1 to 25 of 38 Incident Response Jobs in Central London

Cyber Response & Recovery Assistant Manager (Reactive DFIR) This role requires current SC or DV clearance, or eligibility and willingness to obtain clearance. About the role The Cyber Response & Recovery Assistant Manager role will be working in the Cyber Response Services (CRS) Team within our Advisory practice. Your … specific focus will be in the domain of reactive digital forensics and incident response (DFIR) acting as a junior case manager on smaller cases, or part of a team (reporting to a case manager or senior case manager) on larger cases. This is a hands-on role ...

Cyber Response & Recovery Manager (Remediation) This role requires current SC or DV clearance, or eligibility and willingness to obtain clearance. About the role The Cyber Response & Recovery Manager role will sit within the Cyber Response Services team in KPMG’s Cyber Advisory practice. Your specific focus will … compromise, Active Directory compromise, cloud compromise and advanced network intrusions. In these situations, clients look to KPMG not only to investigate and contain the incident, but also to help them recover securely, rebuild critical services, reduce the risk of reinfection and improve their long-term resilience. This ...

tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security event reporting, and content maintenance (tuning). What we are looking for Key Responsibilities: Serves as a senior member … optimization of enterprise security platforms, overseeing lifecycle management including break-fix, patching, version upgrades, and integration with broader security ecosystems. Directs complex security incident response efforts across multiple vectorsendpoint protection, EDR, malware analysis, network and computer forensicsensuring rapid containment and root cause analysis. Designs and executes advanced vulnerability ...

proportionate controls are in place. Provide informed input into security testing scope (e.g. Penetration testing, configuration reviews) and review remediation activity with suppliers. Support incident response and operational infosec activities as required, providing cover and acting as an all-round contributor in a small team. Maintain awareness … experience in an information security role with significant exposure to grc, alongside working knowledge of broader cyber security disciplines (e.g. Supplier assurance, security testing, incident response, security operations). Experience of iso 27001 isms implementation and management, and certification process (working with external and internal auditors). Strong ...

business continuity, disaster recovery, physical security, facilities management and estates, ensuring robust governance, compliance and operational excellence. You will also lead enterprise risk management, incident response, crisis management and resilience planning across the organisation. Key Responsibilities Lead the organisation's Security, Resilience and Facilities Management strategy. Oversee cyber … Drive enterprise risk assessment, threat management and control assurance activities. Ensure compliance with relevant legislation, regulatory requirements and recognised security standards. Lead crisis management, incident response and resilience testing exercises. Manage key suppliers and third-party assurance arrangements. Provide strategic advice and reporting to senior leadership and governance ...

accountable for developing and implementing cyber claims strategy, best practice and capability across those offices, ensuring a consistent and effective approach to service delivery, incident response and client support. What you’ll do Lead the development and implementation of international cyber claims strategy across jurisdictions outside … required, acting as a referral point to support and supplement local expertise. Establish and embed best practice approaches to cyber claims handling, both initial response and coverage, across global offices. Build and oversee local cyber claims capability in key international markets to ensure consistency of service provision and standards ...

Cyber Response Assistant Manager (Proactive Consulting) This role requires current SC or DV clearance, or eligibility and willingness to obtain clearance. About the role The Cyber Response Assistant Manager role will be working in the Cyber Response Services (CRS) Team within our Advisory practice. Your specific focus … will be in the domain of proactive advice and guidance as it relates to Security Operations/Defensive Cyber Operations (Incident Management, Vulnerability Management, Threat Intelligence). Organisations face increasing challenges operating effective security operations capabilities across threat intelligence, vulnerability management and incident management. This role helps clients ...

client is seeking a SOC Analyst to join a security operations team in London. The role is focused on real-time monitoring, investigation, and incident response across a modern enterprise security environment. - Key Responsibilities Monitor, triage, and respond to security alerts across multiple platforms, including Microsoft and endpoint … Optimise and tune detection rules, policies, and alerting mechanisms to improve SOC efficiency. Collaborate with internal teams to support security operations, threat analysis, and incident recovery. Produce clear incident documentation, reports, and recommendations for continuous improvement. Contribute to maintaining and enhancing SOC processes, runbooks, and operational workflows. Required ...

responsible for leading both our Cloud Platform and Enterprise Service orgs: Leading and developing two engineering teams — Cloud Platform (cloud infrastructure, observability, SRE, incident response) and Enterprise Services (IT support, IAM, Okta, Slack and core SaaS) — setting technical direction, hiring and performance standards across both. Delivering the reliability … performance and cost-efficiency of the cloud platform underpinning production services, including SLOs, on‐call and incident response practices, and post‐incident learning, in line with the broader infrastructure strategy. Executing the roadmap for enterprise services and identity, treating internal IT as an engineering discipline — automation‐first ...

Role Title: Information Security Senior Consultant – Detection and Response (Europe & Americas) About Westpac: Westpac is one of the world’s oldest banks and a leading financial services organisation with a strong presence across Australia, New Zealand and key international markets. We support individuals, businesses and institutions through a broad … with our customers and communities. About the Team: This role is a core part of Westpac’s global 24/7 cybersecurity monitoring and incident response capability - the bank’s first line of cyber defence. How will I help? You will be responsible for analysing and responding ...

track the cyber threats that BA faces and produce finished intelligence products for stakeholders across the organisation Support the Cyber Threat Intelligence and Cyber Incident Managers during cyber incident response activities Support the implementation of the broader BA/IAG Cyber Strategy What you’ll bring … stakeholders Experience in threat modelling using frameworks such as STRIDE, PASTA, attack trees (Desirable) Ability to remain calm and prioritise under pressure Understanding of incident response methodology Strong understanding of actor methodology including their tactics, techniques and procedures Your experience: Holding or working towards relevant cyberintelligence certifications e.g. ...

primarily remote role with occasional on-site visits to London. You will be working within a security operations function, supporting the monitoring, detection and response to security threats across the organisation's estate. You will bring solid hands-on experience across SIEM and log management tooling, working independently … following: Hands-on experience with Splunk in a SOC environment Cribl experience for log management and data pipeline optimisation Security monitoring, threat detection and incident response Working within a security operations centre at a mid-senior level SC clearance held or ability to pass Interested? Please apply below. ...

modern engineering and traditional ITSM/ITIL practices Establish SLIs, SLOs, and Error Budgets Shape observability strategies using metrics, logs, and traces Design incident response models and post-incident learning loops Reduce toil through automation and engineering excellence Deliver SRE capability assessments and roadmaps … Looking For Extensive experience in SRE, cloud operations, or DevOps Proven consulting or advisory background Experience with AWS, Azure, or GCP Strong observability and incident management expertise Ability to obtain UK SC clearance Modis International Ltd acts as an employment agency for permanent recruitment and an employment business ...

including IAM, SIEM, and data classification Anticipate emerging threats, leverage AI/ML for predictive security, and set the technology vision Lead the Security Incident Response Programme Governance, risk, and compliance (GRC) Define and own the GRC programme, including the ISMS, policy framework, risk registers, and audit readiness ...

while contributing to our modern infrastructure strategy. What youll be doing As an Infrastructure Engineer, you will: Participate in a 24/7 major-incident on-call rota Develop, support, and enhance infrastructure across multiple office locations and cloud environments Design and implement standardised templates, configuration baselines, and self … third-party vendors to ensure the health and availability of hosted or outsourced services Collaborate with the Security Operations Centre on threat detection and incident response activities Take ownership of incidents and problems through to resolution or formal handover Conduct root-cause analysis to identify and address underlying ...

delivery of a safe, secure and customer-focused corporate environment for Accenture. The role acts as a central point of coordination for security systems, incident response, access control, communication and operational escalation. The successful candidate will represent CIS Security and the customer by demonstrating high standards of professionalism … understand Corporate Escalation Process, - Escalate and Disseminate information in a timely manner to the correct personnel in the event or during an emergency or Incident on site. The role includes you to conduct opening & closing procedures of a building, patrolling, reception duties, access control, answering incoming telephone calls, Conducting ...

self-service tooling, golden paths, and reduced operational friction Partner with security/engineering leadership to operationalise RBAC, access governance, and compliance requirements Support incident response, monitoring, and operational SLAs Mentor engineers and help shape long-term platform strategy and standards Required Experience & Skills Strong background in platform ...

around 25 through a period of genuine transformation. What you'll be doing: Own and execute the Technology Resilience and Production Operations strategy, including Incident, Problem, Event and Change Management, driving automation and an agile approach to improve stability, security and speed at scale Build and govern an internationalised … manage the Technology Resilience framework, including business impact analysis, Disaster Recovery exercises (cyber-attack, ransomware, infrastructure failure scenarios) and Business Continuity Plans Lead major incident response and postmortem/root cause processes, driving a culture that reduces repeat incidents and strengthens proactive problem management Own the Change Advisory ...

Westpac Group is seeking an Information Security Senior Consultant – Detection and Response to join a global 24/7 cybersecurity monitoring and incident response capability. You will analyse threats, respond to incidents, and design detections aligned to risk priorities across Europe and the Americas. You will translate ...

grade infrastructure design, deployment, and scaling Strong Kubernetes and containerisation depth Modern automation and IaC tooling Solid understanding of distributed systems On-call and incident response experience Confident debugging and optimising across the stack Able to work UK hours and hybrid in London Role Overview We're partnered ...

controls, elimination of shared/admin accounts), backup and restore strategy, retention and archival, replication, monitoring (Redgate Monitor and equivalents), licensing, performance triage, and incident response. Acting as design authority for the wider data team coaching the SQL Developers on Power BI authorship, dimensional modelling, query optimisation and report ...

Cooling infrastructure Comms rooms and technical spaces Building monitoring systems Work closely with Technology, Network Engineering, and Security teams to ensure operational resilience. Support incident response and escalation procedures for facilities-related outages. Projects & Capital Works Lead office fit-outs, refurbishments, and expansion projects. Manage project budgets, procurement … sustainability and energy-efficiency projects. Health, Safety & Compliance Ensure compliance with UK health and safety legislation. Act as key contact for: Fire safety Emergency response planning Risk assessments Business continuity arrangements Contractor management Manage statutory inspections and ensure compliance documentation remains current. Support ISO and operational resilience requirements where ...

maintenance and Security prevention with occasional support work assisting the support and infrastructure teams as and when required. You will develop and maintain the incident response plan, cyber essentials and ISO27001 and follow the NIST framework. You will also work with the infrastructure team on a written … with and monitor logs generated from SIEM & Sophos MTR. Perform threat hunts with the tools available to you as and when a security related incident occurs. * Identifying, monitoring, and defining the requirements of the overall security of all systems. * Maintain high patching status on all systems. * Configuring, maintaining ...

environments. Desirable Existing DV Clearance or eligibility to obtain it. Background in cyber security, defence, technology, financial services or national security environments. Experience with incident response, vulnerability management or secure systems engineering. This is a fantastic opportunity to work on impactful cyber programmes while developing your career within ...

close collaboration with data and ML engineering teams Support IAM, service account design, and security posture across the platform, enforcing least-privilege principles Lead incident response and root cause analysis for platform issues, and drive improvements to reduce recurrence Participate in an on-call rota as the platform ...