Nottingham, Nottinghamshire, United Kingdom Hybrid / WFH Options
Experian Group
As a Cyber Defence Analyst, you will join the Cyber Fusion Center, performing in-depth analysis, assessment, and response to security threats by following documented policies to meet Service Level Goals. The team provides global 24x7 security operations and monitoring More ❯
Liverpool, England, United Kingdom Hybrid / WFH Options
Crown Commercial Service
month ago Liverpool, England, United Kingdom 5 days ago Liverpool, England, United Kingdom 1 week ago Liverpool, England, United Kingdom 1 week ago Cyber SecurityIncidentResponseTeam (CSIRT) Specialist Chester, England, United Kingdom 3 weeks ago Chester, England, United Kingdom 1 month ago Liverpool, England, United Kingdom 1 week ago Service Engineer - Fire & Security Systems Warrington, England, United Kingdom More ❯
London, England, United Kingdom Hybrid / WFH Options
Client Server
Social network you want to login/join with: Cyber Defence Analyst Splunk CSIRT, London col-narrow-left Client: Client Server Location: London, United Kingdom Job Category: Other - EU work permit required: Yes col-narrow-right Job Reference: 4d32516f9aa5 Job Views: 4 Posted: 29.06.2025 Expiry Date: 13.08.2025 col-wide Job Description: Cyber Defence Analyst (Splunk CSIRT) London to £80k Are … WFH Policy: You'll join colleagues in the London office with flexibility to work from home one day a week. About you: You have strong experience in Security Operations, CSIRT or similar role You have experience of building out functions of a Cyber Defence Team e.g. insider risk, threat intelligence, breach attack simulation You have a strong knowledge of SIEM More ❯
London, England, United Kingdom Hybrid / WFH Options
Cisco
for incident updates to executive leadership and stakeholders. Provide detailed, actionable reports during and after incidents, including root cause analysis and mitigation strategies. Collaboration and Coordination Collaborate with Corporate CSIRT, Incident Command, Cyber legal, IT, risk management, Data Protection and other departments to ensure a unified response. Engage with third-party vendors, Managed Security Service Providers (MSSPs), and law enforcement More ❯
Swindon, Wiltshire, United Kingdom Hybrid / WFH Options
RWE AG
RWE IT requirements and standards to the MSP teams and ensure adherence as well as to provide technical leadership to the teams. Support the Cyber SecurityIncidentResponseTeam (CSIRT) and MSPs to help solve Microsoft Azure related security incidents. Work with Cyber Security, Enterprise Architects and other SMEs to support their strategy and create supportable, secure solutions. Operationalise securityMore ❯
Are you passionate about cybersecurity and driven by data? We're looking for a Data Cyber Security Consultant to join a dynamic and centralized Cyber SecurityIncidentResponseTeam (CSIRT) supporting critical operations in Belgium. Your Responsibilities: Collaborate with application and engineering teams on log ingestion tasks. Validate log content ingested into the SIEM. Co-develop and enhance monitoring use … cases with the Cyber Defense Center and Threat Intel teams. Represent CSIRT in stakeholder meetings to ensure the right logs are captured. Create dashboards and reports to enhance visibility. Support blue team activities during red team exercises. Your Profile: Bachelor's in Computer Science, Information Security, or equivalent experience. Strong understanding of Windows, Linux, internet technologies, and network protocols. Experience More ❯
start-up mentality? Eager to learn continuously? Join Proximus Ada! Within this Proximus' newly created centre of excellence for AI and Cybersecurity, the mission of the Security Management and CSIRT teams is to protect Proximus, its customers, its business, its operations and reputation against external and internal threats. You will be fascinated by a highly dynamic environment, the strong collaboration More ❯
London, England, United Kingdom Hybrid / WFH Options
LYNK
improvement of playbooks, procedures, and crisis simulations Occasionally support advisory work around common threats like ransomware, insider threat, and lateral movement About You 1.5+ years in a SOC or CSIRT role Experience working with raw data and security log analysis Comfortable with threat intel, IOC correlation, and incident documentation Knowledge of security methodologies, intrusion techniques, and detection frameworks A strong More ❯
Hounslow, England, United Kingdom Hybrid / WFH Options
Heathrow Airport
This job is brought to you by Jobs/Redefined, the UK's leading over-50s age inclusive jobs board. Job Description In this critical role, you will be accountable for overseeing the cyber incidentresponse function, including leading a More ❯
improvement of playbooks, procedures, and crisis simulations Occasionally support advisory work around common threats like ransomware, insider threat, and lateral movement About You 1.5+ years in a SOC or CSIRT role Experience working with raw data and security log analysis Comfortable with threat intel, IOC correlation, and incident documentation Knowledge of security methodologies, intrusion techniques, and detection frameworks A strong More ❯
improvement of playbooks, procedures, and crisis simulations Occasionally support advisory work around common threats like ransomware, insider threat, and lateral movement About You 1.5+ years in a SOC or CSIRT role Experience working with raw data and security log analysis Comfortable with threat intel, IOC correlation, and incident documentation Knowledge of security methodologies, intrusion techniques, and detection frameworks A strong More ❯
London, England, United Kingdom Hybrid / WFH Options
Royal Mail Group
time to detect, respond and resolve. Feeding back lessons learned to improve the company-wide cybersecurity posture. When major incidents occur, you'll be a key member of the CSIRT, working closely with IncidentResponse as a technical response SME. You'll have the opportunity to learn about the wider technology estate, supporting on major programmes to ensure detection and More ❯
cybersecurity experience Minimum of 2+ years as a cybersecurity architect Experience leading and developing teams is a strong plus Deep technical understanding and broad scope Experiences in SOC/CSIRT/SIEM/CISM etc. are all valued Meticulous nature and quality driven approaches Experience providing technical cybersecurity training is a plus Belgian citizenship is required for Belgian clearance English More ❯