1 to 25 of 42 Incident Response Jobs in Berkshire

innovation, knowledge sharing, continuous improvement, and operational excellence. About the Role Join Maersk's Cyber team and play a key role in a modern incident management and response function that combines digital forensics, threat hunting, detection engineering, and cyber security improvement initiatives. This role offers the opportunity … contribute to complex investigations, strengthen response capabilities, and help shape the future of cyber defence within a globally recognised organisation. Key Responsibilities Conduct digital forensic investigations across endpoint, cloud, and OT environments to support incident response and recovery activities. Perform threat hunting and behavioural analysis to proactively ...

Senior Global Security Operations Centre Analyst, you'll be the key technical escalation point between our Security Analyst team and the Cyber Security Incident Response Team (CSIRT), leading complex investigations and supporting the response to significant security incidents. Working across cloud, endpoint, identity, and network technologies … site. Day to day - Lead complex cyber security investigations across Centrica, acting as the primary technical escalation point within the GSOC and supporting incident response before escalation to CSIRT where required. Investigate and respond to threats across cloud, endpoint, identity, email, network and Operational Technology (OT) environments, assessing ...

# Digital Forensics & Incident Response Analyst*A.P. Moller - Maersk***Maidenhead, England**Hybrid · Mid · Full-time### The RoleThe analyst conducts digital forensic investigations across Windows, Linux, cloud, and operational technology environments, supporting the full incident response lifecycle from triage through to post-incident review. ...

take ownership of the engineering, administration, health and continuous improvement of the security platforms, detection content and automation that underpin threat monitoring, detection and incident response across my clients internal and managed customer environments. They will act as the final internal escalation point for complex and high-severity … live incidents. Key Responsibilities Lead the end-to-end management of complex and high-severity security incidents, including investigation, containment, eradication, recovery and post-incident review. Conduct digital forensic investigations across cloud, identity, endpoint and network platforms, and carry out malware analysis and threat validation. Design, implement and optimise ...

take ownership of the engineering, administration, health and continuous improvement of the security platforms, detection content and automation that underpin threat monitoring, detection and incident response across my client's internal and managed customer environments. They will act as the final internal escalation point for complex and high … live incidents. Key Responsibilities Lead the end-to-end management of complex and high-severity security incidents, including investigation, containment, eradication, recovery and post-incident review. Conduct digital forensic investigations across cloud, identity, endpoint and network platforms, and carry out malware analysis and threat validation. Design, implement and optimise ...

complex security concepts to technical and non-technical audiences Advising on security architectures, controls and technologies Developing cyber security strategies and implementation roadmaps Supporting incident response and business continuity planning Applying frameworks including NIST, ISO 27001, CIS and CAF Providing specialist advice across complex Defence and Government environments … Security environments Knowledge of security frameworks including NIST, ISO 27001, CIS or CAF Experience within areas such as security architecture, cyber risk, vulnerability management, incident response, security monitoring or threat intelligence Strong stakeholder management and client-facing communication skills Understanding of network security, encryption, authentication and access controls ...

operational responses that improve reliability and reduce downtime. What You'll Be Working On Monitor live systems, triage operational alerts and provide first-line incident response to maximise system availability. Develop and maintain dashboards that deliver clear visibility into system health, trends and operational performance. Analyse recurring incidents … tooling and operational processes. Define monitoring thresholds, alerting strategies and operational metrics that support reliable live quantum computing services. Produce documentation covering monitoring processes, incident response, escalation procedures and operational handovers. Contribute to automation and continuous improvement initiatives that reduce manual intervention and improve service reliability. What ...

cloud environment. This is not a traditional SOC role focused on alert handling . The position sits at the senior technical level and combines incident leadership, detection engineering, threat hunting and automation. You’ll have genuine ownership of security operations maturity rather than working in a ticket-driven environment. … senior technical point of escalation within the SOC, leading complex investigations and driving continuous improvement across tooling, detection capability and response processes. Typical responsibilities include: Leading complex security incidents end-to-end including investigation, containment, forensics and root cause analysis. Designing, tuning and improving detection across SIEM ...

A.P. Moller - Maersk in Maidenhead, United Kingdom, is seeking an experienced Digital Forensics & Incident Response Analyst. You will investigate across Windows, Linux, cloud and OT, supporting triage through post-incident review in a hybrid, full-time role. The ideal candidate brings enterprise-scale DFIR experience, strong artefact ...

/CD pipelines Operational Delivery & Strategic Projects: Lead network delivery for strategic initiatives (e.g., data centre migrations, office relocations, cloud landing zones) Manage incident response for critical infrastructure events; lead post-mortems and remediation Collaborate with infrastructure teams to build monitoring, alerting, and observability stacks that surface security … configuration management (Ansible, etc.) Proficiency with network monitoring and observability tools (e.g., Splunk, Datadog, New Relic, Elasticsearch, Prometheus, RSA NetWitness, Tenable) Strong incident response and troubleshooting background; comfort operating in high-pressure environments Experience mentoring junior/mid-level engineers and building security culture within technical teams Desirable ...

/CD pipelines Operational Delivery & Strategic Projects: Lead network delivery for strategic initiatives (e.g., data centre migrations, office relocations, cloud landing zones) Manage incident response for critical infrastructure events; lead post-mortems and remediation Collaborate with infrastructure teams to build monitoring, alerting, and observability stacks that surface security … configuration management (Ansible, etc.) Proficiency with network monitoring and observability tools (e.g., Splunk, Datadog, New Relic, Elasticsearch, Prometheus, RSA NetWitness, Tenable) Strong incident response and troubleshooting background; comfort operating in high-pressure environments Experience mentoring junior/mid-level engineers and building security culture within technical teams Desirable ...

leaders (directors, managers and senior ICs), building high-performing teams with clear ownership and strong engineering culture Own platform reliability, resilience, and operational excellence: incident management, on-call standards, SLIs/SLOs, post-incident learning, and continuous improvement Partner with product engineering and threat research leaders to improve … focused environment Strong track record of building reliable, secure platforms and improving developer productivity through pragmatic, outcome-driven investment Experience establishing operational excellence practices (incident response, on-call, observability, SLOs, post-incident learning) and driving continuous improvement Ability to set strategy and translate it into execution ...

Maersk's Cyber team invites an experienced security professional to join a modern incident management and response function, combining digital forensics, threat hunting, detection engineering, and cyber security improvement. You will investigate complex incidents across endpoints, cloud, and OT, deliver root cause analyses, support uplift projects, and mentor ...

KPIs, across incidents, service requests and change, reporting honestly on where things stand and what you are doing about it Chair or oversee incident, problem and change management processes, including major incident response and post-incident reviews Plan and manage the rota that keeps support cover … live, business-critical enterprise system, ideally Oracle Cloud (Fusion) or a comparable ERP/HCM/EPM platform Solid grounding in ITIL-based incident, problem and change management, and the judgement to know when to let a process run Experience managing SLAs, service reporting and stakeholder relationships ...

desirable extras include certifications such as GWAPT, GWEB, OSCP or AWS Security Specialty, Security Champions or developer training experience, and exposure to SOC or Incident Response environments. What's in it for you? Enjoy a generous market salary, along with fantastic growth opportunities and a vibrant work environment ...

provisioning and deployment workflows (Terraform, GitHub Actions, GitOps) Package and deploy applications to customer environments Implement and optimise observability tooling (Prometheus, Grafana, Loki) Support incident response, monitoring, and backup/recovery planning Mentor project teams in DevSecOps practices and environment management Ensure cloud environments are secure, performant ...

Security Lead & Cyber Vulnerability Manager who will be responsible for leading the organisations operational cyber security capability, ensuring the delivery of security operations, cyber incident management and infrastructure and cloud vulnerability management across the enterprise. Providing operational leadership for the identification, assessment and remediation of cyber security risks … will drive the organisations security position across infrastructure, cloud services and third parties. This includes security monitoring, incident response, threat intelligence, vulnerability assessment and ensuring all risks are managed taking into account business priorities and regulatory requirements. Key Accountabilities - Reduction of Cyber risk exposure through strong Security Operations ...

shift-left strategies, security scanning & tooling.* Container Security – Experienced in Docker frameworks, CI/CD, Orchestration, Scanning and Reporting* SOC – Experienced in Security Ops, Incident Response, Threat Hunting, Malware/Forensic Analysis* WebApps – Experienced in WebApp DevSecOps best practices, WebApp scanning for OWASP top 10.* Good understanding ...

full time in the office) Salary: £50,000 - £60,000Role and responsibilities Senior technical authority in Security Operations, improving security engineering, detection and response while supporting the wider team. Lead serious incidents, forensic investigations and root cause analysis. Develop detections, automation and orchestration; conduct proactive threat hunting. Engineer Sentinel … support compliance and mentor colleagues. Experience and qualifications Substantial SOC, cyber operations or security engineering experience. Hands-on Sentinel, Defender XDR and CrowdStrike expertise. Incident response, malware analysis, forensics and threat hunting. Advanced KQL; PowerShell and/or Python automation. Entra ID, Conditional Access, Intune and Microsoft ...

differing technologies within the environment. Excellent command of Cybersecurity organization practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies. Ability to identify network attacks and systemic security issues as they relate to threats and vulnerabilities, with focus on recommendations for enhancements ...

Develop and implement Group-wide IT & Cyber Security strategy Own security policies, governance frameworks and risk registers Lead cyber risk assessments, remediation and incident response Oversee external security partners and supplier security audits Lead annual penetration testing and security awareness programmes Support Cyber Essentials, Cyber Essentials Plus … knowledge Experience with Cyber Essentials, Cyber Essentials Plus, ISO 27001 or similar Practical knowledge of security technologies and SIEM platforms Cyber security risk and incident management experience Excellent stakeholder and communication skills A commercially minded, proactive and solutions-focused approach Willingness to travel within Europe when required This ...

availability Implement self-service tooling to empower development teams Drive DevOps best practices across the digital product lifecycle Develop and enhance monitoring, observability, and incident response processes Support global engineering teams delivering high-traffic platforms Key Requirements Proven experience supporting digital product delivery in a DevOps or platform ...

processes to improve efficiency Contribute to infrastructure-as-code and DevOps pipelines Develop proactive monitoring strategies and support security best practices Participate in incident response, threat simulation and operational runbooks Collaborate with development teams to resolve technical issues and support deployments Design systems with high availability and disaster ...

platform(includes ML and LLM workloads) - model serving and inference infrastructure (GPU-backed endpoints, autoscaling, latency and cost tradeoffs), with SLOs, on-call, and incident response that cover models, not just services Observability(includes ML models) - drift and performance monitoring for ML, plus LLM-specific tracing, evals ...

drive SRE strategy, including SLAs, SLOs, error budgets and reliability standards Provide technical leadership across complex Kubernetes and OpenShift environments Drive automation across monitoring, incident response, recovery and remediation Shape observability, capacity management and operational readiness practices Act as a senior technical escalation point for major incidents … high-risk releases Lead reliability reviews, toil reduction and blameless post-incident improvements Govern reliability-focused IaC, GitOps and CI/CD practices Mentor Senior SREs and engineers, raising engineering standards across multiple teams and suppliers What we're looking for Strong commercial experience with Kubernetes and OpenShift Proven ...