1 to 25 of 47 Incident Response Jobs in the South East

network estate (including Cisco Meraki). The role is hands-on and operational, partnering with IT teams to implement security controls, supportmonitoringand incident response through Sophos MDR, and improve cyber resilience by supporting Disaster Recovery (DR) testing and Business Continuity (BC) readiness. Key Responsibilities Cloud Security (Azure) Implement … whererequiredand ensure changes follow change control. Enable and review network security logging/alerting (e.g., syslog/SIEM integrations where applicable). Monitoring, Detection & Incident Response (Sophos MDR) Act as the internal technical point of contact for Sophos MDR and ensure smooth collaboration with MDR analysts. Maintain coverage ...

Cyber Security Engineer, Cloud Security, SIEM, Incident Response, COR7555 An exciting opportunity has arisen for a Cyber Security Engineer to join a growing technology company based in Oxfordshire, working on a hybrid basis. This is a hands-on role focused on strengthening cyber security across cloud platforms, applications … business systems. Working closely with the CIO and development teams, the Cyber Security Engineer will play a key role in improving cloud security, incident response, vulnerability management, security monitoring and secure development practices, helping to enhance the organisation's overall cyber resilience. The company develops innovative software solutions ...

Enablement Your Background/Skills: 3rd Line Engineering, IT Infrastructure, Cyber Security, Azure, Google Workspace, Networking, CrowdStrike, Cisco, VMware vSphere, Windows Server, Jamf, Intune, Incident Response, Cyber Essentials, AI Tooling Who We Are BulkTM is on an incredible journey, with a mission to evolve from a manufacturing … security aspects of AI integration and take a leading role in our Cyber Essentials project next year. You'll also oversee infrastructure, security tooling, incident response, budgeting and contracting, while becoming a Tier 3 escalation point for complex issues that need deeper technical expertise. ...

Security Operations team, supporting customers across sectors including finance, manufacturing, utilities and retail. Your work will involve helping maintain security tooling, improve visibility, support incident response and automate security operations across critical infrastructure. The Role Operate, maintain and tune security monitoring and alerting platforms. Manage and optimise … ingestion and telemetry pipelines. Work with SOC Analysts to develop detection rules, alerts and playbooks. Support security incident investigation, response and containment. Automate repetitive SOC processes using scripting and automation. Onboard new systems and infrastructure into SOC monitoring. Support internal and customer cyber security engineering requirements. Maintain accurate ...

frameworks Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident response, threat intelligence and cyber defence capabilities Architect security monitoring, detection and response solutions Design business continuity and cyber resilience frameworks Compliance … architecture role Proven experience designing enterprise-scale security architectures Strong background in defence, aerospace or government security programmes Demonstrated expertise with security operations, incident response and threat management Track record of leading security transformation and programme implementations Technical Knowledge Deep expertise in security architecture frameworks, methodologies and best ...

frameworks. Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident response, threat intelligence and cyber defence capabilities. Architect security monitoring, detection and response solutions. Design business continuity and cyber resilience frameworks. Compliance … architectural role. Proven experience designing enterprise-scale security architectures. Strong background in defence, aerospace or government security programmes. Demonstrated expertise with security operations, incident response and threat management. Track record of leading security transformation and programme implementations. Deep expertise in security architecture frameworks, methodologies and best practices. Expert ...

frameworks. Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident response, threat intelligence and cyber defence capabilities. Architect security monitoring, detection and response solutions. Design business continuity and cyber resilience frameworks. Compliance … architectural role. Proven experience designing enterprise-scale security architectures. Strong background in defence, aerospace or government security programmes. Demonstrated expertise with security operations, incident response and threat management. Track record of leading security transformation and programme implementations. Deep expertise in security architecture frameworks, methodologies and best practices. Expert ...

transformation. The role is accountable for the delivery and continuous improvement of cyber security capabilities across the Trust, including security operations, threat detection and response, and cyber resilience. This includes ensuring effective monitoring, incident response, and alignment with NHS England Cyber Security Operations Centre (CSOC). … effectively manage an evolving threat landscape while maintaining operational resilience. Main duties of the job Leads the Trust's cyber security operations, including monitoring, incident response, and vulnerability management; ensures alignment with national NHS cyber services; drives risk reduction and threat-informed improvements; and provides leadership, governance, performance ...

help protect systems that matter. Apply today and take your cyber security career to the next level. If you're passionate about threat detection, incident response, and staying one step ahead of attackers, we'd love to hear from you. Office based: Farnborough. Clearance: You do need … triage and investigate security incidents across critical client environments. Analyse network traffic, logs and security events to identify threats and vulnerabilities. Lead and support incident response activities, providing expert guidance on containment, eradication and recovery. Enhance detection rules and use cases using MITRE ATT&CK and threat-informed ...

Saab UK representative on the Global Cyber Council. Lead risk assessments, threat modelling, and vulnerability management within Saab Uk process. Manage incident response and coordinate with other company parties. Lead on the compliance of Cyber controls including DefStan 05-138, ISO 27001, NIST. Responsible for the completion … classified information handling and secure communication protocols. Expertise in intrusion detection, SIEM tools, and advanced threat intelligence systems. Proven track record of leading incident response in high-security environments. Familiarity with defence-specific compliance frameworks (MOD JSPs, NIST SP 800 series, ITAR, GDPR). Excellent leadership, stakeholder management ...

improve detection capabilities and contribute to the ongoing maturity of the SOC. You will also: Monitor and investigate security events across enterprise environments Perform incident response activities and support remediation efforts Analyse network traffic, endpoint activity and system logs Improve detection rules using MITRE ATT and CK techniques … application to our client in conjunction with this vacancy only. Key Skills SOC Analyst, Senior SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk, SIEM, Incident Response, Threat Detection, Cyber Security, MITRE ATT and CK, Blue Team ...

Security Engineering team, helping to design, implement and continuously improve the security controls that protect large-scale AWS environments. Working closely with Security Operations, Incident Response, Threat Engineering and Cloud Engineering teams, you'll build and maintain cloud security solutions, improve security automation, and help embed security best … security posture through automation, logging, alerting and continuous improvement Work closely with engineering teams to embed security into cloud platforms and application delivery Support incident response, investigations and remediation activities Contribute to security-by-design initiatives across cloud infrastructure Requirements We're looking for someone who can demonstrate ...

boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant boundary configurations and security baselines Incident Management & Threat Response Lead boundary security incident detection, investigation and response Manage security alerts, anomaly investigation and threat escalation Coordinate incident response across boundary security team and customer security teams Conduct post-incident reviews and implement preventative measures Maintain security event logs and provide compliance reporting to MOD Technology & Service Development Evaluate and implement boundary security technologies and tools Design automation and orchestration for boundary security operations Lead ...

availability, security and resilience of key network services. Key Responsibilities Lead the delivery of secure network boundary services and operations. Manage security monitoring, incident response and service performance. Oversee boundary security technologies including firewalls, IDS/IPS and related security controls. Drive continuous service improvement and operational excellence. … leadership experience managing security operations or managed service teams. Strong knowledge of enterprise firewalls, IDS/IPS, SIEM and threat monitoring technologies. Experience leading incident response and service delivery within secure environments. Excellent stakeholder management and communication skills. Desirable Experience within Defence, Government or National Security environments. Certifications ...

improving their supplier assurance risk management processes. Understand cyber threats and able to utilise threat intelligence for assessments. Participate in supplier security incident response, with a focus on assessment of impact and working in concert with the Incident Response (IR) Team to develop risk mitigation strategies. ...

regulators and law enforcement Mentor the analyst team and act as senior escalation point for major incidents What You'll Bring: 5+ years in incident response or SOC environments, ideally with managed services (MSSP) exposure A proven record leading complex investigations - ransomware and breach cases you can walk … advantage) A well-developed threat hunting toolkit: YARA rules, IOC development, timeline analysis and adversary profiling Cloud investigation experience - Azure and/or AWS incident response, log analysis and cloud-native threats The communication skills to translate deep technical findings for senior, non-technical audiences A natural mentoring ...

partnered with a growing cyber security business in Buckinghamshire, supporting customers with threat monitoring, incident response, and managed security services. They are looking for a Level 3 SOC Analyst to join their experienced SOC team, leading complex investigations and acting as the technical escalation point for major security … develop detection rules, automate workflows, and continuously improve SOC operations The ideal Level 3 SOC Analyst will have: Strong commercial experience within a SOC, incident response, or cyber security operations environment Experience investigating complex threats including ransomware, malware, account compromise, and targeted attacks Hands-on experience with SIEM ...

boundary traffic inspection, content filtering and advanced threat protection. Lead boundary security assessments and vulnerability remediation. Implement MOD-compliant boundary configurations and security baselines. Incident Management & Threat Response Lead boundary security incident detection, investigation and response. Manage security alerts, anomaly investigation and threat escalation. Coordinate incident response across boundary security team and customer security teams. Conduct post-incident reviews and implement preventative measures Maintain security event logs and provide compliance reporting to MOD. Technology & Service Development Evaluate and implement boundary security technologies and tools. Design automation and orchestration for boundary security operations. Lead ...

principles Cyber Threat & Risk Management Assess cyber threat landscapes and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident response, threat intelligence and cyber defence capabilities Architect security monitoring, detection and response solutions Develop cyber resilience and business continuity frameworks Cloud ...

This is a unique hybrid position that combines operational leadership with technical awareness . You'll take ownership of the live operational picture, coordinating incident response across cyber, network, infrastructure and physical security teams while ensuring informed, timely decision-making. This role is ideal for someone who thrives … fast-paced control room environment and can confidently lead operational response without needing to be a deep technical specialist. Key Responsibilities Maintain a single operational view across cyber, network, service and physical security domains. Monitor live operational environments and assess alerts and incidents in real time. Perform initial triage ...

other passenger-facing devices that are critical to daily service delivery. You will lead a multi-disciplinary team responsible for ensuring high availability, rapid incident response, and seamless customer experience across all front office technology. Key Responsibilities Lead the end-to-end support and operation of front office … major incidents affecting ticketing systems, gates, validators, kiosks, and associated platforms , coordinating rapid resolution with engineering and field teams. Drive operational excellence across: Incident management Ticket prioritisation and queue management Root cause analysis (RCA) Service performance and uptime Work closely with field engineers, maintenance teams, and operational stakeholders ...

line with agreed SLAs, following escalation processes as appropriate. Acting as Tier 2/Tier 3 support for Windows related issues & problem resolution, performing incident response, investigation & remediation within SLA timeframes. Co-ordinate with incident & Technical managers, following incident management process during high-severity incidents. Identify ...

maintain security tooling across cloud environments Work with engineering teams to improve security, reliability, and operational resilience Implement monitoring, logging, and alerting solutions Support incident response, troubleshooting, and continuous improvement activities Contribute to automation initiatives and security-by-design practices Requirements Experience working with AWS cloud environments Hands ...

assessed, approved, tested, and documented before deployment. Own and maintain service standards and SLAs for IT service delivery, monitoring system health, uptime, and response times, and reporting to the Associate Director. Oversee software licensing across the organisation, ensuring compliance and value for money. Project Management Lead IT projects from … transformation. Risk Management & Assurance Leads the identification, assessment, and strategic management of complex, high-level risks across the service area. Ensures robust risk mitigation, incident response, and escalation frameworks are in place and consistently applied. Provides assurance on regulatory compliance, service resilience, business continuity, and audit readiness. Proactively ...

observability and operational tooling to improve platform reliability. Working closely with Site Reliability Engineering and Operations teams to ensure high availability and resilience. Supporting incident response, root cause analysis and continuous improvement initiatives. Acting as a technical mentor, promoting engineering standards and best practice across the team. Collaborating ...