, DLP, Email Security, Cloud Security, and Security Validation platforms.Lead onboarding of new log sources ...

exposure to ISO 27001, information security frameworks, security audits, governance, risk management and compliance. Experience working with Cyber Essentials, supplier assurance, security policies and incident response would also be advantageous. Whether you're currently a Senior Information Security Analyst, Senior Cyber Security Analyst, Security Engineer, Infrastructure Security Engineer … Microsoft 365 Security, Active Directory, Firewalls, Vulnerability Management, Patch Management, Endpoint Security, IAM, Security Assurance, Governance, Risk & Compliance, Security Audits, Business Continuity, Disaster Recovery, Incident Response, Cyber Essentials. ...

/CD pipeline development and maintenance Application deployment and release management Developer tooling administration (GitLab, Packagist, NPM, Dependabot) Dependency management and automated security updates Incident Management & Observability: Assist with the diagnosis and assessment of technical issues On-call engineering and incident response Monitoring, alerting, and error tracking … OpenSIPS FreeSWITCH Essential experience Required: Experience with CI/CD pipelines and deployment workflows Hands-on experience with cloud infrastructure Application monitoring, alerting, and incident response (any major tooling) Familiarity with load balancing and message queue technologies Maintaining and contributing to shared code libraries and internal tooling Investigating ...

team's time-zone spread to ensure responsive support well beyond any single region. This position owns end-to-end employee support operations including incident response, request fulfillment, onboarding, offboarding, and executive-level support. The Technical Support Manager will drive continuous improvement of support workflows, knowledge bases … coverage model using EMEA and India working hours, with well-defined cross-region handoff processesOwn end-to-end employee support operations including incident response, request fulfillment, onboarding, offboarding, and white-glove support for leadershipDefine and maintain SLAs and quality standards; track and report on ticket volume, resolution time ...

shortened summary, refer to our policies for full detailYou will be responsible for: Deliver high-quality investigative analysis to ensure rapid and accurate incident resolution.Act as the escalation point and technical authority for complex SOC investigations.Lead proactive threat-hunting initiatives to identify and mitigate emerging threats before they impact … internal SOC or 3 years at an MSSP in a senior role.Deep knowledge of cybersecurity frameworks: MITRE ATT&CK, Cyber Kill Chain, Incident Response Lifecycle, Pyramid of Pain.Expertise in threat hunting and advanced investigative analysis.Deep understanding of attacker tactics, techniques, and procedures (TTPs) and threat actor behaviours.Proficiency ...

London, UK - Reading, UK - Nottingham, UK - Milton Keynes | Job-ID: 218632 | Contract type: Standard | Business Unit: Cyber SecurityLife on the teamAs the Cyber Incident Readiness Lead, you will shape and define how Computacenter responds to and prepares for cyber incidents. This role is responsible for building, maintaining and evolving … security incident management framework, alongside owning a structured security incident exercise programme that ensures the organisation is ready to respond when it matters.You will own how Security Incident Management operates across Cyber Security, ensuring the framework is clear, effective and continuously improved, from triage through to response ...

summary Are you passionate about patient safety, governance and using data to drive meaningful improvements in healthcare? Join Elysium Healthcare as an Incident Reporting Administrator and play a key role in supporting and improving our incident management and patient safety reporting systems. In this rewarding role, you will … responsible for supporting the development, maintenance and continuous improvement of Elysium's Incident Management System (IMS), ensuring it enables the safe, effective and compliant management of patient safety events. Working closely with clinical teams, governance leads, IT colleagues and external stakeholders, you will help ensure the system aligns with ...

government security standards.Support risk treatment planning and remediation activities.Ensure alignment with NCSC, MoD, JSP, NIST, and Lockheed Martin security policies and standards where applicable.Support incident response investigations affecting classified systems.Assist with vulnerability management, patch management, and security monitoring activities.Participate in security reviews and technical investigations to identify root ...

Support risk treatment planning and remediation activities. Ensure alignment with NCSC, MoD, JSP, NIST, and Lockheed Martin security policies and standards where applicable. Support incident response investigations affecting classified systems. Assist with vulnerability management, patch management, and security monitoring activities. Participate in security reviews and technical investigations ...

passionate about patient safety, governance and using data to drive meaningful improvements in healthcare? Join Elysium Healthcare as an Incident Reporting Administrator and play a key role in supporting and improving our incident management and patient safety reporting systems. In this rewarding role, you will be responsible … supporting the development, maintenance and continuous improvement of Elysium's Incident Management System (IMS), ensuring it enables the safe, effective and compliant management of patient safety events. Working closely with clinical teams, governance leads, IT colleagues and external stakeholders, you will help ensure the system aligns with operational requirements ...

pipelines and deployment automation using Azure DevOps . Monitor production services using Application Insights and Azure Monitor , diagnosing and resolving issues proactively. Participate in incident response and root-cause analysis when required. Identify technical debt and deliver targeted improvements within sprint capacity. Work closely with Product Owners … handling, and retry behaviour. Azure DevOps CI/CD pipeline authoring, automated testing integration, and deployment management. Production operational experience monitoring via App Insights, incident diagnosis, and root cause analysis. Excellent written communication skills PR descriptions, PBI commentary, ADO notes, and incident updates must be unambiguous and complete. ...

exciting opportunity has arisen for a Security Culture Improvement & Incident Manage. This role is a critical role within our professional security department responsible for driving and overseeing the continuous improvement of security policies, procedures, and practices across MBDA in addition to managing and providing oversight of security related incidents. … MBDA is compliant with the latest security standards, regulations, and industry best practices. Supporting the overarching security culture improvement plan, the Security Culture Improvement & Incident Manager will collaborate with internal teams, external vendors, and stakeholders to enhance the security posture of MBDA.The role of the Security Culture Improvement & Incident ...

Directory, Firewalls, Network Infrastructure, Vulnerability Management, Patch Management, Endpoint Security, Security Operations, Governance, Risk & Compliance, GRC, Security Assurance, Security Audits, Business Continuity, Disaster Recovery, Incident Response, Cyber Essentials. ...

Security Compliance, ISO27001, GDPR, Vulnerability Management, Patch Management, Access Control, Identity Management, Multi-Factor Authentication (MFA), Endpoint Security, Microsoft Defender, Security Auditing, Risk Management, Incident Response, Backup and Recovery, Disaster Recovery, ITIL, Infrastructure Support, Cloud Services, Technical Documentation, User Account Management, Compliance, Audit, Troubleshooting, Helpdesk, Authentication, Network Security. ...

reusable IaC modules and patterns for reliable and repeatable builds.Develop platform services, APIs (FastAPI) and automation using Python.Drive improvements in reliability, scalability and performance.Lead incident response, fixing and root cause analysis.Work across compute, networking and storage layers.Collaborate with engineering teams to improve platform usability.Mentor engineers and contribute ...

work. Alongside this you will oversee security controls across corporate and project systems, manage security assessments and supplier assurance, maintain audit documentation and support incident response. As the onsite expert you will also cover Microsoft 365 security, identity and access management, endpoint protection, vulnerability management, SIEM monitoring and collaborate … Strong knowledge of ISO 27001, Cyber Essentials Plus, NIST CSF and UK GDPR Experience with Microsoft Defender, Sentinel, EDR/XDR and vulnerability tools Incident response and SOC experience Strong stakeholder management and reporting skills Experience in a regulated environment would be beneficial What you will ...

organisation's cyber security strategy, controls, and policies. Monitor emerging threats and ensure effective protection across endpoint, network, cloud, and identity environments. Lead security incident response activities, investigations, and remediation efforts. Drive vulnerability management and penetration testing programmes through to successful resolution. Act as the internal cyber security ...

maintaining security management plans, assurance evidence, control records or equivalent security artefacts. Understanding of secure system operation, change control, access control, protective monitoring and incident response principles. Ability to work with technical teams, system owners and security specialists to assess whether controls are being applied effectively. Willingness ...

maintaining security management plans, assurance evidence, control records or equivalent security artefacts. Understanding of secure system operation, change control, access control, protective monitoring and incident response principles. Ability to work with technical teams, system owners and security specialists to assess whether controls are being applied effectively. Willingness ...

Monitor, triage and investigate security alerts across customer environments. Act as an escalation point for security-related issues from the IT Support team. Support incident investigation, containment and remediation. Work across Microsoft 365, Azure, Defender, Entra ID and other security tooling. Carry out customer security reviews and support vulnerability … Strong hands-on knowledge of Microsoft 365, Azure, Defender and Entra ID. Experience with Cyber Essentials/Cyber Essentials Plus. Experience with security monitoring, incident response and vulnerability management. Strong troubleshooting and analytical skills. Confident communicating with both technical teams and customers. ...