1 to 25 of 32 Permanent Incident Response Jobs in Berkshire

overseeing workload prioritisation, SOC reporting, and the successful delivery of projects associated with SOC tooling, automation, compliance, and operational maturity. This role encompasses reactive incident response, proactive detection engineering, threat hunting, vulnerability management, and operational leadership. You will also contribute to strategic initiatives including penetration testing coordination, security … logs, API configurations and traffic, container environments, network data, application and infrastructure architecture, as well as data center hosting environments to support threat detection, incident investigation, and root cause analysis. Manage complex cybersecurity incidents end to end, including containment, eradication, recovery, and post-incident analysis, while coordinating closely ...

take ownership of the engineering, administration, health and continuous improvement of the security platforms, detection content and automation that underpin threat monitoring, detection and incident response across my clients internal and managed customer environments. They will act as the final internal escalation point for complex and high-severity … live incidents. Key Responsibilities Lead the end-to-end management of complex and high-severity security incidents, including investigation, containment, eradication, recovery and post-incident review. Conduct digital forensic investigations across cloud, identity, endpoint and network platforms, and carry out malware analysis and threat validation. Design, implement and optimise ...

take ownership of the engineering, administration, health and continuous improvement of the security platforms, detection content and automation that underpin threat monitoring, detection and incident response across my client’s internal and managed customer environments. They will act as the final internal escalation point for complex and high … live incidents. Key Responsibilities Lead the end-to-end management of complex and high-severity security incidents, including investigation, containment, eradication, recovery and post-incident review. Conduct digital forensic investigations across cloud, identity, endpoint and network platforms, and carry out malware analysis and threat validation. Design, implement and optimise ...

complex security concepts to technical and non-technical audiences Advising on security architectures, controls and technologies Developing cyber security strategies and implementation roadmaps Supporting incident response and business continuity planning Applying frameworks including NIST, ISO 27001, CIS and CAF Providing specialist advice across complex Defence and Government environments … Security environments Knowledge of security frameworks including NIST, ISO 27001, CIS or CAF Experience within areas such as security architecture, cyber risk, vulnerability management, incident response, security monitoring or threat intelligence Strong stakeholder management and client-facing communication skills Understanding of network security, encryption, authentication and access controls ...

operational responses that improve reliability and reduce downtime. What You'll Be Working On Monitor live systems, triage operational alerts and provide first-line incident response to maximise system availability. Develop and maintain dashboards that deliver clear visibility into system health, trends and operational performance. Analyse recurring incidents … tooling and operational processes. Define monitoring thresholds, alerting strategies and operational metrics that support reliable live quantum computing services. Produce documentation covering monitoring processes, incident response, escalation procedures and operational handovers. Contribute to automation and continuous improvement initiatives that reduce manual intervention and improve service reliability. What ...

/CD pipelines Operational Delivery & Strategic Projects: Lead network delivery for strategic initiatives (e.g., data centre migrations, office relocations, cloud landing zones) Manage incident response for critical infrastructure events; lead post-mortems and remediation Collaborate with infrastructure teams to build monitoring, alerting, and observability stacks that surface security … configuration management (Ansible, etc.) Proficiency with network monitoring and observability tools (e.g., Splunk, Datadog, New Relic, Elasticsearch, Prometheus, RSA NetWitness, Tenable) Strong incident response and troubleshooting background; comfort operating in high-pressure environments Experience mentoring junior/mid-level engineers and building security culture within technical teams Desirable ...

/CD pipelines Operational Delivery & Strategic Projects: Lead network delivery for strategic initiatives (e.g., data centre migrations, office relocations, cloud landing zones) Manage incident response for critical infrastructure events; lead post-mortems and remediation Collaborate with infrastructure teams to build monitoring, alerting, and observability stacks that surface security … configuration management (Ansible, etc.) Proficiency with network monitoring and observability tools (e.g., Splunk, Datadog, New Relic, Elasticsearch, Prometheus, RSA NetWitness, Tenable) Strong incident response and troubleshooting background; comfort operating in high-pressure environments Experience mentoring junior/mid-level engineers and building security culture within technical teams Desirable ...

investigations, drive threat detection enhancements, and lead a team across SIEM, EDR, and SOAR platforms in a hybrid UK-based role. The role emphasizes incident response, forensics, automation, and CI/CD security, with collaboration across DevOps, IT, and development teams to strengthen the organisation's security posture. ...

solutions are ready for live operation with CNI and operational support teams Embed operational considerations early to minimise operational risk Coordinate communication, change impact, incident preparedness and release readiness Coordinate transition into service, support arrangements, training and business readiness Support deployed applications and platforms Improve operational handovers, service acceptance … incident response mechanisms Requirements Strong delivery leadership experience in multi-team, multi-vendor technology environments Ability to manage complex dependencies across multiple teams and suppliers Excellent understanding of business and operational objectives and stakeholder landscapes Proven delivery governance capability, including RAID management, milestone planning, reporting, roadmap alignment ...

drive business outcomes. Willingness to travel Fluency in English. Bonus Points: Hands‐on experience through delivering demos and POVs or in cybersecurity operations, incident response, digital forensics, or security‐focused AI infrastructure—providing the operational depth that elevates authored content beyond theoretical instruction. CrowdStrike Falcon certifications (e.g., CCFA … accommodation, please contact us at recruiting@crowdstrike.com for further assistance. , Bonus Points: Hands‐on experience through delivering demos and POVs or in cybersecurity operations, incident response, digital forensics, or security‐focused AI infrastructure—providing the operational depth that elevates authored content beyond theoretical instruction. CrowdStrike Falcon certifications (e.g. ...

KPIs, across incidents, service requests and change, reporting honestly on where things stand and what you are doing about it Chair or oversee incident, problem and change management processes, including major incident response and post-incident reviews Plan and manage the rota that keeps support cover … live, business-critical enterprise system, ideally Oracle Cloud (Fusion) or a comparable ERP/HCM/EPM platform Solid grounding in ITIL-based incident, problem and change management, and the judgement to know when to elevate and when to let a process run Experience managing SLAs, service reporting ...

desirable extras include certifications such as GWAPT, GWEB, OSCP or AWS Security Specialty, Security Champions or developer training experience, and exposure to SOC or Incident Response environments. What's in it for you? Enjoy a generous market salary, along with fantastic growth opportunities and a vibrant work environment ...

provisioning and deployment workflows (Terraform, GitHub Actions, GitOps) Package and deploy applications to customer environments Implement and optimise observability tooling (Prometheus, Grafana, Loki) Support incident response, monitoring, and backup/recovery planning Mentor project teams in DevSecOps practices and environment management Ensure cloud environments are secure, performant ...

Security Lead & Cyber Vulnerability Manager who will be responsible for leading the organisations operational cyber security capability, ensuring the delivery of security operations, cyber incident management and infrastructure and cloud vulnerability management across the enterprise. Providing operational leadership for the identification, assessment and remediation of cyber security risks … will drive the organisations security position across infrastructure, cloud services and third parties. This includes security monitoring, incident response, threat intelligence, vulnerability assessment and ensuring all risks are managed taking into account business priorities and regulatory requirements. Key Accountabilities - Reduction of Cyber risk exposure through strong Security Operations ...

frameworks, and risk management processes. Develop and maintain the Group IT Security Risk Register. Lead cyber security risk assessments and remediation planning activities. Manage incident response, cyber investigations, and escalation procedures. Oversee annual penetration testing programmes and security audits. Support compliance initiatives including Cyber Essentials, Cyber Essentials Plus ...

data transformations Design and optimise KQL queries; build and tune analytic rules and detection logic Develop Logic Apps/SOAR workflows to automate response Implement CI/CD pipelines (Azure DevOps/Git) for SIEM content deployment Automate deployment/config across environments; tune detections to reduce false positives … logic design and tuning Logic Apps, Playbooks and SOAR automation Azure DevOps/Git CI/CD pipeline implementation Strong grounding in security monitoring, incident response and threat hunting Strong troubleshooting and root cause analysis skills Desirable SANS SEC503 – Network Monitoring and Threat Detection Candidates must hold active ...

differing technologies within the environment. Excellent command of Cybersecurity organization practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies. Ability to identify network attacks and systemic security issues as they relate to threats and vulnerabilities, with focus on recommendations for enhancements ...

shift-left strategies, security scanning & tooling.* Container Security – Experienced in Docker frameworks, CI/CD, Orchestration, Scanning and Reporting* SOC – Experienced in Security Ops, Incident Response, Threat Hunting, Malware/Forensic Analysis* WebApps – Experienced in WebApp DevSecOps best practices, WebApp scanning for OWASP top 10.* Good understanding ...

Embed operational considerations early in delivery to support mature DevOps practices and minimise operational risk Work closely with business teams on communication, change impact, incident preparedness, and release readiness Coordinate transition into service, support arrangements, training, and business readiness Work closely with operational teams supporting the deployed applications/… platforms Support continuous improvement in operational handovers, service acceptance, and incident response mechanisms Applicants must have the right to work in the UK by the start of employment. Visa sponsorship may not be available for this role and will be considered in line with business requirements. About ...

availability Implement self-service tooling to empower development teams Drive DevOps best practices across the digital product lifecycle Develop and enhance monitoring, observability, and incident response processes Support global engineering teams delivering high-traffic platforms Key Requirements Proven experience supporting digital product delivery in a DevOps or platform ...

processes to improve efficiency Contribute to infrastructure-as-code and DevOps pipelines Develop proactive monitoring strategies and support security best practices Participate in incident response, threat simulation and operational runbooks Collaborate with development teams to resolve technical issues and support deployments Design systems with high availability and disaster ...

platform(includes ML and LLM workloads) - model serving and inference infrastructure (GPU-backed endpoints, autoscaling, latency and cost tradeoffs), with SLOs, on-call, and incident response that cover models, not just services Observability(includes ML models) - drift and performance monitoring for ML, plus LLM-specific tracing, evals ...

friends, and passengers around the globe arrive at their destination on time. Site Reliability Engineers at Collins are responsible for service availability, performance, monitoring, incident response, and capacity planning. You should be experienced in finding problems in software and writing code to fix them. The right candidate ...

Operational readiness for new releases Safe production access and change coordination Production is a high-discipline environment. You make sure it stays that way. Incident Management You own the full lifecycle: High‐signal alerting and fast detection Structured incident response Clear internal and customer communication Blameless postmortems … Escalations are fast and predictable. Monitoring & Reliability Define SLIs/SLOs for critical systems Improve visibility across availability, latency, errors, and saturation Track MTTR, incident frequency, and escalation trends Drive reliability roadmap initiatives We measure reliability, and improve it continuously. Team Leadership Lead and grow the Operations team ...

build of the partner integrations and settlement infrastructure your domain depends on. Own production health for your domain, including reliability, observability, on-call, and incident response. Lead design reviews, set technical direction for your domain, and mentor mid-level engineers. Use agentic coding tools (Copilot, Cursor, Claude Code ...