176 to 200 of 494 Incident Response Jobs in England

including IAM, SIEM, and data classification Anticipate emerging threats, leverage AI/ML for predictive security, and set the technology vision Lead the Security Incident Response Programme Governance, risk, and compliance (GRC) Define and own the GRC programme, including the ISMS, policy framework, risk registers, and audit readiness ...

pipelines, GitOps workflows, and modern cloud deployment practices, with a strong focus on automation and operational efficiency. Strong knowledge of observability, monitoring, alerting, incident response, and troubleshooting complex infrastructure, networking, security, and deployment issues. Desired Technical Skills Experience supporting machine learning workloads or MLOps practices in cloud environments. ...

Managed Service Provider (MSP) to recruit a Security Analyst based in Reading. The successful candidate will play a key role in security operations, incident response, threat detection and automation, helping to protect customer environments while continuously improving security platforms and processes. Key Responsibilities Manage the full security incident ...

NIS2, GDPR)Security architecture and secure‐by‐design principles in cloud and hybrid environmentsIdentity and access management, security operations or cyber controls engineeringCyber resilience, incident response and operational securityIntegration of security into DevOps and cloud transformationUnderstanding of emerging risks and controls associated with AI and agentic systems, including … secure AI adoption, model risk, data protection, and the application of AI within cybersecurity (e.g. threat detection, automation and response)Consulting and commercial skills:Strong stakeholder engagement skills, with the ability to influence at C‐suite and senior leadership levelExcellent communication and storytelling capability, translating complex cyber topics into ...

growing cyber security team based in Altrincham, South Manchester. You will play a key role in protecting critical systems, improving security posture, and supporting incident response across a modern hybrid IT environment. This is a hands-on technical role where youll work closely with infrastructure, cloud … respond to security alerts across SIEM and EDR platforms Manage and tune security tools including firewalls, WAFs, and endpoint protection Investigate and support response to security incidents Perform vulnerability assessments and remediation tracking Support implementation of security controls across cloud and on-prem environments Contribute to security policies, standards ...

through to a fix. You'll act as the technical authority for the operational team: taking ownership of complex incident resolution and root cause analysis, leading platform engineering and hardware lifecycle work, and mentoring Infrastructure Engineers as they develop their own skills. You're expected to be comfortable making … high-stakes calls under pressure during major incidents, and to drive resolution when nobody else can. Day to day, that means leading the technical response to P1 and P2 major incidents, managing Dell VxRail and VMware VCF platform lifecycle operations, overseeing Veeam backup architecture and Azure DR strategy ...

Relationships CTTO — Direct line manager. Governance, infrastructure risk, and FinOps accountability. CISO (Head of Security) — Close working relationship. Security operations implementation, IAM policy, and incident escalation. Director of Platform Engineering — Coordinates on DevSecOps integration and CI/CD infrastructure requirements. Head of Infrastructure & Cloud — Direct report. Hosting strategy, cloud … internal IT operations across a distributed estate — multiple sites or subsidiaries Commercial awareness: has owned cloud cost management and FinOps outcomes with measurable results Incident management and on-call leadership — has run major incident response at group level Strong vendor management: MSP relationships, colocation contracts, cloud provider ...

standards. Reviewing and enhancing information security policies, procedures and controls. Responding to potential security incidents in collaboration with the wider IT team. Assisting with incident response, investigation, containment and recovery activities. Developing and improving cyber security monitoring, detection and alerting capabilities. Monitoring internal and external threat landscapes … tools and controls. Good understanding of ISO27001 and/or other recognised Information Security frameworks. Experience in risk assessment, threat detection, vulnerability management and incident response. Strong analytical and problem-solving skills with the ability to perform under pressure. Excellent communication skills with the ability to explain technical concepts ...

firewalls, Nessus, and vulnerability remediation. Experience working with SOC teams and supplier security assessments. Familiarity with CAF, CE+, NIST, CIS Controls, ISO 27001. Strong incident response, analytical, and problem solving skills. Knowledge of AI/ML risks and AI governance. Experience with phishing campaigns, penetration testing, and remediation. ...

insurance sectors. Broad knowledge of security domains: network security, endpoint protection, secure development lifecycle, identity and access management, cloud security (AWS/Azure), incident response, and governance. Familiarity with regulatory requirements and industry standards (e.g., NIST, CIS, BMA, PRA, APRA, MAS). Strong analytical and problem‐solving skills. ...

experience assessing security risks, processes, controls, and vulnerabilities to determine appropriate mitigation actions. Technical Security Expertise. Strong understanding of defensive cyber security principles, monitoring, incident response, vulnerability management, and security best practice. Governance and Accountability. Experience of owning security outcomes and ensuring compliance with organisational policies, standards ...

vulnerability management — focused on outcomes and automation • Data Loss Prevention and Identity Lifecycle controls (JML) in Entra ID and key SaaS platforms • Supporting incident response and triage of alerts requiring business context • Influencing engineering, product, and senior stakeholders on security direction What We're Looking ...

supplier security assessments. Familiarity with CAF, CE+, NIST, CIS Controls, ISO 27001. Understanding of healthcare data protection, ideally NHS/UK standards. Strong incident response, analytical, and problemsolving skills. Knowledge of AI/ML risks and AI governance. Experience with phishing campaigns, penetration testing, and remediation. Excellent communication ...

aligned to the long‐term evolution of the MSSP platform. Key Role Responsibilities LRQA is an award‐winning provider of Cyber Security, Assurance, Incident Response and Managed Security Services provider to organisations across the world. Due to continued evolution of our services we are seeking a Principal Security ...

activity, and offer recommendations for continuous improvement of our security controls and processes. About you You will have extensive experience of security monitoring and incident response, along with experience working with SIEM platforms, endpoint detection and response (EDR) tools, and email security solutions. You'll be proficient ...

experience in cloud security, automation and security operations . Working within a collaborative cyber team, you'll help secure cloud environments, enhance detection and response capabilities, and drive automation across security processes. We're particularly interested in individuals who enjoy solving problems through automation, have experience integrating tools … security solutions, this role offers the opportunity to make a real impact. Key Responsibilities Design and implement security automation workflows to improve efficiency and response times. Develop scripts and integrations using Python, PowerShell and APIs. Manage and optimise security tooling including SIEM, EDR/XDR and monitoring platforms. Support ...

Security Analyst, youll act as a senior technical escalation point within the SOC, supporting the wider analyst team while leading the investigation and response to sophisticated cyber threats and incidents. Youll work closely with internal security teams, customers, and stakeholders to continuously evolve detection capabilities, improve operational maturity … work, candidates must have current SC clearance and be eligible to obtain UK Government DV clearance. What Youll Be Doing Lead the investigation and response to complex cyber security incidents across high-security customer environments Act as a senior escalation point for Tier 1 and Tier 2 analysts during ...

/CD pipelines with blue-green, canary, and rolling deployments, including automated, zero-downtime database releases. Implement comprehensive monitoring, logging, alerting, and automated incident workflows with clear reporting. Strengthen cloud security posture (IAM, secrets, vulnerability scanning) and embed DevSecOps practices while maintaining PCI-DSS compliance. Drive reliability through SLIs …/SLOs, incident response, disaster recovery testing, and capacity planning for peak events. Optimise performance and cost across hybrid environments through right-sizing, forecasting, and resource governance. Apply AI-driven tooling for anomaly detection, operational optimisation, and compliance automation. Collaborate cross-functionally, maintain documentation, and promote DevOps best ...

exposure to, vulnerability management processes, including vulnerability assessment, remediation tracking, risk prioritisation, and security testing activities. Understanding of security operations concepts, including security monitoring, incident response, SIEM platforms, managed detection and response (MDR), and threat investigation practices. Knowledge of cloud and hybrid environments (preferably GCP), alongside ...

critical milestones. Engage in solution architecture and pre‐sales deal shaping. Develop and maintain long‐term strategic client relationships. Design, implement, and integrate security, incident, and event management solutions into Security Operations, with a particular interest in Azure Sentinel. Understand threat modelling, risk, and how to mitigate risks concerning … applications from internal and external threat actors. Have a deep understanding of incident response processes and techniques for cyber recovery. Understand security operations centers, their functions, and roles. Have a good understanding of the Microsoft platforms across Windows, Microsoft 365, and Azure. Understand techniques and approaches used ...

growing cyber security team based in South Manchester. You will play a key role in protecting critical systems, improving security posture, and supporting incident response across a modern hybrid IT environment. This is a hands-on technical role where youll work closely with infrastructure, cloud, and SOC teams … respond to security alerts across SIEM and EDR platforms Manage and tune security tools including firewalls, WAFs, and endpoint protection Investigate and support response to security incidents Perform vulnerability assessments and remediation tracking Support implementation of security controls across cloud and on-prem environments Contribute to security policies, standards ...

Defence Ltd (CND). This is a key hire within our MSSP Security Operations Centre, offering the opportunity to take a lead role in incident analysis, client engagement, and mentoring junior analysts, while shaping how the SOC continues to evolve. The Role As a Senior Cyber Security Analyst … contributing to reporting and continuous improvement within the SOC. Key Responsibilities Monitor, triage and investigate security alerts across multiple platforms Conduct in-depth incident analysis and support ongoing client investigations Act as deputy to the SOC Team Lead when required Review and assess escalated Tier 2 alerts for urgency ...

organisation maintains a robust, resilient, and compliant security posture. Key Responsibilities Lead and manage the delivery of Security Operations services, ensuring effective monitoring, detection, response, and remediation of cyber threats. Provide oversight and governance of network infrastructure security, availability, resilience, and performance. Lead, develop, and mentor a multidisciplinary team … aligned to recognised frameworks including ISO 27001, NIST Cybersecurity Framework, CIS Controls, and other relevant standards. Manage security incidents, major cyber events, and crisis response activities. Build strong relationships with internal stakeholders, ensuring security requirements support business objectives. Oversee third-party suppliers, SOC providers, and security partners, ensuring service ...

governance. Automation & CI/CD: Develop, maintain, and continuously improve automated tooling, configuration management, and CI/CD pipelines for building and deploying systems. Incident Management: Maintain 24x7 availability of production systems. Lead incident response, conduct post-mortem activities, identify root causes, and execute plans to permanently ...

event-driven workflows. Automation & Toil Reduction at Scale Lead the design of automation frameworks that eliminate manual operational tasks across multiple domains. Translate incident learnings and operational inefficiencies into scalable automation and preventative controls. Drive adoption of automation-first principles, reducing dependency on human-driven processes. Contribute … telemetry, monitoring, alerting, and operational visibility across all critical systems. Ensure services are observable, measurable, and support proactive detection of issues. Improve operational readiness, incident response effectiveness, and time-to-recovery through engineering solutions. CI/CD & Platform Integration Contribute to the design of CI/CD patterns ...