1 to 25 of 139 Permanent Incident Response Jobs in London

ownership of a threat defence strategy and service. The role will focus on leading a team responsible for security operations, incident detection and response and threat intelligence which will be delivered through partnership with outsourced providers and IT. We're looking for a motivated and experienced individual … This role will have line management responsibilities for 3 of the team: a Threat Intelligence Lead, a TD Service Operations Lead and a Cyber Incident Response Lead. The role requires DV clearance and a minimum of 2 days per week in the Paddington Office. Occasional travel to other ...

join a mission that matters? The future of cybersecurity starts with you.About the Role:Does building systems that help security analysts close a critical incident before it becomes a breach excite you? Does correlating and analyzing data at trillions-of-events-per-day scale sound like the kind … defend themselves from sophisticated cyberattacks? We'd love to meet you.We are seeking a Senior Software Engineer, Cloud to join our Threat Detection and Incident Response (TDIR) team, helping revolutionize security management with our AI-native Falcon Next-Gen SIEM platform – enabling customers to detect, investigate, and hunt ...

team. This is an excellent opportunity to join a fast-paced cybersecurity environment, helping to protect critical infrastructure and enterprise systems through proactive monitoring, incident response, and threat analysis. Working as part of a 24/7 operational security function, you will play a key role in identifying … monitoring tools, network infrastructure, and endpoint technologies. Investigate and triage security alerts to identify malicious activity and determine attack methods and techniques. Follow established incident response and escalation procedures to contain and mitigate security risks. Ensure all incidents are accurately documented, including indicators of compromise, evidence, and investigation ...

tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security event reporting, and content maintenance (tuning). What we are looking for Key Responsibilities: Serves as a senior member … optimization of enterprise security platforms, overseeing lifecycle management including break-fix, patching, version upgrades, and integration with broader security ecosystems. Directs complex security incident response efforts across multiple vectorsendpoint protection, EDR, malware analysis, network and computer forensicsensuring rapid containment and root cause analysis. Designs and executes advanced vulnerability ...

tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security event reporting, and content maintenance (tuning). What we are looking for Key Responsibilities: • Serves as a senior member … optimization of enterprise security platforms, overseeing lifecycle management including break-fix, patching, version upgrades, and integration with broader security ecosystems. • Directs complex security incident response efforts across multiple vectors—endpoint protection, EDR, malware analysis, network and computer forensics—ensuring rapid containment and root cause analysis. • Designs and executes ...

with global impact upon Colt, business units, partners, and customers. While working as part of this team, the successful individual will provide world class incident response functions to detect, protect, respond, and sustain operations within cyberspace. This role operates at a Tier 3 level , with the expectation that … operational activities, Technology escalation support, Security Solution assessment, existing Service maturing and Build activities assist Analyse potential infrastructure security incidents to determine if incident qualifies as a legitimate security breach Establishing and governing the security incident response processes, investigations and security operational processes Maintenance and enhancement ...

Ready for the challenge? The Role This role sits in the core Platform/SRE team that owns production. You’ll work directly on incident response, on‐call, system reliability, and day‐to‐day operations for Heidi’s platform. We’re open to candidates who are strong … role is intentionally ops‐heavy and focused on keeping real systems healthy in production. What you’ll do Participate in on‐call and incident response: Respond to production incidents, contribute to service restoration, and support clear communication during incidents. Over time, take increasing responsibility for leading incidents ...

team within a leading international technology and cyber security provider. This is far more than a traditional SOC role. You'll be involved in incident response, threat hunting, vulnerability management, detection engineering and proactive cyber defence activities across a modern Microsoft security environment. What You'll Be Doing … Identity Defender for Cloud Apps Microsoft Intune Qualys AttackIQ XM Cyber We're Interested In Candidates with experience in: SOC Operations Security Monitoring Incident Response Threat Hunting Cyber Defence Vulnerability Management Security Operations Engineering You may currently be working as a: Senior SOC Analyst SOC Analyst Cyber Security ...

accountable for developing and implementing cyber claims strategy, best practice and capability across those offices, ensuring a consistent and effective approach to service delivery, incident response and client support. What you’ll do Lead the development and implementation of international cyber claims strategy across jurisdictions outside … required, acting as a referral point to support and supplement local expertise. Establish and embed best practice approaches to cyber claims handling, both initial response and coverage, across global offices. Build and oversee local cyber claims capability in key international markets to ensure consistency of service provision and standards ...

reliability problems across our stack, then design and implement software and systems to create step-function improvements. You will design robust observability solutions, lead incident response, automate operational tasks, and continuously improve our infrastructure's reliability, all while mentoring and educating the broader engineering team to make reliability … Build systems to monitor and report on these metrics, holding teams accountable and ensuring we maintain high reliability standards while balancing innovation speed. Lead Incident Management and Response: Act as a senior leader during high-impact incidents, guiding the team to rapid resolution. Conduct thorough, blameless post-mortems ...

Integrate security scanning and compliance checks into deployment pipelines. Implement monitoring, logging and alerting to improve platform reliability. Support production environments and participate in incident response and post-incident reviews. Maintain cloud networking, storage, compute and database services. Collaborate with development teams to improve automation and platform … Infrastructure Automation, DevSecOps, Security Scanning, Checkov, Trivy, Snyk, Vulnerability Management, Least Privilege, Access Management, CloudFormation, AWS CDK, GitOps, ArgoCD, Flux, Monitoring, Observability, Logging, Alerting, Incident Response, Reliability Engineering, Grafana, Datadog, ELK Stack, OpenSearch, Cloud Operations, Linux, Networking, Cloud Native, Platform Automation, Troubleshooting, Infrastructure Reliability, DevOps Practices, Software Delivery ...

Cloud, and manages tooling through infrastructure-as-code. They run a quarterly penetration test programme and are continuously building out our detection and response capability. It's a small team with broad scope, which means your work is visible, your opinions are heard, and there are meaningful problems … solve will matter. Does this sound like you? You're a senior security engineer who operates credibly across cloud security, detection tooling, and incident response, without being narrowly specialised. You own meaningful parts of the security stack, contribute hands‐on to Azure cloud hardening, and show up reliably ...

responsible for leading both our Cloud Platform and Enterprise Service orgs: Leading and developing two engineering teams — Cloud Platform (cloud infrastructure, observability, SRE, incident response) and Enterprise Services (IT support, IAM, Okta, Slack and core SaaS) — setting technical direction, hiring and performance standards across both. Delivering the reliability … performance and cost-efficiency of the cloud platform underpinning production services, including SLOs, on‐call and incident response practices, and post‐incident learning, in line with the broader infrastructure strategy. Executing the roadmap for enterprise services and identity, treating internal IT as an engineering discipline — automation‐first ...

Lead vulnerability management, third-party security assurance, policy governance, and compliance activities aligned with Cyber Essentials Plus, NIST CSF 2.0, and organisational risk appetite. Incident Response & Threat Management – Coordinate major cyber incident response, act as a senior escalation point, and maintain awareness of emerging cyber threats … controls are implemented throughout the technology lifecycle. Security Awareness & Continuous Improvement – Lead cyber awareness and behavioural change programmes, leveraging threat intelligence, user insights, and incident trends to strengthen security culture and continuously enhance organisational resilience. Why Join Hyde? Hyde is part of the Hyde group ...

responsible for leading both our Cloud Platform and Enterprise Service orgs: Leading and developing two engineering teams — Cloud Platform (cloud infrastructure, observability, SRE, incident response) and Enterprise Services (IT support, IAM, Okta, Slack and core SaaS) — setting technical direction, hiring and performance standards across both. Delivering the reliability … performance and cost-efficiency of the cloud platform underpinning production services, including SLOs, on-call and incident response practices, and post-incident learning, in line with the broader infrastructure strategy. Executing the roadmap for enterprise services and identity, treating internal IT as an engineering discipline — automation-first ...

Security Manager IT Security Manager opportunity for a security leader with a strong SecOps/Incident Response background and broad cyber security management experience to lead a team of 11 across SecOps, Engineering, Architecture and MSSP management, driving security operations and strategic initiatives across on-premises and cloud … function across both on-premises and cloud environments, ensuring the effective delivery of security operations and strategic security initiatives. Leverage your strong SOC and Incident Response background to oversee threat detection, incident management, vulnerability management, and the continuous enhancement of security capabilities. Manage and develop a team ...

security policies, standards and procedures. Leading security awareness and training programmes that improve behaviours and strengthen Moneybox’s security culture. Owning Moneybox’s security incident response framework, ensuring the business is prepared to identify, contain, respond to and recover from security incidents effectively. Overseeing vulnerability management, including scanning … operational efficiency. Experience managing security risk in cloud‐based environments, ideally including Azure. Strong understanding of third‐party security risk management. Experience with incident response planning, testing and improvement. Experience reporting security risks, controls and metrics to senior management. Strong communication skills, with the ability to translate technical ...

model.Ensure compliance with recognised security frameworks including ISO 27001, NIST Cyber Security Framework and IEC 62443.Lead security architecture, Security Operations Centre (SOC), vulnerability management, incident response and cyber resilience activities.Conduct technology and cyber risk assessments, developing mitigation plans and providing executive reporting.Lead business continuity and disaster recovery planning.Champion … strategies. (E)Demonstrated experience managing enterprise infrastructure including cloud, networking, datacentres, storage, end-user computing and cyber security technologies. (E)Experience leading Security Operations, incident response, vulnerability management, technology transformation and cloud migration programmes. (E)Experience managing technology budgets, strategic suppliers, managed service providers and vendor contracts. ...

that everything else runs on. You'll work across the full platform lifecycle—from infrastructure design and provisioning through to CI/CD, observability, incident response and cost optimisation. The role suits someone who pairs strong infrastructure-as-code discipline with a genuine automation-first mindset … Pulumi, CloudFormation or equivalent) and the workflows around it Operate Kubernetes clusters and supporting platform services Implement observability—metrics, logs, traces, dashboards, alerting Lead incident response, root-cause analysis and reliability improvements Drive cloud cost optimisation and capacity planning Implement security hardening, secret management and compliance controls Partner ...

Flagstone is seeking a senior security engineer to own and operate detection and incident response across our Azure cloud security stack. You will work hands-on with Microsoft Sentinel, Defender for Cloud, and XDR tooling, while coordinating remediation with engineering squads. You'll drive security through code, pipelines ...

clear documentation of findings Identify security weaknesses, vulnerabilities, and gaps within the environment Recommend and implement improvements to strengthen overall security posture Assist with incident response and remediation activities Support and deliver internal IT security awareness and training initiatives Participate in and contribute to security-related projects … with Microsoft Defender Experience monitoring and responding to security alerts in a SOC or security-focused environment Knowledge of endpoint security, threat detection, and incident response processes Understanding of cybersecurity principles, vulnerabilities, and attack techniques Ability to investigate and analyse security events effectively Experience identifying security gaps ...

partner with AIOps vendors, IT Operations, infrastructure, platform engineering, SRE, service management, and application teams to reduce operational noise, improve service reliability, and accelerate incident response across a complex enterprise environment. Responsibilities Execute the enterprise AIOps strategy, operating model, and adoption plan across the organization. Build scalable observability … service management, and application teams to operationalize AIOps capabilities at scale. Establish governance, success metrics, and operating rhythms to measure improvements in alert quality, incident reduction, MTTD, MTTR, service health, and product adoption. Drive adoption of AIOps capabilities by aligning use cases, implementation priorities, and operational workflows with business ...

United Kingdom. The role focuses on defining and overseeing information security strategy, policies and governance to protect critical assets. The successful candidate will drive incident response, risk management and regulatory compliance, while partnering with executive leadership to align security with business goals and deliver measurable security improvements. #J ...

cyber security function spanning both on-premises and cloud environments. This role is ideal for a security leader with expertise in SecOps and Incident Response, dedicated to managing a skilled team and overseeing the delivery of strategic security operations. Offering a competitive day rate ...

Barclays Bank UK PLC is seeking a senior data privacy leader to develop and implement privacy policies, risk assessments, and incident response plans across the organisation. You will coordinate investigations, drive awareness, and partner with stakeholders to strengthen data protection and governance. The role requires deep experience ...