19 of 19 Incident Response Jobs in Central London

Cyber Response & Recovery Manager (109188) Base Location: London/Manchester plus network of 20 offices nationally: www.kpmg88careers.co.uk/experienced-professional/#LeBlender.OfficeLocations The KPMG Advisory function is a cornerstone of our business. Operating from locations across the UK, we do work that matters, serving the country with diligence … applying sector knowledge and technology solutions to deliver the best possible outcomes and get it right first time. Why Join KPMG as a Cyber Response & Recovery Manager? The Cyber Response & Recovery Manager role will be working in the Cyber Response Services (CRS) Team within our Cyber Advisory ...

Cyber Response & Recovery Manager (Remediation focus) Base Location: London/Manchester plus network of 20 offices nationally: www.kpmg88careers.co.uk/experienced-professional/#LeBlender.OfficeLocations Why Join KPMG as a Cyber Response & Recovery Manager? The Cyber Response & Recovery Manager role will sit within the Cyber Response Services team … KPMG’s Cyber Advisory practice, reporting into the cyber response leadership team. Cyber security is one of the areas KPMG has identified for significant investment and growth. Our clients continue to face increasingly destructive cyber threats, particularly ransomware, destructive malware, business email compromise, Active Directory compromise, cloud compromise ...

operations. This is a technical role suited to an experienced analyst with strong engineering instincts, hands-on coding capabilities, and a deep understanding of incident response, detection engineering, and adversary tradecraft. This position includes approximately one week per month of on-call availability for high-priority incident … ideal for someone who has likely grown from an engineering background and can write scripts (Python, Bash) to automate, enhance, and refine detection and response workflows. Experience with Splunk, SIEM operations, cloud endpoints, networks, and detection engineering will be highly advantageous. NOTE: Candidates for this role must be eligible ...

tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security event reporting, and content maintenance (tuning). What we are looking for Key Responsibilities: Serves as a senior member … optimization of enterprise security platforms, overseeing lifecycle management including break-fix, patching, version upgrades, and integration with broader security ecosystems. Directs complex security incident response efforts across multiple vectorsendpoint protection, EDR, malware analysis, network and computer forensicsensuring rapid containment and root cause analysis. Designs and executes advanced vulnerability ...

intersection of cyber leadership, risk governance, and business engagement . This is a people-focused leadership role , managing a capable, self-sufficient team across incident response, engineering, and architecture-while acting as a key deputy to the CISO (EMEA). Key Responsibilities Lead and manage cyber teams across … incident response, engineering, and architecture Act as deputy to CISO , supporting risk, governance, and leadership forums Oversee incident response , providing executive-level updates Ensure security controls and architecture align to CISO strategy and risk appetite Manage senior stakeholders (CIO, COO, CFO) and translate risk into business ...

business continuity, disaster recovery, physical security, facilities management and estates, ensuring robust governance, compliance and operational excellence. You will also lead enterprise risk management, incident response, crisis management and resilience planning across the organisation. Key Responsibilities Lead the organisation's Security, Resilience and Facilities Management strategy. Oversee cyber … Drive enterprise risk assessment, threat management and control assurance activities. Ensure compliance with relevant legislation, regulatory requirements and recognised security standards. Lead crisis management, incident response and resilience testing exercises. Manage key suppliers and third-party assurance arrangements. Provide strategic advice and reporting to senior leadership and governance ...

client is seeking a SOC Analyst to join a security operations team in London. The role is focused on real-time monitoring, investigation, and incident response across a modern enterprise security environment. - Key Responsibilities Monitor, triage, and respond to security alerts across multiple platforms, including Microsoft and endpoint … Optimise and tune detection rules, policies, and alerting mechanisms to improve SOC efficiency. Collaborate with internal teams to support security operations, threat analysis, and incident recovery. Produce clear incident documentation, reports, and recommendations for continuous improvement. Contribute to maintaining and enhancing SOC processes, runbooks, and operational workflows. Required ...

primarily remote role with occasional on-site visits to London. You will be working within a security operations function, supporting the monitoring, detection and response to security threats across the organisation's estate. You will bring solid hands-on experience across SIEM and log management tooling, working independently … following: Hands-on experience with Splunk in a SOC environment Cribl experience for log management and data pipeline optimisation Security monitoring, threat detection and incident response Working within a security operations centre at a mid-senior level SC clearance held or ability to pass Interested? Please apply below. ...

modern engineering and traditional ITSM/ITIL practices Establish SLIs, SLOs, and Error Budgets Shape observability strategies using metrics, logs, and traces Design incident response models and post-incident learning loops Reduce toil through automation and engineering excellence Deliver SRE capability assessments and roadmaps … Looking For Extensive experience in SRE, cloud operations, or DevOps Proven consulting or advisory background Experience with AWS, Azure, or GCP Strong observability and incident management expertise Ability to obtain UK SC clearance Modis International Ltd acts as an employment agency for permanent recruitment and an employment business ...

home. What youll be doing: Building and maintaining scalable AWS infrastructure using IaC (Terraform, CloudFormation, CDK) Improving monitoring, logging, alerting, and overall observability Leading incident response, RCA, and preventative engineering Automating operational toil to free up engineering time Enhancing SLIs/SLOs/SLAs for critical services Partnering ...

controls, elimination of shared/admin accounts), backup and restore strategy, retention and archival, replication, monitoring (Redgate Monitor and equivalents), licensing, performance triage, and incident response. Acting as design authority for the wider data team coaching the SQL Developers on Power BI authorship, dimensional modelling, query optimisation and report ...

protection, secrets, and resilience). • Recommend and review controls for containerised and serverless workloads; guide teams on secure coding and code review practices. • Support incident response planning and playbook development; foster a culture of continuous assurance. Your experience will include: • Leading the development of security architecture and design ...

rule base cleanups, and optimization Document network security configurations, changes, and standard operating procedures Collaborate with network and security teams on architecture design and incident response Ensure compliance with security policies and industry best practices Required Skills & Experience: 5+ years of hands-on experience with Check Point firewalls ...

policies, internal audits, change control, and the external certification cycle Day-to-day security: threat monitoring, patching, vulnerability scanning, and incident response Cloud data: access control, integrity, and GDPR-aligned retention and disposal The company website, its web server, and WordPress upkeep What you'll bring Circa 7+ ...

observability, act as approver on critical PRs, model excellent reviews and pairing. Operate and improve production: own service performance targets for your area, lead incident response, drive corrective actions to completion, and reduce recurrence. Grow others: mentor and unblock teammates, transfer knowledge through pairing, docs, and structured feedback. ...

extending Kubernetes with higher-level platforms and services, rather than treating it as an end in itself - Strong understanding of operational concerns: monitoring, logging, incident response, reliability and maintenance - Confidence working directly with engineers and data scientists to support real workloads in production MLOps experience is highly desirable ...

core M365 services via the M365 Admin Center, including Teams, SharePoint Online, OneDrive, Co-pilot and relevant areas of Entra ID. - Monitor service health, incident response, and change notifications from the Microsoft 365 Message Centre. - Assist with the implementation and maintenance of security & compliance settings such as retention ...

governance rather than top‐down control Resolve Issues & Handle Production Incidents Investigate and resolve issues across models, data pipelines, and AI systems Lead incident response for production outages, ensuring rapid mitigation and resolution Implement improvements to prevent recurrence and enhance system reliability Collaborate with Product & Stakeholders Work closely ...

contracts and technology agreements. Provide guidance on international data transfers, AI governance, adtech, consumer-facing products and online platform issues. Assist with regulatory enquiries, incident response and data breach matters. Monitor legal and regulatory developments and help implement practical compliance solutions. About You UK or common law qualified ...