25 of 25 Incident Response Jobs in the East of England

Overview: Interested in defending a global tech company from the latest cyber threats? Arm is seeking a passionate, experienced Senior Manager of Cybersecurity Incident Response to join our growing Cyber Defence Operations (CDO) team, protecting Arm against current and future cyber‐attacks! Situated within Arm’s Enterprise Security … function, this role will lead Arm’s global incident response team across the US, UK and India, including acting as a senior technical and operational leader for major cyber incidents. CDO enables Arm to be successful, delivering scalable and defendable security services that not only provide ...

Limited in Cambridge is seeking a Senior Manager of Cybersecurity Incident Response to lead their global incident response team. You will oversee major cyber incidents, ensuring effective response and coordination across regions. The role requires strong leadership in a high-stakes environment, with responsibilities including … development of incident response strategies and team growth. Ideal candidates have an in-depth understanding of the cybersecurity landscape and a background in technical incident response. #J-18808-Ljbffr ...

tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security event reporting, and content maintenance (tuning). What we are looking for Key Responsibilities: Serves as a senior member … optimization of enterprise security platforms, overseeing lifecycle management including break-fix, patching, version upgrades, and integration with broader security ecosystems. Directs complex security incident response efforts across multiple vectorsendpoint protection, EDR, malware analysis, network and computer forensicsensuring rapid containment and root cause analysis. Designs and executes advanced vulnerability ...

network estate (including Cisco Meraki). The role is hands-on and operational, partnering with IT teams to implement security controls, support monitoring and incident response through Sophos MDR, and improve cyber resilience by supporting Disaster Recovery (DR) testing and Business Continuity (BC) readiness. Key Responsibilities Cloud Security … ensure changes follow change control. Enable and review network security logging/alerting (e.g., syslog/SIEM integrations where applicable). Monitoring, Detection & Incident Response (Sophos MDR) Act as the internal technical point of contact for Sophos MDR and ensure smooth collaboration with MDR analysts. Maintain coverage ...

Lead SOC Analyst to help protect multiple critical client environments. The role offers real variety and continued hands-on involvement, combining leadership with incident response, threat detection, and operational delivery. We will also consider experienced SOC professionals who are ready to step into a leadership position while remaining …/7 SOC, acting as the primary escalation point for complex incidents, supporting operational delivery, and helping to mature our detection and response capabilities across multiple clients. This role is site-based in Hemel Hempstead and follows a shift pattern of two day shifts (6am6pm), two night shifts (6pm6am ...

cybersecurity function. We're looking for a hands-on cybersecurity leader with expertise in: Cybersecurity Strategy & Risk Management Microsoft 365, Entra ID & Azure Security Incident Response & Vulnerability Management Microsoft Defender, Intune & Conditional Access ISO27001, NIST & Security Governance Key Responsibilities Define and execute the organisation's cybersecurity strategy, roadmap … continuous improvement of key security controls including MFA, Conditional Access, privileged access management, endpoint protection, vulnerability management, encryption, DLP, logging, and monitoring. Lead cyber incident response planning, testing, and execution, including playbooks, tabletop exercises, escalation processes, and post-incident reviews. Manage relationships with external cybersecurity providers including ...

cybersecurity function. We're looking for a hands-on cybersecurity leader with expertise in: Cybersecurity Strategy & Risk Management Microsoft 365, Entra ID & Azure Security Incident Response & Vulnerability Management Microsoft Defender, Intune & Conditional Access ISO27001, NIST & Security Governance Key Responsibilities Define and execute the organisation's cybersecurity strategy, roadmap … continuous improvement of key security controls including MFA, Conditional Access, privileged access management, endpoint protection, vulnerability management, encryption, DLP, logging, and monitoring. Lead cyber incident response planning, testing, and execution, including playbooks, tabletop exercises, escalation processes, and post-incident reviews. Manage relationships with external cybersecurity providers including ...

opportunity for a Senior Cyber Security Analyst (12 month contract) within Marshall.The focus of this technical role is on threat prevention, detection and response for Marshall, including the configuration and monitoring of a security information and event management (SIEM) system, operating next generation antivirus, intrusion detection/prevention systems … Marshall protection and detection capabilities as risks evolve over time.Responsibilities include:Managing set checklistsProblem management through to handover or resolutionThreat identification and classificationIncident response leadReport writingStakeholder managementContinuous improvementJunior SOC staff mentoringTasks:Helping to maintain and monitor the effectiveness of security measures and controlsConduct and help coordinate, routine security event ...

/CD pipeline development and maintenance Application deployment and release management Developer tooling administration (GitLab, Packagist, NPM, Dependabot) Dependency management and automated security updates Incident Management & Observability: Assist with the diagnosis and assessment of technical issues On-call engineering and incident response Monitoring, alerting, and error tracking … OpenSIPS FreeSWITCH Essential experience Required: Experience with CI/CD pipelines and deployment workflows Hands-on experience with cloud infrastructure Application monitoring, alerting, and incident response (any major tooling) Familiarity with load balancing and message queue technologies Maintaining and contributing to shared code libraries and internal tooling Investigating ...

documentation and support the delivery of Group policy and frameworks To advise and support the SOC and Vulnerability Management teams on flow management policy, incident response plans and playbooks Your skillset may include: Background in SOC Leadership, Cyber Security governance and assurance, Information Security Management, Defence or National … operating models Knowledge of Vulnerability management principles Risk management and risk treatment process Audit preparation and evidence gathering ISO27001/CE+ Awareness of Incident response processes Security Policy development and implementation Audit preparation and evidence gathering Stakeholder management Security awareness of modern cyber threats and defensive practices JSPs ...

documentation and support the delivery of Group policy and frameworks To advise and support the SOC and Vulnerability Management teams on flow management policy, incident response plans and playbooks Work in collaboration with CSC DEx in other Natcos (International Group Companies France, Italy, Germany, Spain etc) Skillset/… functions and operating models. Knowledge of Vulnerability management principles Risk management and risk treatment process Audit preparation and evidence gathering Awareness of Incident response processes. Security Policy development and implementation Audit preparation and evidence gathering Stakeholder management Security awareness of modern cyber threats and defensive practices JSPs ...

strengthen the security posture of critical systems. This is a hands-on role for a LogRhythm specialist with strong experience in security monitoring, incident response, and deep-dive analysis within secure environments. What you’ll be doing: Monitoring and analysing security events using LogRhythm Investigating and responding … alerts and incidents Producing detailed incident reports and root cause analysis Tuning and optimising detection rules and use cases Supporting LogRhythm administration (2nd-line level) Mentoring junior analysts and improving SOC processes What we’re looking for: Strong LogRhythm experience (Client & Web Console) Proven SOC/incident response ...

organisation maintains a robust, resilient, and compliant security posture. Key Responsibilities Lead and manage the delivery of Security Operations services, ensuring effective monitoring, detection, response, and remediation of cyber threats. Provide oversight and governance of network infrastructure security, availability, resilience, and performance. Lead, develop, and mentor a multidisciplinary team … aligned to recognised frameworks including ISO 27001, NIST Cybersecurity Framework, CIS Controls, and other relevant standards. Manage security incidents, major cyber events, and crisis response activities. Build strong relationships with internal stakeholders, ensuring security requirements support business objectives. Oversee third-party suppliers, SOC providers, and security partners, ensuring service ...

Role Mission: Client-facing Platform/SRE consultant designing, deploying, and supporting production infrastructure. Day-to-Day: Incident response, system reliability, balancing technical tradeoffs with client deadlines, and eventually mentoring others. Must-Haves Kubernetes: Deep, hands-on production experience (troubleshooting, networking, storage). IaC: Strict "everything-as-code ...

through automation, building practical tooling, and enabling teams to use storage services effectively at scale.Working in a distributed, international environment, you'll contribute to incident management, root cause analysis, and the ongoing stability and performance of critical systems supporting advanced technology development.ResponsibilitiesEnsure the reliability, availability, and performance of large … scale storage platformsSupport incident response, troubleshooting, and root cause analysisApply SRE practices including SLOs and SLIs where appropriateBuild and manage infrastructure using Terraform and AnsibleDevelop automation and Python-based tooling to improve operationsLeverage AI-based tools for monitoring, anomaly detection, and analysisCreate lightweight agent-based workflows to support ...

ISO27001 and security compliance frameworks Risk management and risk treatment processes Vulnerability management principles Audit preparation and evidence gathering Security policies, procedures and governance Incident response processes Stakeholder management and leadership Delivering security improvements within complex organisations For a confidential discussion about this opportunity, please apply today ...

ISO27001 and security compliance frameworks Risk management and risk treatment processes Vulnerability management principles Audit preparation and evidence gathering Security policies, procedures and governance Incident response processes Stakeholder management and leadership Delivering security improvements within complex organisations For a confidential discussion about this opportunity, please apply today ...

leading cyber security, information security or technology risk functions within a large and complex organisation. * Deep understanding of cyber defence, security operations, resilience planning, incident response and recovery frameworks. * Experience delivering security strategies across cloud, infrastructure, data and enterprise application environments. * Strong knowledge of recognised security and governance ...

threats from false positives and applying appropriate containment and mitigation. Act as the escalation point for IT Support on security-related issues. Lead cybersecurity incident investigations, including malware analysis and digital forensics, and produce detailed reports and recommendations. Support and participate in incident response activities and exercises … strengthen readiness. Provide out-of-hours support where reasonable, including response to escalations, system downtime, and security incidents. Identify, assess, and remediate vulnerabilities through proactive assessments and scheduled vulnerability scans. Review and maintain vulnerability and risk records, ensuring timely remediation. Perform routine security checks to maintain system integrity ...

Network Security Engineer, where you will play a key role in safeguarding our organisations' network infrastructure as part of the 24x7 Internal Security Response (ISR) team. When not involved in incident response and triage activity with the SOC team, you will be responsible for designing, implementing ...

play a key role in protecting their systems, infrastructure, and data. This is a hands-on position where you'll contribute to threat detection, incident response, and continuous security improvement across the business. What You'll Be Doing Monitoring and analysing security events (SIEM, endpoints, networks) Investigating incidents ...

security alerts and logs, using security tools such as SIEM systems. · Help to identify and respond to security incidents, in line with our incident response process. · Conduct routine vulnerability scans and support in remediation activities. · Support with user awareness initiatives including phishing simulations and cyber hygiene campaigns. · Assist ...

security alerts and logs, using security tools such as SIEM systems. Help to identify and respond to security incidents, in line with our incident response process. Conduct routine vulnerability scans and support in remediation activities. Support with user awareness initiatives including phishing simulations and cyber hygiene campaigns. Assist ...

your application to our client in conjunction with this vacancy only. KEY SKILLS SOC Shift Lead, Security Operations Centre, Microsoft Sentinel, Splunk, MITRE ATT, Incident Response, DV Cleared ...

your application to our client in conjunction with this vacancy only. KEY SKILLS SOC Shift Lead, Security Operations Centre, Microsoft Sentinel, Splunk, MITRE ATT, Incident Response, DV Cleared ...