17 of 17 Contract Incident Response Jobs in the South East

network estate (including Cisco Meraki). The role is hands-on and operational, partnering with IT teams to implement security controls, supportmonitoringand incident response through Sophos MDR, and improve cyber resilience by supporting Disaster Recovery (DR) testing and Business Continuity (BC) readiness. Key Responsibilities Cloud Security (Azure) Implement … whererequiredand ensure changes follow change control. Enable and review network security logging/alerting (e.g., syslog/SIEM integrations where applicable). Monitoring, Detection & Incident Response (Sophos MDR) Act as the internal technical point of contact for Sophos MDR and ensure smooth collaboration with MDR analysts. Maintain coverage ...

join their security team on an IMPORTANT Project! Note: This role requires an approximately 1-week month on-call availability for high priority incident response. Please note there is additional compensation for this, and the frequency is client dependent. Responsibilities Detection engineering - Develop, maintain, and enhance security detection content … alerting based on business risks and threats Review and improve existing SecOps standards and capabilities e.g. by highlighting requirements for additional logging, identifying incident or threat trends and detection and business-as-usual optimisation opportunities Perform security monitoring, reviewing and triaging triggered alerts, and suggesting improvements (on a rota ...

leadership position-not a hands-on technical analyst role. You will take full ownership of the Cyber Security Operations Centre (CSOC), driving strategy, managing incident response, and directing internal teams and external vendors. Key Responsibilities Define and lead the CSOC strategy, operations, and governance. Take command of major … incident response, managing remediation and stakeholder communication. Oversee threat intelligence, vulnerability management, and security monitoring capabilities. Manage relationships with external agencies, Managed Security Service Providers (MSSPs), and technology partners. What We Need From You Proven experience as a SOC Manager (previous leadership experience is essential; this ...

practical learning, and shaping the next generation of defence cyber capability. Key Responsibilities Training Delivery & Subject Matter Expertise Deliver high-quality cyber security and incident response training to learners with varying experience levels. Translate real-world cyber operations, threat analysis, and incident handling into clear, practical instruction. … competence. Key Skills & Experiences Live SC Clearance Strong hands-on knowledge of cyber threats, network security, risk management, and compliance frameworks. Deep understanding of incident response methodologies, detection, investigation techniques and tooling. Ability to communicate complex technical concepts in a clear, engaging and learner-friendly manner. Experience designing ...

practical learning, and shaping the next generation of defence cyber capability. Key Responsibilities Training Delivery & Subject Matter Expertise Deliver high-quality cyber security and incident response training to learners with varying experience levels. Translate real-world cyber operations, threat analysis, and incident handling into clear, practical instruction. … competence. Key Skills & Experiences Live SC Clearance Strong hands-on knowledge of cyber threats, network security, risk management, and compliance frameworks. Deep understanding of incident response methodologies, detection, investigation techniques and tooling. Ability to communicate complex technical concepts in a clear, engaging and learner-friendly manner. Experience designing ...

with technical awareness , placing you at the centre of a live Security Operations Centre where you'll maintain situational awareness across multiple domains, coordinate incident response, and ensure effective operational decision-making. You'll act as the operational lead within a fast-paced control room environment, working closely … domains. Monitor live environments and assess alerts and incidents in real time. Perform initial triage and validation of alerts, reducing noise and ensuring accurate incident classification. Manage incident prioritisation and escalation in accordance with operational procedures. Coordinate response activities across SOC, NOC, Infrastructure and Security teams. Support ...

Security, SOC, Infrastructure, Cloud, IAM, Network and Service Management teams. Drive the implementation and enhancement of Security Operations capabilities, including SOC, SIEM, detection and response, vulnerability management and incident response. Manage the transition of new security capabilities into live operational services. Work closely with security architects and technical … within enterprise environments. Strong understanding of Security Operations and the delivery of operational cyber capabilities. Experience delivering programmes involving areas such as SOC, SIEM, incident response, threat detection, vulnerability management, security tooling or security service transformation. Proven experience transitioning security capabilities from project delivery into BAU operations. Strong ...

delivering cyber security awareness programmes. Experience managing phishing simulation campaigns. Security awareness compliance reporting experience. Microsoft Defender Suite. Microsoft Sentinel. Security Operations (SOC). Incident Response. Threat Intelligence. Vulnerability Management. Excellent communication and stakeholder engagement skills. Desirable Experience ISO 27001. Cyber Essentials. Microsoft Intune. Security awareness programme development. Working ...

Leading cyber resilience strategy across cloud and enterprise technology environments. Overseeing cyber operations including SOC, SIEM, threat intelligence, vulnerability management, attack surface management and incident response. Working closely with the CISO to develop and implement strategic initiatives that improve operational resilience and cyber maturity. Acting as the senior lead … experience in a senior cyber security leadership role within a large and complex organisation. Strong technical background covering cyber operations, SOC, SIEM, threat intelligence, incident response, penetration testing and red teaming. Extensive experience leading cyber incidents and crisis management activities across enterprise environments and supply chains. Strong understanding ...

closely with technical and business stakeholders to evaluate the current Microsoft security estate, identify gaps and risks, and design a roadmap for improving detection, response, data protection, and information lifecycle management. The engagement will focus on three key areas: Security Monitoring & Threat Detection Review and assess the deployment … Microsoft Defender technologies across the organisation. Benchmark existing security configurations against Microsoft best practices and recognised industry standards. Evaluate alert quality, incident response processes, and overall monitoring effectiveness. Identify gaps in detection capability and security visibility. Assess coverage against MITRE ATT&CK techniques and tactics. Produce a prioritised ...

deploying and maintaining proxy services and secure web gateway technologies. Advanced troubleshooting capabilities across Layers 2-7, combined with significant experience leading to major incident response and resolution activities. Demonstrated ability to architect secure data centre and wide area network (WAN) environments with robust segmentation and micro-segmentation ...

Proven experience extending Kubernetes with higher-level platforms and services , not treating it as the finished product Strong understanding of operational fundamentals: monitoring, logging, incident response, reliability, and maintenance Comfortable working directly with engineers and data scientists to support real production workloads MLOps experience (key to the role ...

growth and evolving access requirements. Provide hands-on architectural guidance to engineering and operations teams during design, build, and deployment phases. Participate in incident response and problem resolution related to architecture-level IAM-related incidents, such as unauthorised access or compromised credentials, ensuring root causes are addressed ...

delivery performance against strict compliance KPIs and escalate risks or operational gaps proactively. Operational Procedures: Support the development of updated DNS lifecycle procedures and incident response frameworks. Key Requirements & Qualifications: Experience delivering technical network projects within a telecommunications, ISP or regulated carrier environment. Proven experience managing Core Network ...

including Microsoft Active Directory Certificate Services (AD CS), Group Policy, 802.1X, VPN, TLS, code signing and device identity services. Provide technical leadership during troubleshooting, incident response and continuous service improvement. Work closely with security architects, infrastructure teams and stakeholders to ensure solutions meet security and compliance requirements. ...

onsite 1st and 2nd line IT support to customers, primarily covering end-user support, M365, endpoint, account and device administration, basic server/network incident triage, security alert and vulnerability/patch status checks, and initial incident response. All tasks must be delivered in a professional and timely … when required. Support security operations at an operational level, including checking security alerts, vulnerability status and patch status, and assisting with tools Provide first response during security or IT incidents, including initial investigation, containment support, evidence collection and escalation according to the agreed process Support ...

mobility-related services. Business Continuity Planning (BCP) Provide operational support (with the Customer retaining overall coordination responsibility) for: Disaster Recovery and BCP emergency response activities. Annual BCP testing at local sites. Cyber BCP exercises and incident response. Cyber BCP preparedness activities. Support for Cyber BCP scenarios as required. ...