1 to 25 of 33 Incident Response Jobs in Central London

Cyber Response & Recovery Manager (109188) Base Location: London/Manchester plus network of 20 offices nationally: The KPMG Advisory function is a cornerstone of our business. Operating from locations across the UK, we do work that matters, serving the country with diligence and expertise. KPMG … applying sector knowledge and technology solutions to deliver the best possible outcomes and get it right first time. Why Join KPMG as a Cyber Response & Recovery Manager? The Cyber Response & Recovery Manager role will be working in the Cyber Response Services (CRS) Team within our Cyber Advisory ...

Cyber Response & Recovery Manager (109188) Base Location: London/Manchester plus network of 20 offices nationally: www.kpmg88careers.co.uk/experienced-professional/#LeBlender.OfficeLocations The KPMG Advisory function is a cornerstone of our business. Operating from locations across the UK, we do work that matters, serving the country with diligence … applying sector knowledge and technology solutions to deliver the best possible outcomes and get it right first time. Why Join KPMG as a Cyber Response & Recovery Manager? The Cyber Response & Recovery Manager role will be working in the Cyber Response Services (CRS) Team within our Cyber Advisory ...

Cyber Response & Recovery Manager (Remediation focus) Base Location: London/Manchester plus network of 20 offices nationally: Why Join KPMG as a Cyber Response & Recovery Manager? The Cyber Response & Recovery Manager role will sit within the Cyber Response Services team in KPMG’s Cyber Advisory practice … reporting into the cyber response leadership team. Cyber security is one of the areas KPMG has identified for significant investment and growth. Our clients continue to face increasingly destructive cyber threats, particularly ransomware, destructive malware, business email compromise, Active Directory compromise, cloud compromise and advanced network intrusions. In these ...

Cyber Response & Recovery Manager (Remediation focus) Base Location: London/Manchester plus network of 20 offices nationally: www.kpmg88careers.co.uk/experienced-professional/#LeBlender.OfficeLocations Why Join KPMG as a Cyber Response & Recovery Manager? The Cyber Response & Recovery Manager role will sit within the Cyber Response Services team … KPMG’s Cyber Advisory practice, reporting into the cyber response leadership team. Cyber security is one of the areas KPMG has identified for significant investment and growth. Our clients continue to face increasingly destructive cyber threats, particularly ransomware, destructive malware, business email compromise, Active Directory compromise, cloud compromise ...

pigeonholed into one narrow specialism. At CyPro, you’ll have the opportunity to get involved in a wide range of areas including monitoring, incident response, threat intelligence, detection engineering, automation and internal security operations. You’ll play a key role in our Security Operations Centre, delivering … monitoring, detection and response to our growing customer base. You’ll contribute to building out our capabilities, improving tooling and processes, and shaping how we operate as the function matures. As the team grows further, you’ll have the flexibility to focus more deeply on the areas that interest ...

pigeonholed into one narrow specialism. At CyPro, you’ll have the opportunity to get involved in a wide range of areas including monitoring, incident response, threat intelligence, detection engineering, automation and internal security operations. You’ll play a key role in our Security Operations Centre, delivering … monitoring, detection and response to our growing customer base. You’ll contribute to building out our capabilities, improving tooling and processes, and shaping how we operate as the function matures. As the team grows further, you’ll have the flexibility to focus more deeply on the areas that interest ...

operations. This is a technical role suited to an experienced analyst with strong engineering instincts, hands-on coding capabilities, and a deep understanding of incident response, detection engineering, and adversary tradecraft. This position includes approximately one week per month of on-call availability for high-priority incident … ideal for someone who has likely grown from an engineering background and can write scripts (Python, Bash) to automate, enhance, and refine detection and response workflows. Experience with Splunk, SIEM operations, cloud endpoints, networks, and detection engineering will be highly advantageous. NOTE: Candidates for this role must be eligible ...

intersection of cyber leadership, risk governance, and business engagement . This is a people-focused leadership role , managing a capable, self-sufficient team across incident response, engineering, and architecture-while acting as a key deputy to the CISO (EMEA). Key Responsibilities Lead and manage cyber teams across … incident response, engineering, and architecture Act as deputy to CISO , supporting risk, governance, and leadership forums Oversee incident response , providing executive-level updates Ensure security controls and architecture align to CISO strategy and risk appetite Manage senior stakeholders (CIO, COO, CFO) and translate risk into business ...

business continuity, disaster recovery, physical security, facilities management and estates, ensuring robust governance, compliance and operational excellence. You will also lead enterprise risk management, incident response, crisis management and resilience planning across the organisation. Key Responsibilities Lead the organisation's Security, Resilience and Facilities Management strategy. Oversee cyber … Drive enterprise risk assessment, threat management and control assurance activities. Ensure compliance with relevant legislation, regulatory requirements and recognised security standards. Lead crisis management, incident response and resilience testing exercises. Manage key suppliers and third-party assurance arrangements. Provide strategic advice and reporting to senior leadership and governance ...

Cyber Response & Recovery Assistant Manager (Reactive) Base Location: London/Manchester plus network of 20 offices nationally: The KPMG Advisory function is a cornerstone of our business. Operating from locations across the UK, we do work that matters, serving the country with diligence and expertise. KPMG … applying sector knowledge and technology solutions to deliver the best possible outcomes and get it right first time. Why Join KPMG as a Cyber Response & Recovery Assistant Manager? The Cyber Response & Recovery Assistant Manager role will be working in the Cyber Response Services (CRS) Team within ...

Cyber Response & Recovery Assistant Manager (Reactive) Base Location: London/Manchester plus network of 20 offices nationally: www.kpmg88careers.co.uk/experienced-professional/#LeBlender.OfficeLocations The KPMG Advisory function is a cornerstone of our business. Operating from locations across the UK, we do work that matters, serving the country with diligence … applying sector knowledge and technology solutions to deliver the best possible outcomes and get it right first time. Why Join KPMG as a Cyber Response & Recovery Assistant Manager? The Cyber Response & Recovery Assistant Manager role will be working in the Cyber Response Services (CRS) Team within ...

engine room—executing day-to-day operations, streamlining workflows, and optimizing the Microsoft security and compliance stack. Key Responsibilities ️ Security Operations (2/3) Incident Response: Lead and coordinate security incident triage, active investigations, and containment activities across the enterprise estate. SIEM/XDR Engineering: Continually tune … techniques. Vulnerability Management: Oversee vulnerability scanning, remediation tracking, and control assurance activities. Privacy Operations (1/3) Smarter Data Discovery: Own the operational response for Subject Access Requests (SARs) and deletion requests. You will be expected to use Microsoft Purview's eDiscovery tools to efficiently filter massive data dumps ...

engine room—executing day-to-day operations, streamlining workflows, and optimizing the Microsoft security and compliance stack. Key Responsibilities 🛡️ Security Operations (2/3) Incident Response: Lead and coordinate security incident triage, active investigations, and containment activities across the enterprise estate. SIEM/XDR Engineering: Continually tune … techniques. Vulnerability Management: Oversee vulnerability scanning, remediation tracking, and control assurance activities. 🔐 Privacy Operations (1/3) Smarter Data Discovery: Own the operational response for Subject Access Requests (SARs) and deletion requests. You will be expected to use Microsoft Purview's eDiscovery tools to efficiently filter massive data dumps ...

high-performing SOC environments and driving continuous improvement. The Role This role also involves contributing to security service improvements and core operational processes, including incident, change, and problem management, as well as supporting the design, implementation, and review of security controls. There may occasionally be a requirement to support … performance, coverage, and detection fidelity Assess and improve SIEM architecture, including ingestion pipelines, parsing, and correlation logic Implement automation and orchestration (SOAR) to streamline response activities Log Source Onboarding & Integration Identify and onboard new log sources across cloud, network, endpoint, and application environments Develop custom parsers, connectors, and ingestion ...

home. What youll be doing: Building and maintaining scalable AWS infrastructure using IaC (Terraform, CloudFormation, CDK) Improving monitoring, logging, alerting, and overall observability Leading incident response, RCA, and preventative engineering Automating operational toil to free up engineering time Enhancing SLIs/SLOs/SLAs for critical services Partnering ...

controls, elimination of shared/admin accounts), backup and restore strategy, retention and archival, replication, monitoring (Redgate Monitor and equivalents), licensing, performance triage, and incident response. Acting as design authority for the wider data team coaching the SQL Developers on Power BI authorship, dimensional modelling, query optimisation and report ...

Architecture groups to align technical roadmaps with business priorities. Run production readiness reviews; own observability standards (structured logging, metrics, distributed tracing, alerting) and incident response maturity for your services. Contribute to hiring — interviews, technical assessments, and onboarding of new engineers. Lead the design and delivery of LLM-based … team — set usage standards, measure impact on throughput and quality, and coach engineers on effective adoption. Establish patterns for prompt design, context management, response parsing, and testing of AI-enhanced features. Stay current with applied AI developments; evaluate emerging tools and frameworks and bring pragmatic recommendations to engineering leadership. ...

protection, secrets, and resilience). • Recommend and review controls for containerised and serverless workloads; guide teams on secure coding and code review practices. • Support incident response planning and playbook development; foster a culture of continuous assurance. Your experience will include: • Leading the development of security architecture and design ...

protection, secrets, and resilience). • Recommend and review controls for containerised and serverless workloads; guide teams on secure coding and code review practices. • Support incident response planning and playbook development; foster a culture of continuous assurance. Your experience will include: • Leading the development of security architecture and design ...

doing You'll lead a team of 5 platform engineers, owning the day-to-day reliability of the platform: availability, performance, incident response, and getting to the bottom of why things break when they do. This is application support, not infrastructure build or third-party integrations ...

doing You'll lead a team of 5 platform engineers, owning the day-to-day reliability of the platform: availability, performance, incident response, and getting to the bottom of why things break when they do. This is application support, not infrastructure build or third-party integrations ...

rule base cleanups, and optimization Document network security configurations, changes, and standard operating procedures Collaborate with network and security teams on architecture design and incident response Ensure compliance with security policies and industry best practices Required Skills & Experience: 5+ years of hands-on experience with Check Point firewalls ...

observability, act as approver on critical PRs, model excellent reviews and pairing. Operate and improve production: own service performance targets for your area, lead incident response, drive corrective actions to completion, and reduce recurrence. Grow others: mentor and unblock teammates, transfer knowledge through pairing, docs, and structured feedback. ...

observability, act as approver on critical PRs, model excellent reviews and pairing. Operate and improve production: own service performance targets for your area, lead incident response, drive corrective actions to completion, and reduce recurrence. Grow others: mentor and unblock teammates, transfer knowledge through pairing, docs, and structured feedback. ...

extending Kubernetes with higher-level platforms and services, rather than treating it as an end in itself - Strong understanding of operational concerns: monitoring, logging, incident response, reliability and maintenance - Confidence working directly with engineers and data scientists to support real workloads in production MLOps experience is highly desirable ...