15 of 15 Permanent CSIRT Jobs in the UK

About the role KPMG International sets strategy, supports collaboration and protects the reputation of a global network of independent professional services firms. Within Global Digital, the Global Information Security Group provides trusted security services that ...

Python, following secure engineering best practices. Implement and maintain infrastructure‐as‐code and CI/CD pipelines (e.g. Jenkins, ArgoCD). Collaborate with CSIRT and other security teams to integrate data and automation from tools such as Azure Defender XDR, AWS Security Hub, and Elastic Security. Participate in code reviews ...

technology refresh programmes. Manage the security of the infrastructure through appropriate change, configuration and release-management processes. Participate in Cyber Security Incident Response Team (CSIRT) activities, including incident investigation, containment, recovery, and continuous improvement of incident readiness. PERSON SPECIFICATION (essential requirements) Qualifications Educated to degree level or equivalent experience (preferably ...

Security Operations Centre Analyst, you'll be the key technical escalation point between our Security Analyst team and the Cyber Security Incident Response Team (CSIRT), leading complex investigations and supporting the response to significant security incidents. Working across cloud, endpoint, identity, and network technologies, you'll play a critical role … Lead complex cyber security investigations across Centrica, acting as the primary technical escalation point within the GSOC and supporting incident response before escalation to CSIRT where required. Investigate and respond to threats across cloud, endpoint, identity, email, network and Operational Technology (OT) environments, assessing impact and driving effective response actions. ...

ways of working, making security simpler, smarter and more scalable. Lead or contribute to the Security Champions programme and work closely with GSOC and CSIRT teams on application-layer security incidents, helping build a strong, distributed security culture across engineering. What you would bring - Strong hands-on experience in application ...

well‐rounded Security Engineer, applying software engineering, automation and platform thinking to solve a broad range of security challenges. Working closely with SOC, CSIRT, Detection Engineering, Platform Engineering and Cloud teams, you will ensure security data is reliable, high‐quality, cost‐effective and fit for monitoring, investigation, threat hunting ...

National Gas Transmission PLC is seeking a SOAR Engineer to join the Cyber Threat Detection team in the UK. You will enable CSIRT threat detection, automate responses, and mature security posture through orchestrated playbooks and analytics. The role involves developing content for SOAR and SIEM, analyzing workflows, and guiding backlog ...

premises environments. You’ll develop secure, scalable automation systems with strong Python, and contribute to architecture reviews and operational improvements. You will work with CSIRT and security teams leveraging Azure Defender XDR, AWS Security Hub, and Elastic Security, in a fast-paced, collaborative #J-18808-Ljbffr ...

corporate environments. You will design scalable data ingestion into Elastic SIEM and apply software engineering to automate workflows. You will collaborate with SOC, CSIRT, Detection Engineering, Platform Engineering and Cloud teams to ensure high‐quality, cost‐effective security data for monitoring, investigation, threat hunting and #J-18808-Ljbffr ...

America, and Asia. Drive adoption of AI‐enabled and agentic SOC concepts in practical, mission‐focused ways. Lead the building or transforming of SOC, CSIRT, or cyber defense functions in complex enterprise environments. Lead solution design, proposal shaping, high‐impact technical engagement, and client delivery. Manage and grow a team … while supporting business development, thought leadership, and overall operational excellence. You Have 12+ years of experience leading modern SOC, Cyber Fusion Center, CSIRT, cyber defense, or detection and response programs in large, complex enterprise environments 5+ years of experience designing and implementing SOC or Cyber Fusion Center operating models, including ...

date with new and emerging threats and ensures we can detect and respond to them. Enable the Computer Security Incident Response Team (CSIRT) to detect threats targeting the organisation through enrichment, tuning and automation, allowing the CSIRT to be more effective. Mature the cyber security posture of the business … backlog items, updating items, collecting requirements, feedback, etc and coming prepared to backlog refinement. Conduct in-depth analysis of the existing functionality of the CSIRT, propose and enact improvements to the service. About you: Strong proficiency in KQL and detection engineering. Have a high level of ability to create ...

supports how our engineering teams build and operate complex systems at scale. Take the next step in your career. The role As a Senior CSIRT Analyst you will play a key role in G-Research’s Cyber Security Incident Response Team (CSIRT), specialising in cloud detection and response across … Mentoring and supporting junior analysts through knowledge sharing and technical guidance Participating in the on-call escalation rota for out-of-hours incidents Improving CSIRT processes, playbooks and threat models Who are we looking for? The ideal candidate will have the following skills and experience: Significant experience in cyber incident ...

Entasis Partners are working with a leading organisation looking to add two Senior CSIRT Analysts to an established and highly technical cyber security team. This isn’t your typical SOC role. You’ll be dealing with real security problems, digging into suspicious activity, hunting for threats and working out what … looking for someone who really understands security, rather than someone who simply knows how to follow a playbook. Your background could be in CSIRT, SOC, incident response, detection engineering, threat hunting, threat intelligence, red teaming or security engineering. You’ll ideally have experience with: Cyber security incident investigation and response ...

Entasis Partners is partnered with a leading organisation to appoint two Senior CSIRT Analysts into a technically advanced security team. You will work across incident response, threat hunting, detection engineering and security operations to continually improve detection and response capabilities. You'll engage in real security problem solving, not just … following playbooks, with a background spanning CSIRT, SOC, threat hunting or security engineering. Remote/hybrid options may vary by role. #J-18808-Ljbffr ...

Research in London is seeking a Senior CSIRT Analyst to join the Cyber Security Incident Response Team, specialising in cloud detection and response across AWS and hybrid environments. You will investigate, respond and proactively hunt for threats across a diverse technology landscape. As a senior member, you will mentor junior ...