19 of 19 Permanent Incident Response Jobs in Central London

minimizes organizational risk and reduces the impact of security breaches, by utilizing the latest industry standards and combining experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, you will be able to help clients contain security events, harden their environments, and transform their security … role, you will be responsible for driving remediation efforts by developing, coordinating, and executing the eradication, recovery, and remediation plan in parallel with active incident response. You will partner with key stakeholders, including the Incident Response (IR) team, IT operations, business units, and legal, to ensure that ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

join this global B2B SaaS organisation looking for a Senior Cloud Detection Engineer to take ownership of cloud-native security threat detection and response capability. If you thrive in high-scale cloud environments and love building smart detections and automated response workflows, this role gives you real technical … optimise Threat Detection capabilities in Elastic and Azure Sentinel Develop Threat Models for AWS & Azure and our global SaaS products Create and maintain incident response playbooks Automate response actions with the Security Team Partner with our external SOC to refine detection strategies Perform threat hunting and analysis ...

instrumenting services with observability (metrics, logs, and traces) so their health is visible. Take part in operating live services, including release management, alerting, and incident response, while actively reducing toil, technical debt, and manual effort through automation. Take ownership of personal learning paths, continually acquiring new skills, particularly … Infrastructure as Code to provision and manage environments in a repeatable, reviewable way. A willingness to take part in operational duties such as releases, incident response, and keeping live services healthy and reliable. You have an awareness of security principles and best practices to ensure secure software delivery. ...

controlled deployment and rollback processes - Implement strong IAM, networking, service account, secrets management, encryption and least-privilege controls - Establish centralised logging, monitoring, alerting and incident response processes - Design and test backup, disaster recovery and business continuity arrangements, including appropriate RPO and RTO targets - Support secure operation of scheduled … managed database services - Strong experience of CI/CD, ideally using GitHub Actions, together with Docker and containerised workloads - Sound understanding of monitoring, incident response, backup, disaster recovery, threat modelling and secure software delivery - Experience within fintech, banking, payments, accounting software, payroll or another regulated environment would ...

central London. Responsibilities: Providing effective leadership to the Cyber Security team, focusing on individual performance and development Overall responsibility for threat monitoring, detection and response Acting as a point of escalation for complex security issues Ensuring triage of all security alerts and that there is thorough investigation and timely … firm security standards Maintaining SIEM tools, including their detection rules Oversight of vulnerability management across the firm Providing calm and effective leadership on security incident response activities Working closely with senior stakeholders both within security and IT and across the business Key skills required: 5+ years experience ...

client environments across cloud, on-premises and hybrid infrastructure. This is an opportunity to work with modern security technologies across security engineering, threat detection, incident response, SIEM, cloud security and network security , while working alongside experienced engineering and security specialists. The Role As a Cyber Security Engineer … Firewall and network security management Developing and maintaining security policies, standards and procedures Conducting infrastructure security assessments using tools such as CIS Benchmarks Supporting incident detection, response and threat intelligence activities Contributing to vulnerability management and endpoint security Supporting security improvements across complex client environments What ...

reviews and monitoring KPIs Ensure compliance with IT security policy standards, including encryption, secure disposal, build hardening, monitoring, patching and access controls Lead security incident response and contribute to major incident management control Ensure effective communications outside of the IT team Production of an appropriate IT infrastructure ...

Kubernetes-based environments. You will be at the intersection of security and engineering, developing scalable tooling, automating security controls, and enabling robust detection and response capabilities across our cloud infrastructure. In this role, you will require deep technical expertise in cloud environments, Kubernetes security, and platform automation. You will … work closely with Incident Response Engineers and platform teams to ensure that security is seamlessly integrated into our infrastructure and operational workflows. Your role will require participation in a rotating on-call schedule outside of core business hours and over the weekend to ensure security incidents ...

enforce security and technical standards * Lead Infrastructure as Code (IaC) practices across teams and environments * Drive observability, monitoring, logging and audit controls * Support incident response, patching, compliance reporting and technical debt remediation * Partner with developers and delivery teams to improve engineering quality and security * Document security processes, controls ...

desirable, but not essential. Proven experience leading cyber security operations teams, including coaching and developing staff, managing priorities and providing technical escalation support. Strong incident response experience, with the ability to lead investigations, co-ordinate containment and recovery activities, and remain effective under pressure. Broad technical expertise across … endpoint and email security, identity and access management, vulnerability management, network security and SASE technologies. Experience improving operational security, including developing detection rules and response playbooks, using threat intelligence and threat hunting, and driving timely vulnerability remediation. Experience managing outsourced security providers, holding suppliers accountable for service delivery ...

Conduct risk assessments, internal audits, compliance reviews and Data Protection Impact Assessments (DPIAs). Support the management of security incidents, business continuity planning and incident response exercises. Maintain ISO 27001 documentation, including the Statement of Applicability, and coordinate internal and external audits. Work closely with Cyber Security, Group ...

configurations, owners, evidence and testing methods. * Act as the senior technical escalation point for complex or high-severity incidents and participate in the major incident on-call arrangements. * Design and strengthen identity security using Microsoft Entra ID, Conditional Access, Privileged Identity Management, identity governance, workload identities, access reviews … identity security, Zero Trust, cloud security, data security, endpoint security, network security, application and API security, secure software development and DevSecOps. * Strong experience in incident response, detection engineering, threat hunting, vulnerability or exposure management and security automation. * Ability to automate security and assurance processes using technologies such ...

proportionate, practical controls Challenging network, infrastructure and cloud configurations constructively with engineers and suppliers Providing expertise and oversight across vulnerability management, security monitoring and incident response Explaining security risk and its business impact clearly to Executives Seeing improvements through to implementation with teams who do not report ...

Manager, you'll play a key role in strengthening security across our Microsoft 365 environment, cloud platforms, networks and infrastructure. From threat detection and incident response to vulnerability management and security-by-design, you'll be at the centre of keeping our organisation secure in an ever-changing ...

with Europe cloud market (hyperscalers, local data centers, partner programs, marketplace motions) * Hands-on understanding of the observability landscape (APM, infra monitoring, logs, tracing, incident response) and how buyers evaluate these tools * Comfortable selling to technical and enterprise buyers (IT, DevOps, Engineering, SecOps) * Strong executive presence, communication ...

controls, elimination of shared/admin accounts), backup and restore strategy, retention and archival, replication, monitoring (Redgate Monitor and equivalents), licensing, performance triage, and incident response. Acting as design authority for the wider data team coaching the SQL Developers on Power BI authorship, dimensional modelling, query optimisation and report ...

practices within the work environment to improve code quality, delivery speed, and operational outcomes (e.g., AI-assisted code review/refactoring, test strategy acceleration, incident/root-cause analysis support), while establishing consistent validation standards (secure coding, peer review, automated testing) and promoting reuse of effective patterns across … ties delivery milestones to risk reduction and resilience outcomes. Drive operational excellence at scale for perimeter, proxy, and SSE services in the US, including incident, change, and problem management rigor, observability and resiliency validation practices, automation to improve repeatability and evidence quality, reduction of client and partner impact ...

Engineering: - Identify vulnerabilities in hardware and software to be remediated by Engineering\Operations teams. - Understand current and emerging security threats. - Assist and lead in Incident Response investigations and mitigation Project Delivery: - Be able where relevant to participate in and lead varied IT Infrastructure lifecycle & security projects. Including … Firms policies. - Post project, participate in evaluating the success of the project, identifying best practices and lessons learned. 3rd Line Support: - Provide Major Problem\Incident Support where Operations team need steering from a subject matter expert. - Liaison with 3rd party suppliers on system issues. - Ensuring that all members ...