1 to 25 of 31 Permanent Incident Response Jobs in the Thames Valley

human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection … response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with the visibility and scalability needed to stay ahead of evolving threats. Sophos goes to market with a global partner ecosystem, including Managed Service Providers (MSPs), Managed Security ...

Sophos is seeking an experienced Senior Incident Response Consultant to join our Incident Response (IR) team. You will lead incident response engagements for customers worldwide, guiding a team of consultants, conducting rapid responses, and delivering executive updates. You will have 5+ years ...

Role Summary Sophos is seeking an experienced MDR Manager to support its Managed Detection and Response customers. The successful candidate will lead MDR analysts and day-to-day operations, ensuring operational quality, timely incident handling, effective customer communication, consistent reporting, and continuous service improvement. As part … Managed Detection and Response team, you will help deliver best-in-class monitoring, detection, and response services that proactively defend customer environments. You will guide investigations, review quality, coach analysts, manage escalations, and use operational insights to improve team performance, investigation consistency, and customer outcomes. What you will ...

hands-on role in ensuring it is reliable, scalable, and observable. You will help establish and mature SRE practices, focusing on: Monitoring and observability Incident response Post-incident review Reliability testing and capacity planning Toil reduction Enabling development velocity We offer a hybrid working arrangement with … Milton Keynes office. Key Responsibilities: Support teams using ConnellsX and respond to incidents in a structured, blameless way Investigate root causes and drive post-incident actions to completion Define SLIs, contribute to SLOs, and monitor error budgets Build dashboards, alerts, and runbooks to improve visibility Automate repetitive tasks ...

cloud environment. This is not a traditional SOC role focused on alert handling . The position sits at the senior technical level and combines incident leadership, detection engineering, threat hunting and automation. You’ll have genuine ownership of security operations maturity rather than working in a ticket-driven environment. … senior technical point of escalation within the SOC, leading complex investigations and driving continuous improvement across tooling, detection capability and response processes. Typical responsibilities include: Leading complex security incidents end-to-end including investigation, containment, forensics and root cause analysis. Designing, tuning and improving detection across SIEM ...

estate by implementing remediation activities, hardening infrastructure, and driving continuous improvement. From addressing vulnerabilities and strengthening system configurations to automating remediation processes and supporting incident response, you'll help ensure our technology platforms remain secure, reliable, and aligned with industry best practices. Working closely with security, infrastructure, risk … actions and update vulnerability management platforms and tracking tools. Produce reports and dashboards that demonstrate remediation effectiveness, risk reduction, and outstanding actions. Support cyber incident response activities by providing expertise on infrastructure configurations, vulnerabilities, and remediation actions. Help address and remediate weaknesses identified through security incidents and investigations. ...

Security Engineering team, helping to design, implement and continuously improve the security controls that protect large-scale AWS environments. Working closely with Security Operations, Incident Response, Threat Engineering and Cloud Engineering teams, you'll build and maintain cloud security solutions, improve security automation, and help embed security best … security posture through automation, logging, alerting and continuous improvement Work closely with engineering teams to embed security into cloud platforms and application delivery Support incident response, investigations and remediation activities Contribute to security-by-design initiatives across cloud infrastructure Requirements We're looking for someone who can demonstrate ...

leading remediation activities that improve security and resilience. Oversee secure remote and supplier access, ensuring third-party connectivity is appropriately governed and monitored. Support incident response and recovery planning for identity-related events, including break-glass access and restoration activities. Produce meaningful reporting and assurance evidence for governance … authentication, access governance, audit, recertification and operating effective identity controls within a regulated environment. Experience identifying and mitigating identity risks, improving resilience and supporting incident response and recovery planning. Good understanding of ISO 27001, NCSC guidance and PRA/FCA operational resilience requirements, with the ability to apply ...

regulators and law enforcement Mentor the analyst team and act as senior escalation point for major incidents What You'll Bring: 5+ years in incident response or SOC environments, ideally with managed services (MSSP) exposure A proven record leading complex investigations - ransomware and breach cases you can walk … advantage) A well-developed threat hunting toolkit: YARA rules, IOC development, timeline analysis and adversary profiling Cloud investigation experience - Azure and/or AWS incident response, log analysis and cloud-native threats The communication skills to translate deep technical findings for senior, non-technical audiences A natural mentoring ...

partnered with a growing cyber security business in Buckinghamshire, supporting customers with threat monitoring, incident response, and managed security services. They are looking for a Level 3 SOC Analyst to join their experienced SOC team, leading complex investigations and acting as the technical escalation point for major security … develop detection rules, automate workflows, and continuously improve SOC operations The ideal Level 3 SOC Analyst will have: Strong commercial experience within a SOC, incident response, or cyber security operations environment Experience investigating complex threats including ransomware, malware, account compromise, and targeted attacks Hands-on experience with SIEM ...

This is a unique hybrid position that combines operational leadership with technical awareness . You'll take ownership of the live operational picture, coordinating incident response across cyber, network, infrastructure and physical security teams while ensuring informed, timely decision-making. This role is ideal for someone who thrives … fast-paced control room environment and can confidently lead operational response without needing to be a deep technical specialist. Key Responsibilities Maintain a single operational view across cyber, network, service and physical security domains. Monitor live operational environments and assess alerts and incidents in real time. Perform initial triage ...

Protection department. Our team is responsible for designing, implementing, configuring, and maintaining security tools used across Elsevier Technology. You will collaborate with colleagues from Incident Response, Threat Engineering, Governance Risk & Compliance (GRC), and work closely with business users to ensure our security tools are effectively adopted throughout … DevOps methodologies. We value practical experience applying IT security principles across areas such as Network Security, Security Operations, Vulnerability Management, Risk Management, and Incident Response. Responsibilities Collaborate within the security engineering team to design and implement security tooling. Design, build, and maintain AWS cloud infrastructure using Infrastructure as Code ...

KPIs, across incidents, service requests and change, reporting honestly on where things stand and what you are doing about it Chair or oversee incident, problem and change management processes, including major incident response and post-incident reviews Work with the functional consultants to prioritise and sequence … live, business-critical enterprise system, ideally Oracle Cloud (Fusion) or a comparable ERP/HCM/EPM platform Solid grounding in ITIL-based incident, problem and change management, and the judgement to know when to escape and when to let a process run Experience managing SLAs, service reporting ...

Managed Service Provider (MSP) to recruit a Security Analyst based in Reading. The successful candidate will play a key role in security operations, incident response, threat detection and automation, helping to protect customer environments while continuously improving security platforms and processes. Key Responsibilities Manage the full security incident ...

maintain security tooling across cloud environments Work with engineering teams to improve security, reliability, and operational resilience Implement monitoring, logging, and alerting solutions Support incident response, troubleshooting, and continuous improvement activities Contribute to automation initiatives and security-by-design practices Requirements Experience working with AWS cloud environments Hands ...

maintain security tooling across cloud environments Work with engineering teams to improve security, reliability, and operational resilience Implement monitoring, logging, and alerting solutions Support incident response, troubleshooting, and continuous improvement activities Contribute to automation initiatives and security-by-design practices Requirements Experience working with AWS cloud environments Hands ...

into CI/CD pipelines and DevSecOps practices. Proven capability in risk assessments, threat modeling, and control gap analysis. Experience collaborating with SOC and Incident Response teams during security events. Working knowledge of security frameworks and regulations (NIST, ISO 27001, CIS, GDPR, etc.). Ability to translate technical ...

protection. Risk & Governance: Maintain risk registers, execute supplier security due diligence, manage exception workflows, and deliver targeted security awareness programmes across internal teams. Vulnerability & Incident Operations: Strengthen patching schedules, penetration test remediation, secure change management, backup validation, and incident response procedures. Cross-Functional Collaboration: Partner with engineering ...

with DevOps and project teams. Build and maintain Infrastructure as Code solutions, dynamic documentation and network architecture standards. Implement network monitoring, performance optimisation and incident response to ensure highly available services. Strengthen network security through access controls, encryption, security reviews and collaboration with IT teams. Partner with internal ...

release management, security controls, and environment governance. SRE & Monitoring: Experience operating Azure cloud-native services using observability, alerting, logging, performance monitoring, service reliability, and incident response practices. FinOps Knowledge: Practical knowledge of cloud cost optimisation and FinOps principles, including cost visibility, tagging, right-sizing, and efficient consumption patterns. … clear understanding of scope boundaries and governance responsibilities. Clear communication, documentation, coaching, and knowledge-transfer capability. Ability to perform effectively under pressure and support incident, operational, or delivery priorities when required. Commitment to continuous improvement, automation, cost optimisation, FinOps, and engineering excellence. Apply directly or reach ...

closely with stakeholders across Legal, Security, Technology, Product, HR and other business functions, the Program Manager will drive program execution, coordinate key initiatives, support incident response and audit readiness, and help mature RWS's approach to privacy, AI governance and information security. The successful candidate will bring … Trust initiatives, including governance frameworks, compliance toolkits and awareness programmes. Administer and optimise privacy and governance tools, including OneTrust and related workflows. Coordinate privacy incident management activities in partnership with Security and Technology teams. Act as the operational point of contact for privacy audits, both client-facing and internal ...

Experience building automation frameworks, deployment pipelines and self-service developer platforms Good programming skills in Go or TypeScript Strong understanding of observability, monitoring and incident response tooling Comfortable working in fast paced, evolving environments where priorities can shift Any experience in robotics, IoT, edge computing or hardware-adjacent ...

differing technologies within the environment. Excellent command of Cybersecurity organization practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies. Ability to identify network attacks and systemic security issues as they relate to threats and vulnerabilities, with focus on recommendations for enhancements ...

duplication, and support maintainable, secure and high-performing systems. Improve delivery capability through platform reliability and DevOps maturity Continuously strengthen deployment pipelines, observability, alerting, incident response, recovery procedures and operational readiness across Field Ops engineering teams. Manage stakeholders and maintain clear communication Build trusted relationships across product, operations … data quality controls. Ability to produce both high‐level and detailed design specifications. Experience leading DevOps practices, including CI/CD, observability, monitoring and incident management. Demonstrated capability leading multi‐squad engineering delivery in a product‐led organisation. Mindset & Ways of Working Comfortable working in iterative, outcome‐focused agile ...

platform and service design from the outset Lead key SRE practices such as reliability reviews, operational readiness, and toil reduction Drive automation across monitoring, incident response, and remediation Act as the technical escalation point for major incidents and high-risk releases Lead blameless post-incident reviews ...