1 to 25 of 56 Incident Response Jobs in the South West

define pragmatic remediation roadmaps aligned to business priorities. Lead and support security architecture reviews across cloud, applications, infrastructure, IAM, data protection and detection/response domains. Provide expert consulting to customers on security strategy, risk reduction, control design, and security operating model improvements. Challenge weak security assumptions with confidence … guardrails. Partner with engineering, platform, DevOps and operations teams to embed security into delivery pipelines and infrastructure as code practices. Support threat detection, incident response readiness, use-case tuning, and post-incident improvement activities. Contribute to security standards, policies, patterns, reusable accelerators, and client-facing deliverables including ...

incidents while leading, mentoring and developing SOC Analysts on shift. Youll act as a key escalation point for complex and high-severity incidents, supporting incident containment, remediation and recovery while providing leadership across the SOC. What youll be doing Leading the SOC team during your assigned shift and handling … escalations Investigating and responding to medium and high-severity security incidents Supporting incident containment, remediation and recovery Mentoring, teaching and upskilling junior SOC Analysts Supporting threat hunting, detection improvement and incident response activities What were looking for 6+ years experience across SOC, Incident Response ...

major organisation is seeking a Cyber Security Operations Specialist to join its Security Operations team. This is a hands on role focused on incident response, threat detection, vulnerability management and continuous improvement across enterprise technology environments. You'll be expected to hit the ground running, managing security alerts … tooling estate. The Role Monitor, investigate and respond to cyber security incidents. Manage and triage security alerts, tickets and operational queues. Lead or support incident response activities through to resolution. Support vulnerability management and remediation activities. Apply threat intelligence to strengthen detection and response capabilities. Develop ...

major organisation is seeking a Cyber Security Operations Specialist to join its Security Operations team. This is a hands on role focused on incident response, threat detection, vulnerability management and continuous improvement across enterprise technology environments. You'll be expected to hit the ground running, managing security alerts … tooling estate. The Role Monitor, investigate and respond to cyber security incidents. Manage and triage security alerts, tickets and operational queues. Lead or support incident response activities through to resolution. Support vulnerability management and remediation activities. Apply threat intelligence to strengthen detection and response capabilities. Develop ...

with global impact upon Colt, business units, partners, and customers. While working as part of this team, the successful individual will provide world class incident response functions to detect, protect, respond, and sustain operations within cyberspace. This role operates at a Tier 3 level , with the expectation that … operational activities, Technology escalation support, Security Solution assessment, existing Service maturing and Build activities assist Analyse potential infrastructure security incidents to determine if incident qualifies as a legitimate security breach Establishing and governing the security incident response processes, investigations and security operational processes Maintenance and enhancement ...

security operation supporting next-generation AI compute infrastructure in the UK. This is a great opportunity for an experienced SOC, Cyber Defence or Incident Response professional looking to take on more technical leadership and ownership within a highly secure, cutting-edge environment. The Role As a SOC Shift … incidents Analysing and correlating data across SIEM, EDR and other security sources Leading containment, eradication and recovery activities Conducting root-cause analysis and producing incident reports Supporting detection rule and threshold tuning Identifying gaps in detection coverage and response processes Mentoring and supporting SOC Analysts Acting ...

will play a key role in detecting, investigating and responding to cyber threats, while helping to improve the organisation's overall security monitoring and incident response capabilities. The role combines hands-on security operations, tooling optimisation and continuous improvement across a varied technology estate. Key responsibilities: Monitor, triage … investigate security alerts and incidents across IT, cloud and OT environments. Lead or support incident response, including containment, eradication, recovery and escalation. Develop and optimise SIEM detection rules, EDR policies and security monitoring capabilities. Reduce false positives and improve detection coverage using threat intelligence and incident learnings. ...

week. We are happy to discuss flexible working! Top 3 skills needed for this role: Highly experienced Cyber Security Operations expertise Advanced security incident response capability Proven security tooling and threat management knowledge What this role is all about: We're looking for a Senior Security Operations Engineer … strong relationships with internal stakeholders, vendors and technology partners to support effective security operations You'll develop and maintain security documentation, operational procedures and incident response playbooks Support penetration testing activities and coordinate the remediation of identified findings Contribute to the ongoing enhancement of monitoring, detection and response ...

role is the single point of ownership when incidents occur. You will directly oversee the offshore Production Support team, run on-call and incident response, and ensure fast detection, triage and restoration of services. This is not a passive monitoring role. You are expected to understand … offshore Production Support team and be the single point person when incidents occur, escalating only to Head Of when required. Run on-call and incident response; ensure fast detection, triage, and restoration. Maintain observability standards (logs, metrics, traces) and alert quality (low noise, high signal). Understand ...

audience, showing trends over time, and structuring reports around the decisions the reader needs to make, not just the findings. Set the standard for incident response and detection readiness. Drive adoption of incident response practices across engagements, own the IR-to-vulnerability-management feedback loop ...

trusted engineering partner to the desk, ensuring systems are stable, performant, and aligned with business needs. Support live trading environments, including incident response, root cause analysis, and post mortem leadership. Work as a core member of the software engineering team, participating in daily standups and design discussions. Contribute … across trading systems, including automated remediation, self healing workflows, and resilience engineering. Uses enterprise-authorized AI capabilities within the work environment to accelerate major-incident triage, troubleshooting, and post-incident analysis, validating outputs and handling operational data according to sensitivity and security requirements. Leads reuse-first adoption ...

service and empower engineering teams. Own and evolve monitoring and alerting across production systems - ensuring dashboards and alerts are high-signal and actionable. Lead incident response during production issues. Coordinate across teams, drive resolution, and ensure thorough post-incident reviews with meaningful follow-up actions. Investigate … infrastructure. Who you are Passionate about platform reliability, operational excellence, and building shared ownership of production systems across the wider engineering team. Comfortable leading incident response under pressure and making sound technical decisions with incomplete information. Excited about being part of a fast-growing company that's trying ...

more programming languages. Active, or the ability to obtain, a Developed Vetting (DV) UK security clearance. Preferred qualifications: Security+ or similar Cyber Security/Incident Response related certifications. Experience responding to security incidents on Kubernetes. Experience analyzing, triaging, and remediating common information security incidents. Understanding of common attacker … team events. Review and develop security operations center dashboards for anomalous activity. Demonstrate subject matter expert across typical security disciplines, vulnerability, Endpoint Detection and Response(EDR), Security Information and Event Managemen (SIEM) etc. Must be a British citizen to meet compliance and security clearance requirements. Office location will ...

will define the cybersecurity strategy and roadmap, establish governance and risk reporting, create core policies and standards, and personally get involved in tooling, configuration, incident response and problem-solving where required. You will be responsible for improving security across Microsoft 365, Azure, endpoints and identity; building incident response, business continuity and disaster recovery capability; managing GDPR, PCI-DSS and ISO 27001 initiatives; strengthening supplier security; and providing clear cyber risk reporting to senior leadership. You will work closely with IT, infrastructure, project teams, operational stakeholders and external suppliers in a lean environment without a large ...

workplace wellbeing initiatives. Support internal and external audits and ensure actions are completed. Record and report sustainability and energy-related information where required. Incident & Business Continuity Management Act as the first point of contact for workplace operational incidents. Coordinate incident response and service recovery activities. Escalate incidents … provide stakeholder communications where required. Work closely with Workplace, Security, IT, EHS, vendors, and building management teams. Support out-of-hours incident response where required. Support workplace resilience and business continuity planning. Skills & Experience Essential Experience in workplace operations, facilities management, or workplace experience in roles within ...

maintain operational controls, including documented procedures, control testing and monitoring, exception management, and issue remediation with clear accountability Manage operational risk, including operational resilience, incident response, business continuity readiness, and timely escalation of emerging issues Serve as the regional single point of contact for platform operational performance, owning … Required Qualifications, Capabilities, and Skills Demonstrated experience leading operational teams, including people management, performance management, and workforce planning Proven experience managing operational risk, controls, incident response, and business continuity in a regulated environment Demonstrated experience driving continuous improvement using structured methodologies such as root-cause analysis with measurable ...

long-term technical vision for the platform, aligning with business outcomes and regulatory requirements. Champion a "you-build-it-you-run-it" culture, overseeing incident response and identifying opportunities to automate remediation. Ensure successful collaboration across teams and stakeholders, driving consensus on architectural and delivery trade-offs. Identify … technical and non-technical stakeholders. Ability to translate business objectives into team-level tasks and priorities. Experience managing production systems, including on-call rotations, incident response, and reliability engineering. Experience leading multi-team adoption of enterprise-authorized AI-assisted development and delivery tools, including defining governance/ways ...

protective monitoring processes led directly by DVSA or its service provider. It also responds to incidents of a technical nature in line with DVSA Incident Management procedures. It restores normal service operation as quickly as possible and minimises any adverse effect on business operations. This ensures that the best … Vehicle Standards Agency - Department for Transport Careers Job description Your responsibilities will include, but aren't limited to: Leading the rapid detection, investigation, and response to cyber security incidents, ensuring threats are contained, impact is minimised, and incidents are handled in line with DVSA policies, legal requirements, and best ...

platform services (e.g. PAM, PKI, cross-domain solutions) in live environments Platform administration including patching, upgrades, configuration, and account management Monitoring, alerting, and incident response for platform services Incident and problem management, including troubleshooting and root cause analysis Networking concepts (TCP/IP, DNS, DHCP, firewalls) Automation … services, or cross-domain/secure transfer solutions Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms) ITIL-aligned service management practices (incident, problem, change) Automation of operational activities (scripts, scheduled jobs, runbooks) Experience working in high-availability or 24/7 service environments Integration with enterprise ...

first escalation point for SOC Analysts Investigate and respond to security incidents when required Escalate complex incidents with clear, detailed findings Support incident response, client communications and incident bridges Maintain runbooks, internal documentation and the KQL library Tune detections and manage improvement requests through Azure DevOps What ...

What you will do as a Senior Application Engineer Support, configure, and enhance security tooling platforms (e.g. SIEM, EDR) that underpin threat detection and response Deliver engineering tasks within defined work packages, ensuring alignment with user needs, security requirements, and service-level objectives. Contribute to application architecture, integration … defence environments Desirable: Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar) SOAR platforms and automation of security response workflows Integration with monitoring, alerting, and incident response systems Threat detection, analytics, and use case development Experience integrating with enterprise services (Active ...

Responsibilities : Take ownership of the organisations security posture, helping to identify, assess and reduce cyber risk across systems, services and data Lead security monitoring, incident investigation and response activities, ensuring threats are identified and addressed effectively Drive vulnerability management and security improvement initiatives, working with technical teams … data protection, compliance and security assurance principles Experience assessing, prioritising and mitigating security risks within a business environment Familiarity with security monitoring, threat detection, incident response and vulnerability management activities Broad understanding of infrastructure, networks, identity management and application security concepts Ability to analyse complex information, identify root ...

maintenance and updates to roll out new features and keep the platform secure. Participate in a 24/7, on-call rotation for incident response escalation within response and on-site Service Level Agreements (SLA). Provide technical implementation support in customer environments, including guidance on implementation ...

including intake, investigation, tracking, documentation, and stakeholder engagement. Support data mapping, data retention, minimisation, international transfer, and vendor risk management activities. Assist with privacy incident and breach response activities, including fact gathering, remediation tracking, reporting, and stakeholder coordination. Monitor developments in privacy, emerging regulatory areas (including AI where … ePrivacy requirements, international data transfers, privacy-by-design principles, and accountability frameworks. Experience supporting privacy programme activities such as impact assessments, data mapping, DSARs, incident response, vendor reviews, training, and compliance documentation. The ability to interpret complex legal, regulatory, and technical requirements and translate them into practical business ...

partnership with a leading public organisation seeking an SOC Manager to design, implement and continuously improve the departments Security Operations strategy, ensuring rapid detection, response and recovery from cyber threats and incidents. What will you be doing? Lead, mentor, and develop a high-performing SOC analyst team, using … career framework to identify learning needs and map progression paths. Own the full incident lifecycledetection, triage, escalation, containment, and resolutionrun post-incident reviews, and drive continual improvements through regular exercises. Serve as the escalation point for alerts; prioritise and direct enhancements to monitoring coverage and detection rules across ...