1 to 25 of 29 Incident Response Jobs in Central London

Cyber Security Specialist/Cyber Security Engineer - CISSP, CEH, CCNA Security, Incident Response, Threat Monitoring, Vulnerability Management, Security Architecture, Azure, Windows Server Infrastructure. Permanent. London Hybrid. c.£90k - £100k + Bons +Benefits Global Law Firm seeks an experienced IT Cyber Security Specialist to join its Infrastructure Engineering team … identify vulnerabilities, respond to incidents and strengthen the firm's overall security posture. This is a hands-on technical role covering Cyber Security Engineering, Incident Response, Threat Monitoring, Vulnerability Management and Security Architecture (Infrastructure focussed) using tools such as MS Defender and MS Sentinel. You'll work across ...

Financial Services organisation is looking for a Senior Security and Cyber Operations Manager to take ownership of its security operations, cyber defence, monitoring and incident response capabilities. This is a senior, hands-on role within the CISO function, responsible for strengthening the organisations cyber defence capability and ensuring … very flexible working. You will work closely with Technology, Cloud, Data, Architecture, Risk and external security partners, with responsibility for security tooling, detection coverage, incident response, operational cyber risk and service performance. Key Responsibilities Own and continually improve the organisations security operations and cyber defence capability Lead security ...

security operation in Central London. This is not a traditional SOC Analyst position. You’ll be the senior technical escalation point on shift , leading incident response activity, supporting analysts and taking ownership of complex and high-severity security incidents. What you’ll be doing Lead the response … sources Perform root cause analysis and coordinate containment, eradication and recovery Correlate events across SIEM, EDR and other security tooling to build a clear incident narrative Identify detection gaps and support improvements to rules, thresholds and playbooks Mentor and provide technical guidance to L1 SOC Analysts Produce detailed investigation ...

pigeonholed into one narrow specialism. At CyPro, you’ll have the opportunity to get involved in a wide range of areas including monitoring, incident response, threat intelligence, detection engineering, automation and internal security operations. You’ll play a key role in our Security Operations Centre, delivering … monitoring, detection and response to our growing customer base. You’ll contribute to building out our capabilities, improving tooling and processes, and shaping how we operate as the function matures. As the team grows further, you’ll have the flexibility to focus more deeply on the areas that interest ...

join a high-performing cyber security operations team supporting critical, secure infrastructure in a 24/7 environment. This is an opportunity to lead incident response activities, mentor analysts, and play a key role in protecting complex enterprise environments from evolving cyber threats. What You'll Be Doing … Lead the investigation and response to medium and high-severity security incidents. Act as the escalation point for complex cyber security events and threat activity. Conduct root cause analysis and produce detailed incident reports. Coordinate containment, eradication and recovery activities with technical teams. Correlate data across SIEM ...

eligible for UK Security Clearance This is an exciting opportunity to work within a 24/7 SOC, investigating sophisticated cyber threats, leading incident response activities, and helping protect critical infrastructure powering next-generation AI and high-performance computing platforms. What You'll Be Doing Investigate and analyse … escalated security incidents, identifying attack vectors, root causes and potential business impact. Correlate events across multiple security tools and data sources to build comprehensive incident timelines. Lead response activities for medium and high-severity security incidents. Support containment, eradication and recovery efforts in partnership with technical stakeholders. Produce ...

security operation supporting next-generation AI compute infrastructure in the UK. This is a great opportunity for an experienced SOC, Cyber Defence or Incident Response professional looking to take on more technical leadership and ownership within a highly secure, cutting-edge environment. The Role As a SOC Shift … incidents Analysing and correlating data across SIEM, EDR and other security sources Leading containment, eradication and recovery activities Conducting root-cause analysis and producing incident reports Supporting detection rule and threshold tuning Identifying gaps in detection coverage and response processes Mentoring and supporting SOC Analysts Acting ...

partnering closely with legal, compliance, risk, technology and information security stakeholders across the business. Key Responsibilities Advising on cybersecurity and information security incidents, including incident prevention, preparedness and response activities. Providing legal support on cybersecurity regulatory compliance requirements across multiple jurisdictions. Monitoring and interpreting developments in the cybersecurity … Agentic AI solutions Post-quantum cryptography About You Applicants should be qualified lawyers with demonstrable experience advising on cybersecurity, information security and cyber incident response matters. Key requirements include: Experience supporting cyber and information security incident response activities. Strong understanding of cybersecurity regulatory and legal frameworks. ...

leadership position-not a hands-on technical analyst role. You will take full ownership of the Cyber Security Operations Centre (CSOC), driving strategy, managing incident response, and directing internal teams and external vendors. Key Responsibilities Define and lead the CSOC strategy, operations, and governance. Take command of major … incident response, managing remediation and stakeholder communication. Oversee threat intelligence, vulnerability management, and security monitoring capabilities. Manage relationships with external agencies, Managed Security Service Providers (MSSPs), and technology partners. What We Need From You Proven experience as a SOC Manager (previous leadership experience is essential; this ...

will define the cybersecurity strategy and roadmap, establish governance and risk reporting, create core policies and standards, and personally get involved in tooling, configuration, incident response and problem-solving where required. You will be responsible for improving security across Microsoft 365, Azure, endpoints and identity; building incident response, business continuity and disaster recovery capability; managing GDPR, PCI-DSS and ISO 27001 initiatives; strengthening supplier security; and providing clear cyber risk reporting to senior leadership. You will work closely with IT, infrastructure, project teams, operational stakeholders and external suppliers in a lean environment without a large ...

Cyber Security Consultant - Incident and Vulnerability Management Duration: 30/11/2026 Pay: up to £610 per day (umbrella) Location: Preston, London or Birmingham UK, Hybrid - 30% office 70% home CONTRACTOR MUST BE MOD SC CLEARED AND BE A SOLE UK NATIONAL Role Summary The Security Incident … transition to a multi-supplier (SIAM) model within a Defence environment. The role focuses on understanding, aligning and governing existing high-severity security incident management (S3/S4) and vulnerability management processes across suppliers. Ensuring a consistent, risk-based approach in line with client policy and regulatory requirements, supported ...

Cloud Hardening: Design secure baselines for Kubernetes and cloud-native resources. Vulnerability Management: Prioritize and remediate software supply chain risks from development to production. Incident Response: Scale detection and response solutions to triage alerts and stop malicious activity. Experience: 5 to 7+ years in cloud security engineering ...

modern engineering and traditional ITSM/ITIL practices Establish SLIs, SLOs, and Error Budgets Shape observability strategies using metrics, logs, and traces Design incident response models and post-incident learning loops Reduce toil through automation and engineering excellence Deliver SRE capability assessments and roadmaps … Looking For Extensive experience in SRE, cloud operations, or DevOps Proven consulting or advisory background Experience with AWS, Azure, or GCP Strong observability and incident management expertise Ability to obtain UK SC clearance Modis International Ltd acts as an employment agency for permanent recruitment and an employment business ...

Relationships: CTTO - Direct line manager. Governance, infrastructure risk, and FinOps accountability. CISO (Head of Security) - Close working relationship. Security operations implementation, IAM policy, and incident escalation. Director of Platform Engineering - Coordinates on DevSecOps integration and CI/CD infrastructure requirements. • Head of Infrastructure & Cloud - Direct report. Hosting strategy, cloud … internal IT operations across a distributed estate - multiple sites or subsidiaries Commercial awareness: has owned cloud cost management and FinOps outcomes with measurable results Incident management and on-call leadership - has run major incident response at group level Strong vendor management: MSP relationships, colocation contracts, cloud provider ...

while contributing to our modern infrastructure strategy. What youll be doing As an Infrastructure Engineer, you will: Participate in a 24/7 major-incident on-call rota Develop, support, and enhance infrastructure across multiple office locations and cloud environments Design and implement standardised templates, configuration baselines, and self … third-party vendors to ensure the health and availability of hosted or outsourced services Collaborate with the Security Operations Centre on threat detection and incident response activities Take ownership of incidents and problems through to resolution or formal handover Conduct root-cause analysis to identify and address underlying ...

provisioning and deployment workflows (Terraform, GitHub Actions, GitOps) Package and deploy applications to customer environments Implement and optimise observability tooling (Prometheus, Grafana, Loki) Support incident response, monitoring, and backup/recovery planning Mentor project teams in DevSecOps practices and environment management Ensure cloud environments are secure, performant ...

enable efficient and reliable software delivery. Work closely with development teams to improve platform resilience, scalability, and operational performance. Implement monitoring, alerting, and incident response processes to support production systems. Drive automation initiatives to reduce operational overhead and improve system reliability. We're Looking For: Proven experience … using FastAPI . Strong knowledge of Terraform and Infrastructure as Code principles. Experience designing highly available, resilient, and secure cloud environments. Strong troubleshooting and incident management skills within production environments. Experience with CI/CD pipelines, Git, GitHub, and DevOps best practices . Strong understanding of cloud networking concepts ...

cloud spend efficient as usage and provisioning scale. Managing secrets, IAM and infrastructure security in line with the expectations of enterprise customers. Participating in incident response and helping drive blameless post-incident improvements. Working alongside the Lead DevOps Engineer to shape infrastructure standards and mentor engineers ...

Role As a Tier 1 SOC Support Analyst, you will be responsible for monitoring security alerts, triaging incidents, and providing the first line of response across multiple client environments. You'll investigate alerts, identify genuine threats, eliminate false positives, and escalate higher-severity incidents to senior analysts where appropriate. … Microsoft Defender XDR. Good understanding of the Microsoft Defender suite, including Defender for Endpoint. Knowledge of Microsoft 365 security from a threat detection and response perspective. Key Responsibilities Monitor, triage and respond to security alerts across managed customer environments. Investigate security events and perform first-line incident response ...

controls, elimination of shared/admin accounts), backup and restore strategy, retention and archival, replication, monitoring (Redgate Monitor and equivalents), licensing, performance triage, and incident response. Acting as design authority for the wider data team coaching the SQL Developers on Power BI authorship, dimensional modelling, query optimisation and report ...

environments. Desirable Existing DV Clearance or eligibility to obtain it. Background in cyber security, defence, technology, financial services or national security environments. Experience with incident response, vulnerability management or secure systems engineering. This is a fantastic opportunity to work on impactful cyber programmes while developing your career within ...

tools, workstations, servers and network devices, interpret activity, and help drive appropriate remediation actions. - Support investigations into suspicious or problematic activity and assist with incident response as required. - Contribute to vulnerability assessments, penetration testing activities and security audits. - Provide support and guidance to end users ...

code (AWS CDK) Strong understanding of networking fundamentals (DNS, HTTP/TLS, load balancing) Experience operating and maintaining production software, including monitoring, alarming, and incident response Linux/UNIX proficiency (command-line tools, shell scripting) Preferred Qualifications Experience with high-throughput, low-latency systems at scale Advanced coding ...

protection, secrets, and resilience). • Recommend and review controls for containerised and serverless workloads; guide teams on secure coding and code review practices. • Support incident response planning and playbook development; foster a culture of continuous assurance. Your experience will include: • Leading the development of security architecture and design ...

Engineering: - Identify vulnerabilities in hardware and software to be remediated by Engineering\Operations teams. - Understand current and emerging security threats. - Assist and lead in Incident Response investigations and mitigation Project Delivery: - Be able where relevant to participate in and lead varied IT Infrastructure lifecycle & security projects. Including … Firms policies. - Post project, participate in evaluating the success of the project, identifying best practices and lessons learned. 3rd Line Support: - Provide Major Problem\Incident Support where Operations team need steering from a subject matter expert. - Liaison with 3rd party suppliers on system issues. - Ensuring that all members ...