1 to 25 of 41 Incident Response Jobs in Central London

Cyber Response & Recovery Manager (Remediation focus) Base Location: London/Manchester plus network of 20 offices nationally: www.kpmg88careers.co.uk/experienced-professional/#LeBlender.OfficeLocations Why Join KPMG as a Cyber Response & Recovery Manager? The Cyber Response & Recovery Manager role will sit within the Cyber Response Services team … KPMG’s Cyber Advisory practice, reporting into the cyber response leadership team. Cyber security is one of the areas KPMG has identified for significant investment and growth. Our clients continue to face increasingly destructive cyber threats, particularly ransomware, destructive malware, business email compromise, Active Directory compromise, cloud compromise ...

tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security event reporting, and content maintenance (tuning). What we are looking for Key Responsibilities: Serves as a senior member … optimization of enterprise security platforms, overseeing lifecycle management including break-fix, patching, version upgrades, and integration with broader security ecosystems. Directs complex security incident response efforts across multiple vectorsendpoint protection, EDR, malware analysis, network and computer forensicsensuring rapid containment and root cause analysis. Designs and executes advanced vulnerability ...

with global impact upon Colt, business units, partners, and customers. While working as part of this team, the successful individual will provide world class incident response functions to detect, protect, respond, and sustain operations within cyberspace. This role operates at a Tier 3 level, with the expectation that … operational activities, Technology escalation support, Security Solution assessment, existing Service maturing and Build activities assist Analyse potential infrastructure security incidents to determine if incident qualifies as a legitimate security breach Establishing and governing the security incident response processes, investigations and security operational processes Maintenance and enhancement ...

intersection of cyber leadership, risk governance, and business engagement . This is a people-focused leadership role , managing a capable, self-sufficient team across incident response, engineering, and architecture-while acting as a key deputy to the CISO (EMEA). Key Responsibilities Lead and manage cyber teams across … incident response, engineering, and architecture Act as deputy to CISO , supporting risk, governance, and leadership forums Oversee incident response , providing executive-level updates Ensure security controls and architecture align to CISO strategy and risk appetite Manage senior stakeholders (CIO, COO, CFO) and translate risk into business ...

business continuity, disaster recovery, physical security, facilities management and estates, ensuring robust governance, compliance and operational excellence. You will also lead enterprise risk management, incident response, crisis management and resilience planning across the organisation. Key Responsibilities Lead the organisation's Security, Resilience and Facilities Management strategy. Oversee cyber … Drive enterprise risk assessment, threat management and control assurance activities. Ensure compliance with relevant legislation, regulatory requirements and recognised security standards. Lead crisis management, incident response and resilience testing exercises. Manage key suppliers and third-party assurance arrangements. Provide strategic advice and reporting to senior leadership and governance ...

role is the single point of ownership when incidents occur. You will directly oversee the offshore Production Support team, run on-call and incident response, and ensure fast detection, triage and restoration of services. This is not a passive monitoring role. You are expected to understand … offshore Production Support team and be the single point person when incidents occur, escalating only to Head Of when required. Run on-call and incident response; ensure fast detection, triage, and restoration. Maintain observability standards (logs, metrics, traces) and alert quality (low noise, high signal). Understand ...

Cyber Response & Recovery Assistant Manager (Reactive) Base Location: London/Manchester plus network of 20 offices nationally: www.kpmg88careers.co.uk/experienced-professional/#LeBlender.OfficeLocations The KPMG Advisory function is a cornerstone of our business. Operating from locations across the UK, we do work that matters, serving the country with diligence … applying sector knowledge and technology solutions to deliver the best possible outcomes and get it right first time. Why Join KPMG as a Cyber Response & Recovery Assistant Manager? The Cyber Response & Recovery Assistant Manager role will be working in the Cyber Response Services (CRS) Team within ...

client is seeking a SOC Analyst to join a security operations team in London. The role is focused on real-time monitoring, investigation, and incident response across a modern enterprise security environment. - Key Responsibilities Monitor, triage, and respond to security alerts across multiple platforms, including Microsoft and endpoint … Optimise and tune detection rules, policies, and alerting mechanisms to improve SOC efficiency. Collaborate with internal teams to support security operations, threat analysis, and incident recovery. Produce clear incident documentation, reports, and recommendations for continuous improvement. Contribute to maintaining and enhancing SOC processes, runbooks, and operational workflows. Required ...

investigation and analysis, acting as the escalation point for complex or high-severity incidents. They conduct root cause analysis, guide L1 analysts, and support incident containment and remediation efforts. Accenture are partnering with scaled UK AI compute pioneers to lead the charge on next-generation infrastructure. for sovereign AI. … Qualification Key Responsibilities Investigate escalated incidents to determine attack vectors, scope, and potential impact. Correlate events across multiple data sources to build a comprehensive incident narrative. Execute containment, eradication, and recovery activities in coordination with IT/OT stakeholders. Lead response for medium to high-severity incidents ...

technical expertise with people leadership, operational planning, and stakeholder management. Acts as the primary point of accountability for all data centre operations, maintenance, and incident response activities. Key Responsibilities Leadership & Team Management Manage, mentor, and develop a team of data centre technicians, including performance reviews, shift scheduling … Environmental Controls Oversee monitoring of environmental controls (HVAC, temperature, humidity) and power systems (generators, UPS) to ensure optimal operating conditions Ensure proactive alerting and response procedures are in place for environmental anomalies Manage capacity planning for power, cooling, and physical space Incident Response & Troubleshooting Act as escalation ...

service and empower engineering teams. Own and evolve monitoring and alerting across production systems - ensuring dashboards and alerts are high-signal and actionable. Lead incident response during production issues. Coordinate across teams, drive resolution, and ensure thorough post-incident reviews with meaningful follow-up actions. Investigate … infrastructure. Who you are Passionate about platform reliability, operational excellence, and building shared ownership of production systems across the wider engineering team. Comfortable leading incident response under pressure and making sound technical decisions with incomplete information. Excited about being part of a fast-growing company that's trying ...

sufficient to engage credibly with the team Critically reviewing supplier technical proposals, architectures and security testing reports (e.g. SOC 2, penetration test reports) Supporting incident response and operational infosec activities as required Maintaining awareness of AI developments relevant to information security, supporting the AI governance framework, and identifying … case risk assessments Exposure to property technology Experience reviewing penetration test reports, SOC 2 reports or supplier security architectures Hands-on experience supporting incident response or security operations Desirable accreditations: ISO 27001 Lead Auditor/Implementer, ISO 27005, CISSP, CISM or equivalent, and CompTIA Security+ or an equivalent ...

risks in runtime and cloud environments, supporting remediation Support the development and operation of runtime security tooling for production risk visibility Contribute to security incident response activities, including triage and investigation Develop and maintain incident response processes, runbooks, and detection capabilities Work with risk, governance ...

partner with AIOps vendors, IT Operations, infrastructure, platform engineering, SRE, service management, and application teams to reduce operational noise, improve service reliability, and accelerate incident response across a complex enterprise environment. Responsibilities Execute the enterprise AIOps strategy, operating model, and adoption plan across the organization. Build scalable observability … service management, and application teams to operationalize AIOps capabilities at scale. Establish governance, success metrics, and operating rhythms to measure improvements in alert quality, incident reduction, MTTD, MTTR, service health, and product adoption. Drive adoption of AIOps capabilities by aligning use cases, implementation priorities, and operational workflows with business ...

primarily remote role with occasional on-site visits to London. You will be working within a security operations function, supporting the monitoring, detection and response to security threats across the organisation's estate. You will bring solid hands-on experience across SIEM and log management tooling, working independently … following: Hands-on experience with Splunk in a SOC environment Cribl experience for log management and data pipeline optimisation Security monitoring, threat detection and incident response Working within a security operations centre at a mid-senior level SC clearance held or ability to pass Interested? Please apply below. ...

stability of software applications and systems. - Provides operational support and leadership for production systems in a "you-build-it-you-run-it" culture, including incident response, post-incident learning, and continuous reliability improvements. - Leads evaluation sessions with external vendors, startups, and internal teams to drive outcomes-oriented ...

including intake, investigation, tracking, documentation, and stakeholder engagement. Support data mapping, data retention, minimisation, international transfer, and vendor risk management activities. Assist with privacy incident and breach response activities, including fact gathering, remediation tracking, reporting, and stakeholder coordination. Monitor developments in privacy, emerging regulatory areas (including AI where … ePrivacy requirements, international data transfers, privacy-by-design principles, and accountability frameworks. Experience supporting privacy programme activities such as impact assessments, data mapping, DSARs, incident response, vendor reviews, training, and compliance documentation. The ability to interpret complex legal, regulatory, and technical requirements and translate them into practical business ...

modern engineering and traditional ITSM/ITIL practices Establish SLIs, SLOs, and Error Budgets Shape observability strategies using metrics, logs, and traces Design incident response models and post-incident learning loops Reduce toil through automation and engineering excellence Deliver SRE capability assessments and roadmaps … Looking For Extensive experience in SRE, cloud operations, or DevOps Proven consulting or advisory background Experience with AWS, Azure, or GCP Strong observability and incident management expertise Ability to obtain UK SC clearance Modis International Ltd acts as an employment agency for permanent recruitment and an employment business ...

Knowledge of security frameworks and standards including: - ISO 27001 - NIST Cybersecurity Framework - NIST 800-53 - CIS Controls - SABSA - TOGAF Understanding of security operations concepts, incident response, and detection capabilities. Knowledge of application security principles, including secure coding practices and OWASP guidance. Experience with DevSecOps practices and security automation. ...

while contributing to our modern infrastructure strategy. What youll be doing As an Infrastructure Engineer, you will: Participate in a 24/7 major-incident on-call rota Develop, support, and enhance infrastructure across multiple office locations and cloud environments Design and implement standardised templates, configuration baselines, and self … third-party vendors to ensure the health and availability of hosted or outsourced services Collaborate with the Security Operations Centre on threat detection and incident response activities Take ownership of incidents and problems through to resolution or formal handover Conduct root-cause analysis to identify and address underlying ...

reviews, and independent assurance engagements, managing evidence collection, stakeholder responses, and remediation tracking Contribute to the ongoing development and enhancement of resilience, contingency, and incident response arrangements from a first-line GRC perspective Support strategic initiatives, transformation programmes, and special projects, while undertaking additional responsibilities as required What ...

overall operational stability of software applications and systems Provide operational support for production systems in a "you-build-it-you-run-it" culture, including incident response and continuous reliability improvements. Leads evaluation sessions with external vendors, startups, and internal teams to drive outcomes-oriented probing of architectural designs ...

reduce manual effort, improve operational efficiency, and create a better end-user experience. Support InfoSec and compliance across the IT estate by contributing to incident response, resolving complex technical issues, and partnering on systems, access, and infrastructure improvement projects. Ability to produce and maintain clear technical documentation, runbooks ...

customers and stakeholders alike. We're AI-driven at every stage of the SDLC, from planning and design through to coding, testing, deployment and incident response, and we need a leader who embraces this way of working, champions it across their teams, and continually pushes … strategic trade-offs between short-term deliverables and long-term technical investments. Ensure high-quality output by establishing best practices in quality assurance and incident management, tracking metrics such as uptime and incident reduction in the team's area. Facilitate cross-team collaboration to align on shared objectives ...

secure software development lifecycle is desired. Experience in security products, risk management, information security standards, security architecture principles, threat and vulnerability management, including incident response methodologies. Advanced proficiency in one or more programming languages or scripts. Advanced knowledge of cybersecurity architecture, applications, and technical processes, with considerable ...