1 to 25 of 45 Incident Response Jobs in Central London

Cyber Response & Recovery Manager (Remediation focus) Base Location: London/Manchester plus network of 20 offices nationally: www.kpmg88careers.co.uk/experienced-professional/#LeBlender.OfficeLocations Why Join KPMG as a Cyber Response & Recovery Manager? The Cyber Response & Recovery Manager role will sit within the Cyber Response Services team … KPMG’s Cyber Advisory practice, reporting into the cyber response leadership team. Cyber security is one of the areas KPMG has identified for significant investment and growth. Our clients continue to face increasingly destructive cyber threats, particularly ransomware, destructive malware, business email compromise, Active Directory compromise, cloud compromise ...

tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security event reporting, and content maintenance (tuning). What we are looking for Key Responsibilities: Serves as a senior member … optimization of enterprise security platforms, overseeing lifecycle management including break-fix, patching, version upgrades, and integration with broader security ecosystems. Directs complex security incident response efforts across multiple vectorsendpoint protection, EDR, malware analysis, network and computer forensicsensuring rapid containment and root cause analysis. Designs and executes advanced vulnerability ...

with global impact upon Colt, business units, partners, and customers. While working as part of this team, the successful individual will provide world class incident response functions to detect, protect, respond, and sustain operations within cyberspace. \n This role operates at a Tier 3 level, with the expectation … checksResponsible for operational activities, Technology escalation support, Security Solution assessment, existing Service maturing and Build activities assistAnalyse potential infrastructure security incidents to determine if incident qualifies as a legitimate security breachEstablishing and governing the security incident response processes, investigations and security operational processesMaintenance and enhancement of formal ...

intersection of cyber leadership, risk governance, and business engagement . This is a people-focused leadership role , managing a capable, self-sufficient team across incident response, engineering, and architecture-while acting as a key deputy to the CISO (EMEA). Key Responsibilities Lead and manage cyber teams across … incident response, engineering, and architecture Act as deputy to CISO , supporting risk, governance, and leadership forums Oversee incident response , providing executive-level updates Ensure security controls and architecture align to CISO strategy and risk appetite Manage senior stakeholders (CIO, COO, CFO) and translate risk into business ...

business continuity, disaster recovery, physical security, facilities management and estates, ensuring robust governance, compliance and operational excellence. You will also lead enterprise risk management, incident response, crisis management and resilience planning across the organisation. Key Responsibilities Lead the organisation's Security, Resilience and Facilities Management strategy. Oversee cyber … Drive enterprise risk assessment, threat management and control assurance activities. Ensure compliance with relevant legislation, regulatory requirements and recognised security standards. Lead crisis management, incident response and resilience testing exercises. Manage key suppliers and third-party assurance arrangements. Provide strategic advice and reporting to senior leadership and governance ...

business continuity, disaster recovery, physical security, facilities management and estates, ensuring robust governance, compliance and operational excellence. You will also lead enterprise risk management, incident response, crisis management and resilience planning across the organisation. Key Responsibilities Lead the organisation's Security, Resilience and Facilities Management strategy. Oversee cyber … Drive enterprise risk assessment, threat management and control assurance activities. Ensure compliance with relevant legislation, regulatory requirements and recognised security standards. Lead crisis management, incident response and resilience testing exercises. Manage key suppliers and third-party assurance arrangements. Provide strategic advice and reporting to senior leadership and governance ...

role is the single point of ownership when incidents occur. You will directly oversee the offshore Production Support team, run on-call and incident response, and ensure fast detection, triage and restoration of services. \n This is not a passive monitoring role. You are expected to understand … offshore Production Support team and be the single point person when incidents occur, escalating only to Head Of when required. \nRun on-call and incident response; ensure fast detection, triage, and restoration.Maintain observability standards (logs, metrics, traces) and alert quality (low noise, high signal).Understand at a working ...

Cyber Response & Recovery Assistant Manager (Reactive) Base Location: London/Manchester plus network of 20 offices nationally: www.kpmg88careers.co.uk/experienced-professional/#LeBlender.OfficeLocations The KPMG Advisory function is a cornerstone of our business. Operating from locations across the UK, we do work that matters, serving the country with diligence … applying sector knowledge and technology solutions to deliver the best possible outcomes and get it right first time. Why Join KPMG as a Cyber Response & Recovery Assistant Manager? The Cyber Response & Recovery Assistant Manager role will be working in the Cyber Response Services (CRS) Team within ...

client is seeking a SOC Analyst to join a security operations team in London. The role is focused on real-time monitoring, investigation, and incident response across a modern enterprise security environment. - Key Responsibilities Monitor, triage, and respond to security alerts across multiple platforms, including Microsoft and endpoint … Optimise and tune detection rules, policies, and alerting mechanisms to improve SOC efficiency. Collaborate with internal teams to support security operations, threat analysis, and incident recovery. Produce clear incident documentation, reports, and recommendations for continuous improvement. Contribute to maintaining and enhancing SOC processes, runbooks, and operational workflows. Required ...

security policies, standards and procedures. Leading security awareness and training programmes that improve behaviours and strengthen Moneybox's security culture. Owning Moneybox's security incident response framework, ensuring the business is prepared to identify, contain, respond to and recover from security incidents effectively. Overseeing vulnerability management, including scanning … improve security outcomes or operational efficiency.Experience managing security risk in cloud-based environments, ideally including Azure.Strong understanding of third-party security risk management.Experience with incident response planning, testing and improvement.Experience reporting security risks, controls and metrics to senior management.Strong communication skills, with the ability to translate technical security ...

investigation and analysis, acting as the escalation point for complex or high-severity incidents. They conduct root cause analysis, guide L1 analysts, and support incident containment and remediation efforts. \n Accenture are partnering with scaled UK AI compute pioneers to lead the charge on next-generation infrastructure. for sovereign … Investigate escalated incidents to determine attack vectors, scope, and potential impact. \n Correlate events across multiple data sources to build a comprehensive incident narrative. Execute containment, eradication, and recovery activities in coordination with IT/OT stakeholders. Lead response for medium to high-severity incidents and document detailed ...

empower engineering teams. \n Own and evolve monitoring and alerting across production systems - ensuring dashboards and alerts are high-signal and actionable. Lead incident response during production issues. Coordinate across teams, drive resolution, and ensure thorough post-incident reviews with meaningful follow-up actions. Investigate and resolve … Passionate about platform reliability, operational excellence, and building shared ownership of production systems across the wider engineering team. \n Comfortable leading incident response under pressure and making sound technical decisions with incomplete information. Excited about being part of a fast-growing company that's trying to make ...

assess security risks in runtime and cloud environments, supporting remediationSupport the development and operation of runtime security tooling for production risk visibilityContribute to security incident response activities, including triage and investigationDevelop and maintain incident response processes, runbooks, and detection capabilitiesWork with risk, governance, and control teams ...

sufficient to engage credibly with the team Critically reviewing supplier technical proposals, architectures and security testing reports (e.g. SOC 2, penetration test reports) Supporting incident response and operational infosec activities as required Maintaining awareness of AI developments relevant to information security, supporting the AI governance framework, and identifying … case risk assessments Exposure to property technology Experience reviewing penetration test reports, SOC 2 reports or supplier security architectures Hands-on experience supporting incident response or security operations Desirable accreditations: ISO 27001 Lead Auditor/Implementer, ISO 27005, CISSP, CISM or equivalent, and CompTIA Security+ or an equivalent ...

partner with AIOps vendors, IT Operations, infrastructure, platform engineering, SRE, service management, and application teams to reduce operational noise, improve service reliability, and accelerate incident response across a complex enterprise environment. Responsibilities Execute the enterprise AIOps strategy, operating model, and adoption plan across the organization. Build scalable observability … service management, and application teams to operationalize AIOps capabilities at scale. Establish governance, success metrics, and operating rhythms to measure improvements in alert quality, incident reduction, MTTD, MTTR, service health, and product adoption. Drive adoption of AIOps capabilities by aligning use cases, implementation priorities, and operational workflows with business ...

primarily remote role with occasional on-site visits to London. You will be working within a security operations function, supporting the monitoring, detection and response to security threats across the organisation's estate. You will bring solid hands-on experience across SIEM and log management tooling, working independently … following: Hands-on experience with Splunk in a SOC environment Cribl experience for log management and data pipeline optimisation Security monitoring, threat detection and incident response Working within a security operations centre at a mid-senior level SC clearance held or ability to pass Interested? Please apply below. ...

software applications and systems. \n - Provides operational support and leadership for production systems in a "you-build-it-you-run-it" culture, including incident response, post-incident learning, and continuous reliability improvements. \n - Leads evaluation sessions with external vendors, startups, and internal teams to drive outcomes-oriented ...

department from reactive troubleshooting to a proactive, data-driven engine, implementing professional Workforce Management (WFM) tools, industry-leading resolution times and sub-15-minute incident response protocols. Balancing "sales-through-service" commercial acumen with deep technical rigour, this leader ensures that our most complex global partnerships are supported … partners. Integration Success (IS): The technical support engine of the department, focused on integration health, proactive monitoring and alerting for technical issues, and rapid incident resolution for complex API and platform connections.\n Key Responsibilities \n 1. Account Specialisation & Commercial Acumen \n \n Value-Led Revenue Growth: Transform ...

including intake, investigation, tracking, documentation, and stakeholder engagement. Support data mapping, data retention, minimisation, international transfer, and vendor risk management activities. Assist with privacy incident and breach response activities, including fact gathering, remediation tracking, reporting, and stakeholder coordination. Monitor developments in privacy, emerging regulatory areas (including AI where … ePrivacy requirements, international data transfers, privacy-by-design principles, and accountability frameworks. Experience supporting privacy programme activities such as impact assessments, data mapping, DSARs, incident response, vendor reviews, training, and compliance documentation. The ability to interpret complex legal, regulatory, and technical requirements and translate them into practical business ...

modern engineering and traditional ITSM/ITIL practices Establish SLIs, SLOs, and Error Budgets Shape observability strategies using metrics, logs, and traces Design incident response models and post-incident learning loops Reduce toil through automation and engineering excellence Deliver SRE capability assessments and roadmaps … Looking For Extensive experience in SRE, cloud operations, or DevOps Proven consulting or advisory background Experience with AWS, Azure, or GCP Strong observability and incident management expertise Ability to obtain UK SC clearance Modis International Ltd acts as an employment agency for permanent recruitment and an employment business ...

modern engineering and traditional ITSM/ITIL practices Establish SLIs, SLOs, and Error Budgets Shape observability strategies using metrics, logs, and traces Design incident response models and post-incident learning loops Reduce toil through automation and engineering excellence Deliver SRE capability assessments and roadmaps … Looking For Extensive experience in SRE, cloud operations, or DevOps Proven consulting or advisory background Experience with AWS, Azure, or GCP Strong observability and incident management expertise Ability to obtain UK SC clearance Modis International Ltd acts as an employment agency for permanent recruitment and an employment business ...

NIST Cybersecurity Framework \n - NIST 800-53 \n - CIS Controls \n - SABSA \n - TOGAF \n \n Understanding of security operations concepts, incident response, and detection capabilities. \nKnowledge of application security principles, including secure coding practices and OWASP guidance.Experience with DevSecOps practices and security automation.Familiarity with container and Kubernetes ...

while contributing to our modern infrastructure strategy. What youll be doing As an Infrastructure Engineer, you will: Participate in a 24/7 major-incident on-call rota Develop, support, and enhance infrastructure across multiple office locations and cloud environments Design and implement standardised templates, configuration baselines, and self … third-party vendors to ensure the health and availability of hosted or outsourced services Collaborate with the Security Operations Centre on threat detection and incident response activities Take ownership of incidents and problems through to resolution or formal handover Conduct root-cause analysis to identify and address underlying ...

reviews, and independent assurance engagements, managing evidence collection, stakeholder responses, and remediation tracking Contribute to the ongoing development and enhancement of resilience, contingency, and incident response arrangements from a first-line GRC perspective Support strategic initiatives, transformation programmes, and special projects, while undertaking additional responsibilities as required ...

these specific risk responsibilities: \n Data Architecture \n Design, build and management of realtime, near realtime and batch data architectures that support threat detection, incident response and reporting through advanced analytics, machine learning and GenAI capabilities. \n Data Integration and Transformation \n Implement and manage the automated frameworks ...