101 to 125 of 1,467 Incident Response Jobs in England

technical role. You'll own the architecture and engineering of Microsoft Sentinel and our wider security monitoring estate, lead complex investigations and technical incident response, and turn real-world adversary behaviour into effective detection and response. You'll work across Cyber Defence Operations, Technology and our Managed Security … across requirements, design, testing, deployment, tuning, performance assessment and retirement, supported by version control, peer review and controlled release practices. Build better detection and response You'll lead the engineering discipline behind our detection capability, continually improving how we identify, investigate and respond to threats. Lead the development ...

technical role. You'll own the architecture and engineering of Microsoft Sentinel and our wider security monitoring estate, lead complex investigations and technical incident response, and turn real-world adversary behaviour into effective detection and response. You'll work across Cyber Defence Operations, Technology and our Managed Security … across requirements, design, testing, deployment, tuning, performance assessment and retirement, supported by version control, peer review and controlled release practices. Build better detection and response You'll lead the engineering discipline behind our detection capability, continually improving how we identify, investigate and respond to threats. Lead the development ...

reliability, resilience and operational performance of large-scale platforms within a regulated environment. This role combines hands‐on engineering with technical leadership, production incident management, automation and reliability engineering. You will drive improvements across platform operations, embed reliability throughout the software development lifecycle and apply agentic AI to incident … operations and security teams to embed reliability into the software development lifecycle. Define and track KPIs for reliability, performance and operational efficiency. Lead production incident management, including detection, triage, escalation and resolution, working with development and support teams. Manage major incident response for critical outages, ensuring rapid ...

Senior Security Incident Manager Location London Business Area Legal, Compliance, and Risk Ref # 10054594 Description & Requirements Senior Security Incident Manager EMEA - London OR Dublin We Protect Bloomberg. The Bloomberg Security Incident Management (Sec IM) team provides consistent coordination and management of information security incidents and events … ensuring responses are efficient and comprehensive. The team also plays a key role in identifying methods to improve upon similar scenarios. Key partners include incident responders, threat intelligence, legal, vulnerability analysts, security program leads, and many other teams within the company. What is the role? A successful candidate will ...

Security Engineering Manager - Incident Response, AWS CloudOps Job ID: 10581501 | AWS EMEA SARL (UK Branch) We are looking for an experienced security leader to join the CloudOps team. As a security leader, you will own building and managing a team of incident managers and technical leaders, fostering … mitigate risks. We're looking for a leader that's highly passionate about the potential of cloud computing and building a high performing incident management team, working closely with our incident responders. Ideally you have a track record of delivering high quality technology products and services ...

National Energy System Operator Limited (NESO) is seeking an Incident Response Specialist to lead incident handling, triage high-priority events, and drive improvements in security response across the organization. You will develop incident response plans, coach colleagues, and liaise with senior leadership and external ...

Protect Bloomberg. The Bloomberg Security Incident Management (Sec IM) team provides consistent coordination and management of information security incidents and events across Bloomberg's diverse lines of business and vast global network. What is the team? Sec IM works closely with teams across Bloomberg, coordinating, commanding, and documenting responses … ensuring responses are efficient and comprehensive. The team also plays a key role in identifying methods to improve upon similar scenarios. Key partners include incident responders, threat intelligence, legal, vulnerability analysts, security program leads, and many other teams within the company. What is the role? A successful candidate will ...

McGregor Boyall is seeking a Senior Manager of Cybersecurity Incident Response to lead a global incident response team across the US, UK and India. The role involves acting as a senior technical and operational leader for major cyber incidents and coordinating with stakeholders and partners. … ideal candidate has progression from hands-on response to leadership, with strong incident command, communications, and strategic capabilities, in a dynamic enterprise environment. #J-18808-Ljbffr ...

Role This hands-on position sits within a cyber advisory practice, focusing on reactive digital forensics and incident response. Day to day, the role involves managing medium to large incident response cases, supporting clients in building internal IR capabilities, contributing to runbooks and playbooks, and developing internal … tooling, processes, and team training when not engaged on active cases. Skills & Experience Candidates require a strong technical background in digital forensics and incident response, with proven incident management experience. The role demands eligibility for SC or DV security clearance. Opportunities exist to obtain recognised security certifications ...

Response Engineer – Cloudflare Managed Defense Center (CMDC) Cloudflare ·United States, London, United Kingdom Hybrid Full-time Not specified Security Job Description About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers … responsible for identifying, analyzing, and responding to threats targeting Cloudflare and its customers. INTERDICT encompasses three main sub-functions: PhishGuard: Email Managed Detection and Response (MDR) service. Cloudflare Managed Defense (CMD, Formerly SOCaaS): 24/7 monitoring, detection, and mitigation of security events across Cloudflare products. Detection Engineering: Develops ...

systems. Improve developer experience through automation, self-serve tooling and infrastructure-as-code practices that increase engineering velocity. Own and evolve our observability, incident response and reliability practices to minimise downtime and improve system performance. Partner closely with product and engineering teams to support new services, migrations … distributed systems fundamentals. Experience improving CI/CD pipelines and deployment automation in fast-moving engineering teams. Comfortable debugging production issues and participating in incident response in high-availability environments. Clear communication skills and the ability to work closely with software engineers across multiple teams. You get excited ...

financial services organisations) Oversee third‐party and supply chain security risk management. Lead audit engagements and regulatory inspections related to cybersecurity. 3. Security Operations & Incident Response Oversee security operations including SOC, threat detection, and vulnerability management. Develop and maintain incident response and crisis management plans. Lead … response to major security incidents and coordinate with regulators and law enforcement where necessary. Ensure business continuity and disaster recovery capabilities are robust and tested. 4. Architecture & Engineering Oversight Provide security architecture oversight for cloud, on‐premises, and hybrid environments. Oversee identity and access management (IAM) and zero‐trust ...

busy Security Operations Centre while remaining hands-on with technical investigations. You will act as the senior escalation point during your shift, leading incident response, mentoring analysts and ensuring high standards across investigations. You will also: Lead Major Incident investigations and technical response activities Analyse advanced … Lead Strong experience leading complex cyber security investigations Commercial experience with Microsoft Sentinel and Splunk Enterprise Security Excellent understanding of MITRE ATT and CK, incident response and threat-informed defence Strong networking knowledge including TCP/IP, DNS, HTTP/S, SMTP, LDAP and VPN technologies Experience analysing ...

# Digital Forensics & Incident Response Analyst*A.P. Moller - Maersk***Maidenhead, England**Hybrid · Mid · Full-time### The RoleThe analyst conducts digital forensic investigations across Windows, Linux, cloud, and operational technology environments, supporting the full incident response lifecycle from triage through to post-incident review. ...

infrastructure, identity platforms, cloud services, and business systems. Configure, maintain, and optimise security technologies to safeguard hybrid environments, enabling proactive threat detection and resilient incident response through close collaboration with infrastructure, operations, and cloud teams. Coordinate vulnerability management activities across endpoints, servers, cloud services, and network infrastructure, including … high-risk vulnerabilities Contribute to the evolution of automated security operations and threat detection workflows, using scripting and orchestration tools to enhance efficiency and response capabilities over time, in collaboration with infrastructure and operations teams. Maintain and enforce information security policies, procedures, and standards in alignment with regulatory frameworks ...

performance of a Security Operations team across the UK and Australia, creating an environment of continuous learning, clear ownership and psychological safety Evolve incident response: Develop our incident response processes, especially around AI, maintain playbooks and standard operating procedures, and run exercises that build team confidence … Legal, Compliance and Privacy What you’ll bring Ideally, you’ll have: Experience managing and mentoring engineers and/or operations specialists Expertise in incident response, with hands‐on experience leading major incidents Experience in threat intelligence and hunting, proactively seeking threats in complex, cloud‐native environments ...

opportunity to rapidly accelerate your skills? Do you crave new and innovative work that actually matters to your customer? Do you have an Incident Response or Information Security background that you’re not fully utilizing? Are you capable of leading teams and interacting well with customers … learn from and mentor on a daily basis? What You'll Do: Conduct monitoring and perform in-depth analysis of security alerts. Exercise incident handling processes across Windows, Mac, and Linux platforms. Perform malware analysis. Perform remote remediation of malware or malicious activity. Develop and improve processes for incident ...

timely and proactive escalation of potential events/items of interest. The role will include access control, application and development, risk management, operational security, incident response, business continuity, operational and physical security of systems, as well as ongoing user training and reporting requirements. Primary responsibilities include: Monitor, investigate … with Detection and Automation team to support development of detection alerts, security automation and recommendations for tuning of rules to reduce false positives Support incident investigation, containment, eradication, and recovery activities while maintaining accurate documentation, and contributing to the continuous improvement of detection capabilities, playbooks, and operational processes Respond ...

lead a team of highly capable cyber threat analysts protecting Northrop Grumman UK and EMEA operations, while remaining directly involved in threat hunting, incident response, digital forensics and cyber defence activities. Working as part of a global cybersecurity organisation, you will collaborate closely with colleagues across … direction, coaching and day-to-day operational oversight. Manage security operations across the EMEA region, ensuring effective execution of cyber monitoring, triage, investigation and response activities. Serve as Incident Response Lead for major cyber security events, coordinating technical investigations, containment and remediation activities. Lead advanced threat hunting ...

forefront of cyber security, using industry-leading technologies to protect and support our clients. Alongside our SOC capability, we have cutting-edge incident response teams delivering rapid cyber breach investigations for clients through insurance panels and direct engagements, supporting organisations at their most critical moments.We invest heavily … cyber teams.We’re seeking an experienced Network Engineer to join our Cyber Defence Centre. This is a hands-on technical role that spans live incident response, security assessment and hardening, and the design and delivery of managed security solutions in client environments. You will ...

breadth. One day you’ll be defining infrastructure-as-code patterns or improving CI/CD pipelines; the next you’ll be contributing to incident response, helping teams adopt modern delivery practices, or building the kind of platform automation that removes toil for everyone around you. What … knowledge. Observability & Reliability Operate production workloads with an SRE mindset: measure reliability, define SLOs and reduce toil through automation. Contribute to on-call readiness, incident response and root cause analysis. Apply security best practices for Kubernetes (RBAC, network policies, secrets management) and support audit and compliance requirements. What ...

Senior Cyber Detection and Response Engineer (London, UK) Summary of Position As a critical technology provider to around 100 of the world's leading financial institutions, Pirum’s security posture is a commercial asset as much as a risk management function. Our customers conduct rigorous third-party security assessments … protect our systems and data directly affects our ability to win and retain business. We are looking for a Senior Detection and Response Engineer to lead Pirum's detection and response capability, enabling us to detect, investigate and contain threats at machine speed across our AWS, on-premises ...

your unique needs. We help organisations improve processes such as threat management by building an identity management programme, and establishing prevention, detection and response capabilities to cyber-attacks. The SOC Team Lead drives performance and operational excellence acrossShared Service’s Cyber Services function. Acting as both a technical escalation … point and line manager, they support the team in threat analysis, incident response, and security assurance activities. They foster a proactive culture of cyber hygiene and continuous improvement while collaborating across departments to strengthenShared Service's security posture. The Team Leader also deputises for theService DeskManager during high ...

establish practical controls for Microsoft 365 Copilot, AI agents, custom AI applications and related technologies. Provide senior technical oversight across security monitoring, detection engineering, incident response and recovery capability. Lead or support the response to complex or high-severity security incidents, working with internal teams, external … security, API security and secure software development. Experience of security architecture review, threat modelling, technical standards, reference architecture and control design. Practical experience across incident response, detection engineering, threat hunting, vulnerability or exposure management and security automation. Ability to automate security and assurance processes using tools such ...

designing and provisioning cloud infrastructure, building internal developer platforms and self-service tooling, running CI/CD automation, defining and monitoring SLOs and leading incident response, or engineering resilient infrastructure at scale.You will be using variety of technologies such as Docker, Terraform, Kubernetes and have exposure to public … Code• Define and implement what good observability practices look like for clients, track reliability metrics (SLIs/SLOs/error budgets) and participate in incident response where relevant to your specialism• Build and maintain internal developer platforms, golden paths, or self-service tooling that improve developer experience• Work ...