26 to 50 of 64 Incident Response Jobs in Central London

Security Specialist to join the Infrastructure Engineering team of a leading international law firm. This is a hands-on role covering cybersecurity, infrastructure security, incident response, threat monitoring and vulnerability management, with responsibility for continually improving the firm's global security posture. Key Responsibilities Lead and support cyber … incident response and investigations. Identify and manage vulnerabilities, threats and security risks. Evaluate and implement security improvements and controls. Support business continuity and disaster recovery planning. Lead Cyber Essentials Plus activities. Contribute to infrastructure and security projects, including solution design. Provide third-line support for complex security ...

Cyber Security Consultant - Incident and Vulnerability Management Duration: 30/11/2026 Pay: up to £610 per day (umbrella) Location: Preston, London or Birmingham UK, Hybrid - 30% office 70% home CONTRACTOR MUST BE MOD SC CLEARED AND BE A SOLE UK NATIONAL Role Summary The Security Incident … transition to a multi-supplier (SIAM) model within a Defence environment. The role focuses on understanding, aligning and governing existing high-severity security incident management (S3/S4) and vulnerability management processes across suppliers. Ensuring a consistent, risk-based approach in line with client policy and regulatory requirements, supported ...

experienced Senior SOC Analyst to join a growing security operations team in London. This is a hands-on position for someone with strong incident detection, investigation and response experience. You will take the lead on complex security incidents, support the development of junior analysts and help improve … organisation’s overall detection and response capabilities. Key responsibilities Investigating and responding to complex security alerts and incidents Leading incident triage, containment and remediation activities Performing threat hunting and identifying suspicious behaviour across the environment Developing and improving SIEM rules, alerts and security use cases Analysing endpoint, network ...

security, cloud and data security risks, and third‐party/supply chain risk. Hands‐on or advisory experience across IAM/PAM, vulnerability management, incident response, SIEM, and business continuity. Cloud landing zone design and segmentation: able to limit blast radius from a security incident through architecture ...

trade flow, and post-trade issues. Lead the ‘follow the sun’ support model coordination, working closely with global teams in APAC and US. Drive incident management practices, trend identification, and post-mortem analysis. Collaborate with development teams to influence platform improvements based on support insights. Occasional weekend work will … with the resilience to handle high-pressures production incidents Desired Experience with Site Reliability Engineering (SRE) practices, including monitoring, incident response, and post-mortem analysis Proven experience applying AI or machine-learning models to optimise workflows, identify patterns, and drive intelligent automation solutions Hands-on experience with containerization ...

Cloud Hardening: Design secure baselines for Kubernetes and cloud-native resources. Vulnerability Management: Prioritize and remediate software supply chain risks from development to production. Incident Response: Scale detection and response solutions to triage alerts and stop malicious activity. Experience: 5 to 7+ years in cloud security engineering ...

Solid understanding of core cybersecurity principles and their application within enterprise IT and cloud environments, include security architecture, identity and access management, vulnerability management, incident response and technology resilience. Experience identifying and assessing technology and cyber-related risks within complex IT environments, with the ability to communicate technical ...

support remediation, and contribute to the continued development of Hachette's global security capabilities. Who we are looking for Good understanding of cybersecurity operations, incident response and IT infrastructure. Practical knowledge of endpoint detection and response technologies and security monitoring platforms. Experience with technologies such as CrowdStrike ...

modern engineering and traditional ITSM/ITIL practices Establish SLIs, SLOs, and Error Budgets Shape observability strategies using metrics, logs, and traces Design incident response models and post-incident learning loops Reduce toil through automation and engineering excellence Deliver SRE capability assessments and roadmaps … Looking For Extensive experience in SRE, cloud operations, or DevOps Proven consulting or advisory background Experience with AWS, Azure, or GCP Strong observability and incident management expertise Ability to obtain UK SC clearance Modis International Ltd acts as an employment agency for permanent recruitment and an employment business ...

Knowledge of security frameworks and standards including: - ISO 27001 - NIST Cybersecurity Framework - NIST 800-53 - CIS Controls - SABSA - TOGAF Understanding of security operations concepts, incident response, and detection capabilities. Knowledge of application security principles, including secure coding practices and OWASP guidance. Experience with DevSecOps practices and security automation. ...

Kubernetes-based environments. You will be at the intersection of security and engineering, developing scalable tooling, automating security controls, and enabling robust detection and response capabilities across our cloud infrastructure. In this role, you will require deep technical expertise in cloud environments, Kubernetes security, and platform automation. You will … work closely with Incident Response Engineers and platform teams to ensure that security is seamlessly integrated into our infrastructure and operational workflows. Your role will require participation in a rotating on-call schedule outside of core business hours and over the weekend to ensure security incidents ...

Relationships: CTTO - Direct line manager. Governance, infrastructure risk, and FinOps accountability. CISO (Head of Security) - Close working relationship. Security operations implementation, IAM policy, and incident escalation. Director of Platform Engineering - Coordinates on DevSecOps integration and CI/CD infrastructure requirements. • Head of Infrastructure & Cloud - Direct report. Hosting strategy, cloud … internal IT operations across a distributed estate - multiple sites or subsidiaries Commercial awareness: has owned cloud cost management and FinOps outcomes with measurable results Incident management and on-call leadership - has run major incident response at group level Strong vendor management: MSP relationships, colocation contracts, cloud provider ...

provisioning and deployment workflows (Terraform, GitHub Actions, GitOps) Package and deploy applications to customer environments Implement and optimise observability tooling (Prometheus, Grafana, Loki) Support incident response, monitoring, and backup/recovery planning Mentor project teams in DevSecOps practices and environment management Ensure cloud environments are secure, performant ...

path reviews. You will build and maintain the platforms necessary for developing and deploying proof-of-concept (PoC) exploits and validations, ensuring detection and response capabilities across cloud infrastructure. In this engineering-centric role, you will require deep technical expertise in cloud environments, Kubernetes security, and platform automation. … will work closely with Incident Response, Platform Engineering and Security Architects to ensure that security validation and defensive hardening are seamlessly integrated into infrastructure and operational workflows. Your role will require participation in a rotating on-call schedule outside of core business hours and over the weekend ...

Kubernetes-based environments. You will be at the intersection of security and engineering, developing scalable tooling, automating security controls, and enabling robust detection and response capabilities across our cloud infrastructure. In this role, you will require deep technical expertise in cloud environments, Kubernetes security, and platform automation. You will … work closely with Incident Response Engineers and platform teams to ensure that security is seamlessly integrated into our infrastructure and operational workflows. Your role will require participation in a rotating on-call schedule outside of core business hours and over the weekend to ensure security incidents ...

alerting, and dashboards Define and improve SLIs, SLOs, and reliability metrics Proactively identify and resolve performance, availability, and reliability issues Lead and contribute to incident response, troubleshooting, and root cause analysis Automate operational processes and eliminate repetitive manual tasks Work closely with software engineers to improve deployment processes … understanding of metrics, logging, tracing, alerting, and system health Experience troubleshooting complex production environments Understanding of SLIs, SLOs, SLAs, and error budgets Experience with incident management and root cause analysis Good understanding of cloud networking, security, and infrastructure fundamentals Strong scripting/automation skills A strong understanding of reliability ...

across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem. Handle L2-level incidents leveraging Microsoft Sentinel and Microsoft Defender tools. Support incident response, triage, threat modelling, and vulnerability remediation within Azure-hosted environments. Create, run, and troubleshoot Azure Logic Apps, playbooks, and Sentinel automation components. … Sentinel (architecture, deployment, analytics rules, workbooks, playbooks); Microsoft Defender for Endpoint and Defender for Cloud; SIEM/SOC operations; Azure Logic Apps; vulnerability remediation; incident response. Threat Hunting & Detection Hands‐on experience using KQL, Microsoft Defender XDR, and threat intelligence sources to hunt threats and support investigations. Cyber Defence ...

managing cyber risks, defining appropriate remedial actions. Overseeing client certification audits, e.g. ISO 27001, CE+ and SOC2. Supporting our Security Operations Centre during incident response, ensuring effective threat mitigation. Raising cyber security awareness through our entertaining bulletin, blogs, phishing simulations and tabletop exercises. Scoping, planning, and coordinating penetration … tests to improve client security. Co-ordinating the response to third-party due diligence questionnaires and assessing new vendors. Ensuring you continue to make yourself marketable and credible to clients and prospects by maintaining professional accreditations. A Manager would be expected to have 3-4 professional accreditations such ...

technology services across a multi-site organisation. The chosen Candidate will be responsible for TechBar and desktop support, hardware and software asset management, major incident response and the performance of third-party technology support providers. This is a key operational leadership role, combining service delivery, supplier management … standards, monitoring performance and leading regular service reviews. Own hardware and software asset management, including lifecycle, stock, deployment and licence compliance. Lead the technology response to P1 and P2 major incidents, coordinating resources, communications and resolution. Drive post-incident reviews, root-cause analysis and continuous improvement. ...

this engineering-centric role, you will require deep technical expertise in cloud environments, Kubernetes security, and platform automation. You will work closely with Incident Response, Platform Engineering and Security Architects to ensure that security validation and defensive hardening are seamlessly integrated into infrastructure and operational workflows. Your role ...

risk, governance, and control teams to support audit evidence collection, reporting, and policy adherenceSupport runtime security tooling for production risk visibility and contribute to incident response activities including triage, investigation, and runbook development Leverages enterprise-authorized AI coding assist tools within the work environment to improve code quality ...

level stakeholders. Monitoring security programmes, audit actions and compliance activities, ensuring key actions are tracked through to completion. Supporting security investigations, threat monitoring and incident response activity when required. Researching emerging cyber threats, industry trends and best practice to help inform continuous improvement and strengthen organisational resilience. Working ...

qualifications: Experience with Infrastructure as Code (Terraform) and CI/CD pipelines, and in programming languages (Python, Go) for automation. Experience with SRE principles, incident response protocols, lean/agile methodologies to manage delivery flow and eliminate waste. Experience guiding Global Systems Integrators (GSIs) or partners through technical ...

agentic runtime, auth, data retrieval, eval tooling) Experience operating production distributed systems on AWS/Azure, with a strong grasp of reliability, observability, and incident response at scale Excellent communication skills, with the ability to build consensus and translate technical topics for engineers and executives alike Strong sense ...

controls, elimination of shared/admin accounts), backup and restore strategy, retention and archival, replication, monitoring (Redgate Monitor and equivalents), licensing, performance triage, and incident response. Acting as design authority for the wider data team coaching the SQL Developers on Power BI authorship, dimensional modelling, query optimisation and report ...