1 to 25 of 34 Permanent Incident Response Jobs in the Midlands

play a critical role in strengthening and maturing Reapit’s cloud security posture. Your work will span hands on security engineering, deep incident response, proactive threat detection, and collaboration with global teams. Design, implement, and enhance secure Cloud infrastructure, services, and applications in collaboration with DevOps teams. Conduct … detail and high quality documentation. Work in a self managing, proactive manner — anticipating security needs, identifying gaps, and driving improvements without close supervision. Incident Response & Threat Detection Respond to SOC alerts. Working with our outsourced SOC, Lead and participate in global incident response activities, including investigation ...

will be accountable for the effective operation, continuous improvement and resilience of the Bank's security operations capability, covering Security Operations Centre monitoring and response, Identity and Access Management services, security analysis, operational security controls and supplier-delivered security services. The Head of Security Operations is a senior leadership … India offices, supported where appropriate by third-party managed security service providers. The team provides 24x7 or extended-hours security monitoring and response, identity and access management operations, vulnerability and threat analysis, security tooling administration, control assurance support, reporting, and operational support. Your responsibilities will include... Security Operations Leadership ...

operations. This is a technical role suited to an experienced analyst with strong engineering instincts, hands-on coding capabilities, and a deep understanding of incident response, detection engineering, and adversary tradecraft. This position includes approximately one week per month of on-call availability for high-priority incident … ideal for someone who has likely grown from an engineering background and can write scripts (Python, Bash) to automate, enhance, and refine detection and response workflows. Experience with Splunk, SIEM operations, cloud endpoints, networks, and detection engineering will be highly advantageous. NOTE: Candidates for this role must be eligible ...

with cross-functional teams—including business stakeholders, infrastructure & operations, architecture, service delivery, external partners, and product teams—to identify vulnerabilities and develop remediation strategies. Incident Response: Manage security incidents, conduct root cause analysis, and implement preventive measures. Continuous Improvement: Evaluate and adopt new technologies and tools to enhance … security posture and incident response capabilities. Mentorship & Education: Educate teams on security principles, tools, and practices, instilling a security-first mindset across the organisation. About you You’re a seasoned engineering leader who thrives at the intersection of security, cloud, and DevOps. You’re passionate about building high ...

Ensure cloud platforms config meets best practise/compliance Manage security vendors Conduct risk assessments Monitor security events - SIEM, IDS/IPS, Sentinel1 Lead incident response, coordinate with vendors during breach Ensure compliance with regulations - GDPR, HIPAA, PCI-DSS, ISO27001, NIST Work with IT teams to secure infrastructure … applications and endpoints Integrate security into cloud deployments Develop/Test incident response, DR and BC Senior Information Security Analyst: Experience Cloud security platforms - AWS Security Hub, Azure Security Centre Identity management and encryption Managing security vendors Security tech: Firewalls, VPNs, Endpoint protection Frameworks - NIST, CIS Controls Scripting ...

Improve security awareness across the business, including upskilling technical and non-technical stakeholders. Engage with customers, auditors and senior stakeholders on security requirements. Support incident response planning, vulnerability management and risk remediation. Monitor the evolving threat landscape and translate risks into practical business actions. Experience Required This role … Conditional Access. Knowledge of endpoint and network security, including EDR/MDR, firewalls and secure configuration. Experience with vulnerability management, patching and incident response processes. Ability to translate technical risk into clear business impact. Strong stakeholder management skills, with the ability to influence change across technical ...

+ Health Cash Plan + EAP + Sick Pay Are you a cyber security professional looking to take ownership of patching, threat detection, and incident response in a large-scale enterprise environment while playing a key role in strengthening security maturity? This is a fantastic opportunity to join … coordinate remediation on critical systems, and support vulnerability management processes. You will also contribute to threat hunting activities and help continuously enhance detection and response capabilities. The ideal candidate will have hands-on cyber security experience, strong knowledge across networks, endpoints, identity, and cloud security, and the ability ...

skills into practice by taking on a role within Capgemini to protect us and our clients from cyber threats? We are seeking a Compliance Incident Analyst with incident management experience to join our cybersecurity team. Working as part of our Security Operations team, you will be responsible … managing compliance cyber related incidents through to resolution, working closely with the client to suggest improvements to bolster security. As a Compliance Incident Analyst, you will play a crucial role in safeguarding our customer’s information assets by identifying, assessing, and mitigating compliance related issues (suspected policy breaches, security ...

external stakeholders. Taking ownership of complex alerts, support threat hunting and intelligence efforts, and contribute to the refinement of detection rules, playbooks, and response procedures. You will be involved in – • Incident Detection & Response • Threat Intelligence and Analysis • Security Monitoring and Detection Engineering • Compliance, Reporting and Documentation • Vulnerability … This would suit an experienced security analyst who has proved experience working in a busy security department, working in security operations. Strong alert triage, incident response, security monitoring, and threat analysis. Experience handling real-world security incidents and working with SIEM, EDR, or vulnerability management tools. Ideally have ...

strategy and operating model (build vs. buy vs. MSSP); maximize value from SIEM, SOAR, IAM, PAM, EDR, DLP, DSPM, and CTI platforms. Security Operations & Incident Response Accountable for SOC performance (24×7 detection, response, threat hunting), DFIR, purple-team/assurance, ransomware preparedness, and crisis playbooks. Maintain … executive incident communications, regulator notifications, and post-incident improvements. Act as escalation point for any security related service failures or major incidents. Threat and Vulnerability Management Support the TVM team in continuously reducing vulnerability levels in the organisation. Recommend procedural improvements and reporting to drive constant improvement. Drive ...

updates Embed security within the software delivery lifecycle (DevSecOps principles) Support audits and ensure compliance with recognised frameworks (e.g., ISO 27001, Cyber Essentials) Lead incident response and root cause analysis for security and infrastructure-related events Monitoring, Reliability & Support Implement monitoring, alerting, and observability across infrastructure and applications … Knowledge of warehouse or automation systems and integrations (ERP, WMS, PLC/SCADA) Cloud experience (Azure) and containerisation (Docker, Kubernetes) Familiarity with ITIL processes (incident, change, problem management) Relevant certifications (e.g., VMware, Security+, CISSP, Terraform) Personal Attributes Strong ownership and accountability for delivering robust infrastructure solutions Pragmatic problem-solver ...

technical role where youll investigate complex alerts, support threat-hunting activities, contribute to the tuning of SIEM detections, and help improve SOC processes and response playbooks. Youll also play an important role in mentoring analysts and supporting the continued development of the SOCs technical capability. Technology innovation is part … this role will continue to evolve as AI-driven detection, automation, and response capabilities are introduced. You will: Investigate, triage, and respond to security alerts across customer environments Support the tuning and maintenance of SIEM detection rules alongside senior analysts Carry out proactive threat analysis and support threat-hunting ...

tasks Produce and maintain operational runbooks, configuration documentation, and governance processes Create user guides for end users, compliance officers, and IT support teams Document incident response processes related to Purview alerts Work closely with Compliance, Security, Data Governance, and IT teams to implement policies into Purview Support … Microsoft 365 administration. You will have hands-on experience with Microsoft Purview or related compliance/security platforms, with exposure to operational support, incident management, or compliance monitoring. Experience: Microsoft Purview Information Protection - labels, policies, auto-labelling, encryption Data Loss Prevention - endpoint, SharePoint/OneDrive/Teams, Exchange, cloud ...

standards. Reviewing and enhancing information security policies, procedures and controls. Responding to potential security incidents in collaboration with the wider IT team. Assisting with incident response, investigation, containment and recovery activities. Developing and improving cyber security monitoring, detection and alerting capabilities. Monitoring internal and external threat landscapes … tools and controls. Good understanding of ISO27001 and/or other recognised Information Security frameworks. Experience in risk assessment, threat detection, vulnerability management and incident response. Strong analytical and problem-solving skills with the ability to perform under pressure. Excellent communication skills with the ability to explain technical concepts ...

without manual intervention Self Healing systems, Runbook automation Exposure to tools like Gremlin, Chaos Monkey, AWS FIS to simulate outages and improve fault tolerance Incident Management Act as the primary point of escalation for critical production issues and lead major incident response, root cause analysis, and postmortems. … Perform detailed post-incident investigations to identify underlying causes. Document findings and share learnings to prevent recurrence. Implement preventive measures and continuous improvement processes. Observability Champion monitoring, logging, and alerting strategies using tools like Prometheus, Grafana, ELK, and AWS CloudWatch. Build real-time dashboards to visualize system health ...

complex enterprise environment, alongside contributing to security governance, compliance, and best practice delivery. You will play a key role in strengthening detection and response capability across cloud and on-prem infrastructure, while supporting both BAU operations and ongoing transformation projects. Key Responsibilities of the Cyber Security Engineer: Deploy, configure … security operations context Strong understanding of security frameworks such as ISO27001 and NIST Experience across both BAU security operations and project delivery Strong incident response experience, including investigation, escalation, and root cause analysis Ability to produce clear technical documentation (SOPs, playbooks, and standards) Strong communication and stakeholder management ...

understanding of relevant legal, regulatory and compliance requirements Proven experience implementing and operating security management in line with legislation and standards Experience conducting investigations, incident response and producing clear, high-quality reports Strong background in risk management, including risk assessment and logging Experience in process mapping and producing … effective, user-friendly procedures Broad understanding of information and cyber security technologies Experience in cyber incident management and remediation Knowledge or experience of forensic investigation Excellent written and verbal communication skills, with the ability to engage confidently with senior stakeholders A customer-focused mindset with a commitment to high ...

Security Operations Manager to lead our in-house Security Operations capability while remaining deeply involved in the day-to-day technical aspects of detection, response and continuous improvement. This role is ideal for someone moving from a Senior SOC Analyst, Senior Security Engineer or SOC Team Lead position … enterprise, cloud and operational technology environments. Improving detection capabilities, automation and SOC processes to stay ahead of emerging threats. Working closely with vulnerability management, incident response and governance teams to strengthen the organisation's security posture. Taking part in the on-call rota and providing technical leadership during ...

monolith to microservices on EKS. Define standards for containers, runtime environments, observability, tenancy, security, and infrastructure automation. Lead SRE practices including SLI/SLOs, incident management, DR/BCP planning, post-mortems, and operational resilience. Own platform security, secure SDLC, CI/CD pipelines, IaC, and software supply chain … networking, KMS, RDS, and multi-account architecture. Hands-on Kubernetes, CI/CD, Terraform, and cloud security experience. Strong understanding of SRE, observability, incident response, and disaster recovery. Experience operating within regulated environments such as ISO 27001, SOC 2, or GxP. Comfortable balancing strategic leadership with hands ...

monolith to microservices on EKS. Define standards for containers, runtime environments, observability, tenancy, security, and infrastructure automation. Lead SRE practices including SLI/SLOs, incident management, DR/BCP planning, post-mortems, and operational resilience. Own platform security, secure SDLC, CI/CD pipelines, IaC, and software supply chain … networking, KMS, RDS, and multi-account architecture. Hands-on Kubernetes, CI/CD, Terraform, and cloud security experience. Strong understanding of SRE, observability, incident response, and disaster recovery. Experience operating within regulated environments such as ISO 27001, SOC 2, or GxP. Comfortable balancing strategic leadership with hands ...

differing environments. The role has responsibility to oversee delivery of: Run Activity – Monitoring and acting as required on the health of various Security tools. Incident Response – responding with appropriate actions as required regarding tooling within the remit of the SET. Triaging requests incoming to the Engineering Team mailbox … responding to health alerts from the Security Infrastructure we maintain. Understanding of how to tune and enable polices, features and enhancements as required in response to Security Incidents and general enhancements requested by the client. Expertise in IT Service Management including incidents, change control, problem and knowledge. ...

will be actively responsible for ensuring the successful achievement of external certifications such as ISO27001, MOU, PSN and PCI-DSS etc alongside managing security incident response plans. In addition, the Lead information Security Analyst/Engineer will provide advice and guidance on government standards and industry best practice …/risk problems across a diverse range of security threats Good knowledge of IT Security Principles All round experience of vulnerability management, information security incident management alongside IT Service and Asset management systems Lead Information Security Engineer/Analyst - Benefits Basic salary of up to £54k on offer Pension ...

three main areas for Security Engineering and Operational activity: Run Activity – Monitoring and acting as required on the health of various Security tools. Incident Response – responding with appropriate actions as required regarding tooling within the remit of the SET. Triaging requests incoming to the Engineering Team mailbox … health alerts from the Security Infrastructure we maintain. You will learn how to tune and enable polices, features and enhancements as required in response to Security Incidents and general enhancements requested by the client. You can bring your whole self to work. At Capgemini building an inclusive future ...

Essentials/ISO 27001 Knowledge of: Identity & access management (Entra ID, MFA, Conditional Access) Endpoint & network security (EDR/MDR, firewalls) Vulnerability management & patching Incident response processes Ability to translate technical risk into business impact Key Traits Hands-on and pragmatic Comfortable working in a fast-paced, high ...

pipelines and self-service automation to improve speed, quality and reliability of delivery* Embed monitoring, logging and alerting to ensure high availability and rapid incident response* Support and enable engineering teams through documentation, guidance and continuous improvement of developer experience This role is paying between ...