1 to 25 of 28 Permanent Incident Response Jobs in Hampshire

networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.Title and SummaryThreat Response Technology and Capabilities Product OwnerOverviewThe Corporate Security Threat and Response Management product ownership team is looking for a Lead Security Engineer to help drive … ideal candidate is passionate about the modern security tools, capabilities, and strategies.As a Product Owner, you will be defining, owning, and driving the incident response technology and capability strategy across global Security Operations. This role sets the vision for response tooling, automation, AI augmentation, and digital evidence ...

frameworks Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident response, threat intelligence and cyber defence capabilities Architect security monitoring, detection and response solutions Design business continuity and cyber resilience frameworks Compliance … architecture role Proven experience designing enterprise-scale security architectures Strong background in defence, aerospace or government security programmes Demonstrated expertise with security operations, incident response and threat management Track record of leading security transformation and programme implementations Technical Knowledge Deep expertise in security architecture frameworks, methodologies and best ...

frameworks. Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident response, threat intelligence and cyber defence capabilities. Architect security monitoring, detection and response solutions. Design business continuity and cyber resilience frameworks. Compliance … architectural role. Proven experience designing enterprise-scale security architectures. Strong background in defence, aerospace or government security programmes. Demonstrated expertise with security operations, incident response and threat management. Track record of leading security transformation and programme implementations. Deep expertise in security architecture frameworks, methodologies and best practices. Expert ...

frameworks. Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident response, threat intelligence and cyber defence capabilities. Architect security monitoring, detection and response solutions. Design business continuity and cyber resilience frameworks. Compliance … architectural role. Proven experience designing enterprise-scale security architectures. Strong background in defence, aerospace or government security programmes. Demonstrated expertise with security operations, incident response and threat management. Track record of leading security transformation and programme implementations. Deep expertise in security architecture frameworks, methodologies and best practices. Expert ...

models and continuous verification frameworksCyber Threat & Risk ManagementAssess cyber threat landscape and design threat-informed security architecturesLead security risk assessments and vulnerability management programmesDesign incident response, threat intelligence and cyber defence capabilitiesArchitect security monitoring, detection and response solutionsDesign business continuity and cyber resilience frameworksCompliance & Standards ImplementationEnsure security … with 5+ years in architecture roleProven experience designing enterprise-scale security architecturesStrong background in defence, aerospace or government security programmesDemonstrated expertise with security operations, incident response and threat managementTrack record of leading security transformation and programme implementationsTechnical KnowledgeDeep expertise in security architecture frameworks, methodologies and best practicesExpert-level ...

help protect systems that matter. Apply today and take your cyber security career to the next level. If you're passionate about threat detection, incident response, and staying one step ahead of attackers, we'd love to hear from you. Office based: Farnborough. Clearance: You do need … triage and investigate security incidents across critical client environments. Analyse network traffic, logs and security events to identify threats and vulnerabilities. Lead and support incident response activities, providing expert guidance on containment, eradication and recovery. Enhance detection rules and use cases using MITRE ATT&CK and threat-informed ...

wider government standards.Act as the Saab UK representative on the Global Cyber Council.Lead risk assessments, threat modelling, and vulnerability management within Saab Uk process.Manage incident response and coordinate with other company parties.Lead on the compliance of Cyber controls including DefStan 05-138, ISO 27001, NIST.Responsible for the completion … environments.Strong knowledge of classified information handling and secure communication protocols.Expertise in intrusion detection, SIEM tools, and advanced threat intelligence systems.Proven track record of leading incident response in high-security environments.Familiarity with defence-specific compliance frameworks (MOD JSPs, NIST SP 800 series, ITAR, GDPR).Excellent leadership, stakeholder management ...

Saab UK representative on the Global Cyber Council. Lead risk assessments, threat modelling, and vulnerability management within Saab Uk process. Manage incident response and coordinate with other company parties. Lead on the compliance of Cyber controls including DefStan 05-138, ISO 27001, NIST. Responsible for the completion … classified information handling and secure communication protocols. Expertise in intrusion detection, SIEM tools, and advanced threat intelligence systems. Proven track record of leading incident response in high-security environments. Familiarity with defence-specific compliance frameworks (MOD JSPs, NIST SP 800 series, ITAR, GDPR). Excellent leadership, stakeholder management ...

improve detection capabilities and contribute to the ongoing maturity of the SOC. You will also: Monitor and investigate security events across enterprise environments Perform incident response activities and support remediation efforts Analyse network traffic, endpoint activity and system logs Improve detection rules using MITRE ATT and CK techniques … application to our client in conjunction with this vacancy only. Key Skills SOC Analyst, Senior SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk, SIEM, Incident Response, Threat Detection, Cyber Security, MITRE ATT and CK, Blue Team ...

boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant boundary configurations and security baselines Incident Management & Threat Response Lead boundary security incident detection, investigation and response Manage security alerts, anomaly investigation and threat escalation Coordinate incident response across boundary security team and customer security teams Conduct post-incident reviews and implement preventative measures Maintain security event logs and provide compliance reporting to MOD Technology & Service Development Evaluate and implement boundary security technologies and tools Design automation and orchestration for boundary security operations Lead ...

availability, security and resilience of key network services. Key Responsibilities Lead the delivery of secure network boundary services and operations. Manage security monitoring, incident response and service performance. Oversee boundary security technologies including firewalls, IDS/IPS and related security controls. Drive continuous service improvement and operational excellence. … leadership experience managing security operations or managed service teams. Strong knowledge of enterprise firewalls, IDS/IPS, SIEM and threat monitoring technologies. Experience leading incident response and service delivery within secure environments. Excellent stakeholder management and communication skills. Desirable Experience within Defence, Government or National Security environments. Certifications ...

boundary traffic inspection, content filtering and advanced threat protection. Lead boundary security assessments and vulnerability remediation. Implement MOD-compliant boundary configurations and security baselines. Incident Management & Threat Response Lead boundary security incident detection, investigation and response. Manage security alerts, anomaly investigation and threat escalation. Coordinate incident response across boundary security team and customer security teams. Conduct post-incident reviews and implement preventative measures Maintain security event logs and provide compliance reporting to MOD. Technology & Service Development Evaluate and implement boundary security technologies and tools. Design automation and orchestration for boundary security operations. Lead ...

principles Cyber Threat & Risk Management Assess cyber threat landscapes and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident response, threat intelligence and cyber defence capabilities Architect security monitoring, detection and response solutions Develop cyber resilience and business continuity frameworks Cloud ...

Trust and least privilege principlesCyber Threat & Risk ManagementAssess cyber threat landscapes and design threat-informed security architecturesLead security risk assessments and vulnerability management programmesDesign incident response, threat intelligence and cyber defence capabilitiesArchitect security monitoring, detection and response solutionsDevelop cyber resilience and business continuity frameworksCloud & Security SolutionsDesign cloud ...

Professional Services role within our Security Engineering function, focused on detection engineering and automation. You will lead the design and delivery of detection and response capabilities across SIEM, XDR and SOAR platforms. This includes building detection rules, developing automations, and creating operational playbooks that support effective SOC outcomes.A … Working directly with customers, you will define detection strategies, design use cases aligned to MITRE ATT&CK, and guide improvements in visibility, coverage and response maturity. You will work closely with platform onboarding and engineering teams, supplementing them with specialist expertise in detection engineering and automation, rather than focusing ...

Security Operations capability. This is more than a leadership role. You'll remain hands-on in the fight against cyber threats, leading investigations, driving incident response, mentoring analysts, and strengthening our detection and response capabilities across multiple complex client environments. Whether you're already leading … operational discussions with stakeholders, partners and custom ers. What You'll Bring: Proven experience working within a Security Operations Centre (SOC). Strong incident detection, investigation and response experience. Deep understanding of network and host-based attack techniques. Hands-on experience with SIEM technologies such as Microsoft Sentinel ...

practice. Practical experience in one or more security areas such as vulnerability management, Identity and Access Management, endpoint security, cloud security, security monitoring or incident response. The ability to understand technical issues, assess security risk and recommend practical and proportionate solutions. Strong analytical and problem-solving skills. Confidence working ...

observability and operational tooling to improve platform reliability. Working closely with Site Reliability Engineering and Operations teams to ensure high availability and resilience. Supporting incident response, root cause analysis and continuous improvement initiatives. Acting as a technical mentor, promoting engineering standards and best practice across the team. Collaborating ...

need to succeed. Career development is a core focus, with clear pathways into Threat Intelligence, SOC Engineering, SOC Professional Services, senior SOC roles and Incident Response for those who want to specialise. You’ll be part of a collaborative, agile team that values curiosity, humour and a genuine ...

with security teams to implement infrastructure hardening and vulnerability management Optimise infrastructure costs, energy efficiency and environmental impact Support operational readiness, performance monitoring and incident response planning Customer & Stakeholder Engagement Serve as technical authority for infrastructure discussions with senior customer stakeholders Present architecture recommendations to customer leadership ...

CodeSupport container-based workloadsEnsure environments are consistent, scalable, and aligned with application needsObservability & ReliabilityImplement monitoring, logging, and alerting focused on system and application healthSupport incident response and debugging across the stackDrive ongoing improvements to reliability and performanceRequired ExperienceStrong experience in DevOps, Platform Engineering, or Software EngineeringGood programming experience ...

enterprise applications, systems and cloud platforms Architect identity federation, single sign-on (SSO) and cross-domain authentication Support IDAM operational readiness, performance monitoring and incident response Establish IDAM lifecycle management and continuous improvement processes Customer & Stakeholder Engagement Serve as technical authority for IDAM architecture discussions with customer leadership ...

enterprise applications, systems and cloud platforms Architect identity federation, single sign-on (SSO) and cross-domain authentication Support IDAM operational readiness, performance monitoring and incident response Establish IDAM lifecycle management and continuous improvement processes Customer & Stakeholder Engagement Serve as technical authority for IDAM architecture discussions with customer leadership ...

enterprise applications, systems and cloud platforms. Architect identity federation, single sign-on (SSO) and cross-domain authentication. Support IDAM operational readiness, performance monitoring and incident response. Establish IDAM lifecycle management and continuous improvement processes. Customer & Stakeholder Engagement Serve as technical authority for IDAM architecture discussions with customer leadership. Present ...

integration with enterprise applications, systems and cloud platformsArchitect identity federation, single sign-on (SSO) and cross-domain authenticationSupport IDAM operational readiness, performance monitoring and incident responseEstablish IDAM lifecycle management and continuous improvement processesCustomer & Stakeholder EngagementServe as technical authority for IDAM architecture discussions with customer leadershipPresent identity and access management ...