1 to 25 of 60 Permanent Incident Response Jobs in the South West

define pragmatic remediation roadmaps aligned to business priorities. Lead and support security architecture reviews across cloud, applications, infrastructure, IAM, data protection and detection/response domains. Provide expert consulting to customers on security strategy, risk reduction, control design, and security operating model improvements. Challenge weak security assumptions with confidence … guardrails. Partner with engineering, platform, DevOps and operations teams to embed security into delivery pipelines and infrastructure as code practices. Support threat detection, incident response readiness, use-case tuning, and post-incident improvement activities. Contribute to security standards, policies, patterns, reusable accelerators, and client-facing deliverables including ...

incidents while leading, mentoring and developing SOC Analysts on shift. Youll act as a key escalation point for complex and high-severity incidents, supporting incident containment, remediation and recovery while providing leadership across the SOC. What youll be doing Leading the SOC team during your assigned shift and handling … escalations Investigating and responding to medium and high-severity security incidents Supporting incident containment, remediation and recovery Mentoring, teaching and upskilling junior SOC Analysts Supporting threat hunting, detection improvement and incident response activities What were looking for 6+ years experience across SOC, Incident Response ...

major organisation is seeking a Cyber Security Operations Specialist to join its Security Operations team. This is a hands on role focused on incident response, threat detection, vulnerability management and continuous improvement across enterprise technology environments. You'll be expected to hit the ground running, managing security alerts … tooling estate. The Role Monitor, investigate and respond to cyber security incidents. Manage and triage security alerts, tickets and operational queues. Lead or support incident response activities through to resolution. Support vulnerability management and remediation activities. Apply threat intelligence to strengthen detection and response capabilities. Develop ...

with global impact upon Colt, business units, partners, and customers. While working as part of this team, the successful individual will provide world class incident response functions to detect, protect, respond, and sustain operations within cyberspace. This role operates at a Tier 3 level , with the expectation that … operational activities, Technology escalation support, Security Solution assessment, existing Service maturing and Build activities assist Analyse potential infrastructure security incidents to determine if incident qualifies as a legitimate security breach Establishing and governing the security incident response processes, investigations and security operational processes Maintenance and enhancement ...

hours per week. We are happy to discuss flexible working! Top 3 skills needed for this role: Highly experienced Cyber Security Operations expertiseAdvanced security incident response capabilityProven security tooling and threat management knowledgeWhat this role is all about: We're looking for a Senior Security Operations Engineer … appropriatelyBuild strong relationships with internal stakeholders, vendors and technology partners to support effective security operationsYou'll develop and maintain security documentation, operational procedures and incident response playbooksSupport penetration testing activities and coordinate the remediation of identified findingsContribute to the ongoing enhancement of monitoring, detection and response processes ...

week. We are happy to discuss flexible working! Top 3 skills needed for this role: Highly experienced Cyber Security Operations expertise Advanced security incident response capability Proven security tooling and threat management knowledge What this role is all about: We're looking for a Senior Security Operations Engineer … strong relationships with internal stakeholders, vendors and technology partners to support effective security operations You'll develop and maintain security documentation, operational procedures and incident response playbooks Support penetration testing activities and coordinate the remediation of identified findings Contribute to the ongoing enhancement of monitoring, detection and response ...

role is the single point of ownership when incidents occur. You will directly oversee the offshore Production Support team, run on-call and incident response, and ensure fast detection, triage and restoration of services. This is not a passive monitoring role. You are expected to understand … offshore Production Support team and be the single point person when incidents occur, escalating only to Head Of when required. Run on-call and incident response; ensure fast detection, triage, and restoration. Maintain observability standards (logs, metrics, traces) and alert quality (low noise, high signal). Understand ...

trusted engineering partner to the desk, ensuring systems are stable, performant, and aligned with business needs. Support live trading environments, including incident response, root cause analysis, and post mortem leadership. Work as a core member of the software engineering team, participating in daily standups and design discussions. Contribute … across trading systems, including automated remediation, self healing workflows, and resilience engineering. Uses enterprise-authorized AI capabilities within the work environment to accelerate major-incident triage, troubleshooting, and post-incident analysis, validating outputs and handling operational data according to sensitivity and security requirements. Leads reuse-first adoption ...

service and empower engineering teams. Own and evolve monitoring and alerting across production systems - ensuring dashboards and alerts are high-signal and actionable. Lead incident response during production issues. Coordinate across teams, drive resolution, and ensure thorough post-incident reviews with meaningful follow-up actions. Investigate … infrastructure. Who you are Passionate about platform reliability, operational excellence, and building shared ownership of production systems across the wider engineering team. Comfortable leading incident response under pressure and making sound technical decisions with incomplete information. Excited about being part of a fast-growing company that's trying ...

Datadog, and safe release practices Oversee database and schema evolution practices - migrations, data integrity, and performance - in partnership with platform and infrastructure teams Lead incident response for backend-owned systems - triage, escalation, post-incident reviews, and runbook quality Mentor engineers on PHP (Yii/Yii2), Go, Security … platform operations - with solid breadth across design, build, test, and run Track record of owning production systems end-to-end: implementation, rollout, monitoring, incident response, and follow-up Experience leading technical delivery on complex, ambiguous initiatives involving multiple engineers, dependencies, or teams Strong architectural judgement - evaluating trade-offs ...

more programming languages. Active, or the ability to obtain, a Developed Vetting (DV) UK security clearance. Preferred qualifications: Security+ or similar Cyber Security/Incident Response related certifications. Experience responding to security incidents on Kubernetes. Experience analyzing, triaging, and remediating common information security incidents. Understanding of common attacker … team events. Review and develop security operations center dashboards for anomalous activity. Demonstrate subject matter expert across typical security disciplines, vulnerability, Endpoint Detection and Response(EDR), Security Information and Event Managemen (SIEM) etc. Must be a British citizen to meet compliance and security clearance requirements. Office location will ...

maintain operational controls, including documented procedures, control testing and monitoring, exception management, and issue remediation with clear accountability Manage operational risk, including operational resilience, incident response, business continuity readiness, and timely escalation of emerging issues Serve as the regional single point of contact for platform operational performance, owning … Required Qualifications, Capabilities, and Skills Demonstrated experience leading operational teams, including people management, performance management, and workforce planning Proven experience managing operational risk, controls, incident response, and business continuity in a regulated environment Demonstrated experience driving continuous improvement using structured methodologies such as root-cause analysis with measurable ...

long-term technical vision for the platform, aligning with business outcomes and regulatory requirements. Champion a "you-build-it-you-run-it" culture, overseeing incident response and identifying opportunities to automate remediation. Ensure successful collaboration across teams and stakeholders, driving consensus on architectural and delivery trade-offs. Identify … technical and non-technical stakeholders. Ability to translate business objectives into team-level tasks and priorities. Experience managing production systems, including on-call rotations, incident response, and reliability engineering. Experience leading multi-team adoption of enterprise-authorized AI-assisted development and delivery tools, including defining governance/ways ...

weaknesses and recommend pragmatic remediations. Implement and improve AWS security monitoring, logging and alerting to detect misconfigurations, suspicious activity, and potential security incidents. Support incident response readiness by improving observability, evidence collection, recovery documentation, and operational playbooks for AWS platform services. Work closely with application teams, platform engineers ...

platform services (e.g. PAM, PKI, cross-domain solutions) in live environments Platform administration including patching, upgrades, configuration, and account management Monitoring, alerting, and incident response for platform services Incident and problem management, including troubleshooting and root cause analysis Networking concepts (TCP/IP, DNS, DHCP, firewalls) Automation … services, or cross-domain/secure transfer solutions Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms) ITIL-aligned service management practices (incident, problem, change) Automation of operational activities (scripts, scheduled jobs, runbooks) Experience working in high-availability or 24/7 service environments Integration with enterprise ...

Engineer, working within the Global Information and Cyber Security Defence (ICSD) function, is the technical leader for enterprise cyber deception and unified detection and response across the Microsoft security ecosystem. The role focuses on building, operating, and continuously evolving an enterprise-grade Insider Risk Management (IRM) and deception programme … detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering unified detection, automated investigation, and response across endpoint, identity, email, and cloud workloads. It combines deep deception engineering expertise with hands-on Defender XDR mastery and the use of Agentic ...

first escalation point for SOC Analysts Investigate and respond to security incidents when required Escalate complex incidents with clear, detailed findings Support incident response, client communications and incident bridges Maintain runbooks, internal documentation and the KQL library Tune detections and manage improvement requests through Azure DevOps What ...

/defence environmentsDesirable: Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar)SOAR platforms and automation of security response workflowsIntegration with monitoring, alerting, and incident response systemsThreat detection, analytics, and use case developmentExperience integrating with enterprise services (Active Directory, identity platforms ...

What you will do as a Senior Application Engineer Support, configure, and enhance security tooling platforms (e.g. SIEM, EDR) that underpin threat detection and response Deliver engineering tasks within defined work packages, ensuring alignment with user needs, security requirements, and service-level objectives. Contribute to application architecture, integration … defence environments Desirable: Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar) SOAR platforms and automation of security response workflows Integration with monitoring, alerting, and incident response systems Threat detection, analytics, and use case development Experience integrating with enterprise services (Active ...

Responsibilities : Take ownership of the organisations security posture, helping to identify, assess and reduce cyber risk across systems, services and data Lead security monitoring, incident investigation and response activities, ensuring threats are identified and addressed effectively Drive vulnerability management and security improvement initiatives, working with technical teams … data protection, compliance and security assurance principles Experience assessing, prioritising and mitigating security risks within a business environment Familiarity with security monitoring, threat detection, incident response and vulnerability management activities Broad understanding of infrastructure, networks, identity management and application security concepts Ability to analyse complex information, identify root ...

maintenance and updates to roll out new features and keep the platform secure. Participate in a 24/7, on-call rotation for incident response escalation within response and on-site Service Level Agreements (SLA). Provide technical implementation support in customer environments, including guidance on implementation ...

including intake, investigation, tracking, documentation, and stakeholder engagement. Support data mapping, data retention, minimisation, international transfer, and vendor risk management activities. Assist with privacy incident and breach response activities, including fact gathering, remediation tracking, reporting, and stakeholder coordination. Monitor developments in privacy, emerging regulatory areas (including AI where … ePrivacy requirements, international data transfers, privacy-by-design principles, and accountability frameworks. Experience supporting privacy programme activities such as impact assessments, data mapping, DSARs, incident response, vendor reviews, training, and compliance documentation. The ability to interpret complex legal, regulatory, and technical requirements and translate them into practical business ...

Knowledge of security frameworks and standards including: - ISO 27001 - NIST Cybersecurity Framework - NIST 800-53 - CIS Controls - SABSA - TOGAF Understanding of security operations concepts, incident response, and detection capabilities. Knowledge of application security principles, including secure coding practices and OWASP guidance. Experience with DevSecOps practices and security automation. ...

security tooling across Vitality's cloud environments, contributing to wider Information Security initiatives and projects Proactively monitor security systems and tools, leading the response to security incidents and issues; support investigations and incident response, including participation in an on-call security rota when required Communicate clearly ...

risks, influencing product strategy, and serving as the subject matter expert for the SecOps and Vulnerability Management strategy as well as embedding detection and response capabilities on a modern technology stack. You will collaborate globally, supporting audit, regulatory, and risk initiatives, with a focus on cloud computing and emerging … management platform that automatically prioritizes infrastructure and application flaws utilizing real-world exploit intelligence and asset criticality. Build and optimize SOAR playbooks to automate incident response workflows, accelerate threat containment, and streamline vulnerability ticketing. Provide senior technical escalation support during critical security incidents and drive post-incident ...