16 of 16 Incident Response Jobs in Buckinghamshire

hands-on role in ensuring it is reliable, scalable, and observable. You will help establish and mature SRE practices, focusing on: Monitoring and observability Incident response Post-incident review Reliability testing and capacity planning Toil reduction Enabling development velocity We offer a hybrid working arrangement with … Milton Keynes office. Key Responsibilities: Support teams using ConnellsX and respond to incidents in a structured, blameless way Investigate root causes and drive post-incident actions to completion Define SLIs, contribute to SLOs, and monitor error budgets Build dashboards, alerts, and runbooks to improve visibility Automate repetitive tasks ...

cyber events, suspicious activity and indicators of compromise. Independently investigate security alerts and complex cyber events. Assess the significance, potential impact and appropriate response to identified threats. Correlate information from multiple technical sources to establish attack timelines and identify affected systems. Analyse indicators of compromise, attacker techniques and threat … intelligence. Escalate confirmed or suspected incidents to the Lead SOC Analyst or Incident Response team. Provide Incident Responders with accurate findings, evidence, timelines and technical information. Validate monitoring content, detection rules and operational procedures before live deployment. Support the onboarding of new systems, applications and cloud services ...

compromise, attackertechniquesand available threat intelligence todeterminethe nature and severity of security events. Escalate indicatorsconfirmed or suspected cyber security incidentsto the Lead SOC Analyst or Incident Responder teamin accordance withestablished operational procedures. Support Incident Responders by providingaccurateanalyticalfindings, supporting evidence,timelinesand technical information throughout incident investigations. Contribute … withorganisationalprocedures. Share knowledge,providetechnicalguidanceand support the development of Practitioner SOC Analysts through coaching and day-to-day mentoring. Contribute to operational reviews, lessonsidentifiedand post-incident activities, recommending improvements tomonitoringcapability and operational processes. Maintain awareness of emerging cyber threats, attackertechniquesand monitoring technologies to support continual professional development and improved operational ...

intelligence to determine the nature and severity of security events. Escalate indicators confirmed or suspected cyber security incidents to the Lead SOC Analyst or Incident Responder team in accordance with established operational procedures. Support Incident Responders by providing accurate analytical findings, supporting evidence, timelines and technical information throughout … incident investigations. Contribute to the continual improvement of monitoring capability by identifying opportunities to improve alert quality, investigation processes, monitoring coverage and detection effectiveness. Validate new monitoring content, detection rules and operational procedures before deployment into the live SOC environment. Assist in the onboarding of new systems, cloud services ...

bring a broad range of experience gained in a Deputy CISO, Head of Cyber Security or equivalent role. This could include working in incident response, SOC, security architecture, vulnerability and compliance, governance or risk. Preferably, you’ll have experience of working in both the public and private sectors … competencies are included in an extract from the Government Security Profession, provided in a separate document.)o Applied Security Capabilityo Cyber Security Operationso Incident Management, Incident Investigation and Responseo Information Risk Assessment and Risk Managemento Risk Understanding and Mitigationo Security Architecture:o Threat Intelligence and Threat Assessmento Threat ...

management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion hosts and MFA-enabled ...

across network and cloud environments. Manage and improve firewall, IDS/IPS, and vulnerability management solutions. Identify security weaknesses and drive remediation activities. Support incident response and security investigations. Improve infrastructure logging, monitoring, and threat detection capabilities. Partner with global teams to strengthen security standards and best practices. ...

Security Lead & Cyber Vulnerability Manager who will be responsible for leading the organisations operational cyber security capability, ensuring the delivery of security operations, cyber incident management and infrastructure and cloud vulnerability management across the enterprise. Providing operational leadership for the identification, assessment and remediation of cyber security risks … will drive the organisations security position across infrastructure, cloud services and third parties. This includes security monitoring, incident response, threat intelligence, vulnerability assessment and ensuring all risks are managed taking into account business priorities and regulatory requirements. This role works closely with the CISO and will ...

pragmatic, well-understood patterns over those who lean on theory, jargon, or unnecessary complexity. A platform you've built and kept running, or an incident you've resolved and can clearly explain, will count for far more than a stack of certifications. Core Responsibilities Provision, configure, and harden … example CloudWatch) across services and infrastructure Maintain data pipelines, backup, and lifecycle management for Aurora PostgreSQL and other AWS-native data tooling Platform Operations & Incident Response Act as first responder for infrastructure incidents, supporting root cause analysis and post-incident review Coordinate patching, upgrades, and lifecycle management ...

security release plan. Monitoring, reliability and recovery. Own observability (Application Insights, Log Analytics), alerting, backups and disaster recovery, including periodic DR tests. Lead incident response for platform issues and run blameless root-cause reviews. Cost management. Monitor and optimise Azure spend across environments and clients; right-size resources ...

functional requirements and acceptance criteria for availability, recoverability, performance, security, accessibility and support. Ensure technical designs include suitable monitoring, alerting, backup, disaster recovery and incident response considerations. YOU ARE A MATCH IF... Education: A degree in Computer Science, Software Engineering or related discipline, or equivalent professional experience. Relevant … queues, API Management, Azure SQL, Cosmos DB, containers and monitoring services. Strong understanding of CI/CD, automated testing, code quality controls, observability, incident diagnosis, reliability engineering and DevSecOps practices. Knowledge of application security, identity and access management, OWASP guidance, threat modelling, privacy by design and relevant compliance requirements. ...

Maintain and optimise log ingestion pipelines across multiple data sources. Develop and refine detection rules, alerts and playbooks with SOC Analysts. Support security investigations, incident response and containment. Automate repetitive SOC tasks using PowerShell, Python or Bash. Onboard new services and infrastructure into SOC monitoring. Troubleshoot internal … visibility and telemetry. Experience Required You'll have experience in a similar operational or security environment, with: Hands-on experience supporting security operations, detection, response or log collection tools. Scripting or automation experience using PowerShell, Python or Bash. Strong networking knowledge, including TCP/IP, DNS, firewalls and proxies. ...

Operational readiness for new releases Safe production access and change coordination Production is a high-discipline environment. You make sure it stays that way. Incident Management You own the full lifecycle: High‐signal alerting and fast detection Structured incident response Clear internal and customer communication Blameless postmortems … Escalations are fast and predictable. Monitoring & Reliability Define SLIs/SLOs for critical systems Improve visibility across availability, latency, errors, and saturation Track MTTR, incident frequency, and escalation trends Drive reliability roadmap initiatives We measure reliability, and improve it continuously. Team Leadership Lead and grow the Operations team ...

Youll bring a broad range of experience gained in a Deputy CISO, Head of Cyber Security or equivalent role. This could include working in incident response, SOC, security architecture, vulnerability and compliance, governance or risk. Preferably, youll have experience of working in both the public and private sectors ...

quality-assureSOC investigations, confirming findings are accurate, evidence-based and clearly documented. Lead complex and high-priority cyber securityinvestigations before escalation to the IncidentResponse team, as delegated by the Principal SOC Analyst. Deliver clear and effectiveshift handovers, maintaining situational awareness and continuity across ongoing investigations and incidents. Coordinate with Incident … equivalent. Desirable: Experience using Microsoft Sentinel, LogRhythm, or equivalent enterprise SIEM platforms. Experience developing monitoring improvements, detection tuning, or operational process development. Experience supporting Incident Responder activities during major cyber security incidents. Experience contributing to the development of monitoring use cases and detection improvements. Applied knowledge of MITRE ...

drive resilience across the organisation, embedding continuity, crisis management and recovery planning. The role collaborates with stakeholders across business and technology to strengthen incident response, maintain ISO 22301 alignment, and improve the BCMS. A practical, hands-on leader who can influence at all levels is sought. #J ...