1 to 25 of 26 Incident Response Jobs in Central London

Security Operations Lead Threat Detection & Response London | Hybrid | Up to £80k + excellent benefits Im working with a leading London university to appoint a Security Operations Lead to lead its Threat Detection & Response (TDR) function within the wider Security Operations team. This is a senior cyber security leadership … role with responsibility for continuous monitoring, alert triage, security investigations and incident response , alongside leading a team of security specialists and junior staff. Youll also play a key role in developing the universitys security operations capability improving people, processes, tooling, metrics and incident response playbooks , while ...

environments, including cloud platforms, on-premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining … assessments using recognised methodologies and tooling, including CIS Benchmarks. Contribute to vulnerability management, endpoint security, intrusion detection and prevention capabilities. Support security monitoring and incident response activities within SOC environments. Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and Infrastructure as Code. Help identify ...

Incident Response Specialist Working Hours: Wednesday to Saturday, 08:00 to 17:45 (UK Time) Rate: £500 - £600 per day inside IR35 - 12 month contract Remote - 2 days per month in the London office About the Role We are seeking an experienced Incident Response Specialist ...

Outstanding opportunity to join this global B2B SaaS organisation looking for a Senior Cloud Detection Engineer to take ownership of cloud-native detection and response capability. If you thrive in high-scale cloud environments and love building smart detections and automated response workflows, this role gives you real … Build and optimise detections in Elastic and Azure Sentinel Develop threat models for AWS & Azure and our global SaaS products Create and maintain incident response playbooks Automate response actions with the Security Team Partner with our external SOC to refine detection strategies Perform threat hunting and analysis ...

risks in runtime and cloud environments, supporting remediation Support the development and operation of runtime security tooling for production risk visibility Contribute to security incident response activities, including triage and investigation Develop and maintain incident response processes, runbooks, and detection capabilities Work with risk, governance ...

controlled deployment and rollback processes - Implement strong IAM, networking, service account, secrets management, encryption and least-privilege controls - Establish centralised logging, monitoring, alerting and incident response processes - Design and test backup, disaster recovery and business continuity arrangements, including appropriate RPO and RTO targets - Support secure operation of scheduled … managed database services - Strong experience of CI/CD, ideally using GitHub Actions, together with Docker and containerised workloads - Sound understanding of monitoring, incident response, backup, disaster recovery, threat modelling and secure software delivery - Experience within fintech, banking, payments, accounting software, payroll or another regulated environment would ...

client environments across cloud, on-premises and hybrid infrastructure. This is an opportunity to work with modern security technologies across security engineering, threat detection, incident response, SIEM, cloud security and network security , while working alongside experienced engineering and security specialists. The Role As a Cyber Security Engineer … Firewall and network security management Developing and maintaining security policies, standards and procedures Conducting infrastructure security assessments using tools such as CIS Benchmarks Supporting incident detection, response and threat intelligence activities Contributing to vulnerability management and endpoint security Supporting security improvements across complex client environments What ...

reviews and monitoring KPIs Ensure compliance with IT security policy standards, including encryption, secure disposal, build hardening, monitoring, patching and access controls Lead security incident response and contribute to major incident management control Ensure effective communications outside of the IT team Production of an appropriate IT infrastructure ...

modern engineering and traditional ITSM/ITIL practices Establish SLIs, SLOs, and Error Budgets Shape observability strategies using metrics, logs, and traces Design incident response models and post-incident learning loops Reduce toil through automation and engineering excellence Deliver SRE capability assessments and roadmaps … Looking For Extensive experience in SRE, cloud operations, or DevOps Proven consulting or advisory background Experience with AWS, Azure, or GCP Strong observability and incident management expertise Ability to obtain UK SC clearance Modis International Ltd acts as an employment agency for permanent recruitment and an employment business ...

SIEM services Previous experience taking a business through Cyber Essentials Plus and/or ISO 27001 certification Experience leading or supporting cyber security incident response and investigations Good grounding in infrastructure and networking, including Active Directory, DNS, virtualisation, cloud and firewalls Working knowledge of frameworks such as NIST … Entra ID, Purview and Defender Managing the performance of the outsourced SOC, MDR and SIEM providers and challenging them on quality Leading the technical response to incidents, from investigation and containment through to root cause Owning vulnerability management and coordinating penetration testing Leading the business through Cyber Essentials Plus ...

enforce security and technical standards * Lead Infrastructure as Code (IaC) practices across teams and environments * Drive observability, monitoring, logging and audit controls * Support incident response, patching, compliance reporting and technical debt remediation * Partner with developers and delivery teams to improve engineering quality and security * Document security processes, controls ...

Conduct risk assessments, internal audits, compliance reviews and Data Protection Impact Assessments (DPIAs). Support the management of security incidents, business continuity planning and incident response exercises. Maintain ISO 27001 documentation, including the Statement of Applicability, and coordinate internal and external audits. Work closely with Cyber Security, Group ...

. Relevant Google Cloud certifications , such as Developer, Solutions Architect or Security. Experience implementing cloud security practices including secure coding, threat modelling, compliance and incident response. Open-source contributions or a strong track record of technical knowledge sharing. Experience leading multi-team initiatives spanning infrastructure, application and platform engineering. ...

Knowledge of automation, API integrations, telemetry pipelines, and security orchestration. Experience scripting with PowerShell, Python, or Bash. Strong understanding of SOC operations, detection engineering, incident response, and attacker methodologies. Excellent stakeholder engagement skills with the ability to communicate technical concepts to both technical and non-technical audiences. Experience … architecture roles. This is a fantastic opportunity for an experienced SOC Engineer who wants to shape the future of a modern Managed Detection & Response service while working with one of the industry's leading security platforms. ...

Knowledge of automation, API integrations, telemetry pipelines, and security orchestration. Experience scripting with PowerShell, Python, or Bash. Strong understanding of SOC operations, detection engineering, incident response, and attacker methodologies. Excellent stakeholder engagement skills with the ability to communicate technical concepts to both technical and non-technical audiences. Experience … architecture roles. This is a fantastic opportunity for an experienced SOC Engineer who wants to shape the future of a modern Managed Detection & Response service while working with one of the industry's leading security platforms. ...

configurations, owners, evidence and testing methods. * Act as the senior technical escalation point for complex or high-severity incidents and participate in the major incident on-call arrangements. * Design and strengthen identity security using Microsoft Entra ID, Conditional Access, Privileged Identity Management, identity governance, workload identities, access reviews … identity security, Zero Trust, cloud security, data security, endpoint security, network security, application and API security, secure software development and DevSecOps. * Strong experience in incident response, detection engineering, threat hunting, vulnerability or exposure management and security automation. * Ability to automate security and assurance processes using technologies such ...

proportionate, practical controls Challenging network, infrastructure and cloud configurations constructively with engineers and suppliers Providing expertise and oversight across vulnerability management, security monitoring and incident response Explaining security risk and its business impact clearly to Executives Seeing improvements through to implementation with teams who do not report ...

Working with Cyber Security, Risk and Control and development teams to onboard applications and remediate vulnerabilities Supporting platform upgrades, patching, resilience, DR, monitoring and incident response What You'll Bring Strong hands-on experience of enterprise software build, packaging and deployment engineering Strong C# development skills … Server and on-premises hosting knowledge, working knowledge of Linux deployment patterns, and SQL Server database deployment (e.g. DACPAC) Experience working within formal change, incident and release management in a controlled, regulated environment Desirable: ASP.NET/ASP.NET Core, Entity Framework, NUnit/xUnit, ServiceNow integration, Terraform, Docker/Kubernetes ...

architectural experience across at least two of SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence • Strong understanding of security operations, threat detection and incident response • Experience designing both on-prem and cloud security architectures • Understanding of security principles including least privilege, encryption, resilience and scalability • Experience working with ...

Manager, you'll play a key role in strengthening security across our Microsoft 365 environment, cloud platforms, networks and infrastructure. From threat detection and incident response to vulnerability management and security-by-design, you'll be at the centre of keeping our organisation secure in an ever-changing ...

with Europe cloud market (hyperscalers, local data centers, partner programs, marketplace motions) * Hands-on understanding of the observability landscape (APM, infra monitoring, logs, tracing, incident response) and how buyers evaluate these tools * Comfortable selling to technical and enterprise buyers (IT, DevOps, Engineering, SecOps) * Strong executive presence, communication ...

controls, elimination of shared/admin accounts), backup and restore strategy, retention and archival, replication, monitoring (Redgate Monitor and equivalents), licensing, performance triage, and incident response. Acting as design authority for the wider data team coaching the SQL Developers on Power BI authorship, dimensional modelling, query optimisation and report ...

deploy production changes across routing, firewall, and cloud network infrastructure Troubleshoot complex environments (BGP, OSPF, MPLS, multicast, HSRP) Provide real-time monitoring and incident response for global network infrastructure Lead escalations and advanced troubleshooting across network, cloud, and infrastructure domains Build automation, monitoring, and observability tooling via scripting ...

Engineering: - Identify vulnerabilities in hardware and software to be remediated by Engineering\Operations teams. - Understand current and emerging security threats. - Assist and lead in Incident Response investigations and mitigation Project Delivery: - Be able where relevant to participate in and lead varied IT Infrastructure lifecycle & security projects. Including … Firms policies. - Post project, participate in evaluating the success of the project, identifying best practices and lessons learned. 3rd Line Support: - Provide Major Problem\Incident Support where Operations team need steering from a subject matter expert. - Liaison with 3rd party suppliers on system issues. - Ensuring that all members ...

Engineering: - Identify vulnerabilities in hardware and software to be remediated by Engineering\Operations teams. - Understand current and emerging security threats. - Assist and lead in Incident Response investigations and mitigation Project Delivery: - Be able where relevant to participate in and lead varied IT Infrastructure lifecycle & security projects. Including … Firms policies. - Post project, participate in evaluating the success of the project, identifying best practices and lessons learned. 3rd Line Support: - Provide Major Problem\Incident Support where Operations team need steering from a subject matter expert. - Liaison with 3rd party suppliers on system issues. - Ensuring that all members ...