226 to 250 of 1,467 Incident Response Jobs in England

Security Architect

Hiring Organisation
Amentum
Location
Stoke Gifford, Gloucestershire, United Kingdom
Employment Type
Permanent
Salary
GBP Annual
Defining, implementing, and maintaining corporate security policies, standards, and procedures to ensure compliance with industry regulations, legal requirements (e.g., GDPR, HIPAA), and best practices. Incident Response and Management: Playing a key role in developing incident response plans and coordinating efforts to detect, analyse, and respond ...

GRC Consultant

Location
Greater London, England, United Kingdom
actively participates in supporting/governing forums Contribute to the analysis and mitigation of data protection risks Monitors information security incidents, contributing to incident response and root cause analysis. Will own resulting actions as required where they relate to required changes in IT Security and Information Risk Management … policy and controls Security operations and incident response, liaison with internal teams and 3rd party suppliers Desirable Skills and Experience Experience with the design concepts associated with adoption of Cloud platforms (AWS and/or Microsoft Azure) An understanding of the native security capabilities and good practice within ...

Hybrid Incident Response Analyst – Banking IR Pro

Location
England, United Kingdom
Forensic Focus Limited in England is seeking an experienced Incident Response Specialist to join our security operations team on a contract basis. You will respond to sophisticated cyber security incidents within a large banking-sector enterprise, conduct live-response investigations, build host activity timelines, and produce clear … incident reports for stakeholders. The role follows a Wednesday–Saturday shift pattern and sits in a mature team alongside threat intelligence, detection #J-18808-Ljbffr ...

IT & Cyber Security Manager

Location
Redditch, England, United Kingdom
mover/leaver processes. Protect against the threats that hit ecommerce, from account takeover and phishing to payment fraud and supplier compromise. Build our incident‐response capability and lead the response to incidents and suspected data breaches. Lead the business to Cyber Essentials Plus and towards … Strong Google Workspace administration, plus experience with MDM and implementing SSO and MFA. Practical knowledge of identity and access, endpoint security, vulnerability management and incident response, including real incidents. Evidence of building with AI and automation, with comfort in scripting (Python, TypeScript, shell) and APIs. Working knowledge ...

Senior Engineer, Site Reliability Engineering

Location
Nottingham, England, United Kingdom
Site Reliability Engineering, cloud operations, and modern software delivery practices with a passion for building high-performing engineering teams. You will lead reliability strategies, incident management, automation initiatives, and continuous improvement efforts, while partnering closely with product, engineering, and business stakeholders to align technology outcomes with organisational objectives. WHAT … Design Engineering, Client Support, Management, and Software Development groups Document policies and procedures as they are defined and changed Drive automation-first mindset across incident response, deployment, compliance, and observability. Collaborate with product and engineering teams to embed non-functional requirements and secure-by-design principles into delivery ...

Security Engineer

Location
Greater London, England, United Kingdom
employee systems Security tooling and automation , including checks built into CI/CD, so the same work is never done manually twice Detection and incident response , from logging and alerting through investigation and recovery, turning each incident into a lasting improvement to systems and controls AI security … Python or a comparable language, and you integrate security checks into how engineers already work Detection and response. Understanding of security logging, monitoring and incident investigation, and comfort owning a problem through investigation, remediation and verification Risk judgement at startup pace. You start from the likely harm and attack ...

Information Security Analyst

Location
Nottingham, England, United Kingdom
primary practitioner resource within a small, specialist Cyber Security team of three, including the VP, responsible for day-to-day security monitoring, vulnerability management, incident response, and internal audit activity that keeps our security posture credible and improving. Hands-on delivery is the core expectation; this … role sits at the centre of that. What you will be doing Operating as the primary hands-on resource for security monitoring, triage, and incident response, working with the external SOC and MDR provider Operating and maintaining security tooling, including CSPM, SAST, and DAST platforms, ensuring coverage, configuration ...

Cyber Security Analyst

Location
Eccles, England, United Kingdom
exploited. You'll be at the forefront of cyber defence, analysing information from multiple security tools, responding to emerging threats and supporting incident response activities when security events occur. This is an exciting opportunity for someone who enjoys combining technical expertise with customer engagement, helping organisations improve their … patches released by our partners, eg Microsoft Assisting engineers in the investigation of security events and incidents and assisting in the production of security incident reports Data cleansing activities ensuring deprecated assets are investigated and removed from reporting where required Presenting vulnerabilities to customers, discussing industry trends where appropriate ...

Naimuri - Information Security Officer

Location
Salford, England, United Kingdom
mobile) are configured securely. Vulnerability Management: Run and remediate vulnerability scans; don’t just report the issues; help figure out how to fix them. Incident Response: Be a key part of our incident response team, investigating alerts and refining our "playbooks" for future threats. Identity & Access ...

IT Infrastructure Security Engineer

Location
Leeds, England, United Kingdom
Authentication, develop Conditional Access and Privileged Access Management controls, and support secure user lifecycle and access management. Develop, implement, and maintain the Club's Incident Response Plan, support Business Continuity and Disaster Recovery planning, participate in testing and exercising cyber response procedures, and investigate and respond … including VLANs, firewalls, IDS/IPS, and segmentation. Experience using vulnerability management tools such as Nessus, Qualys, or similar. Experience developing or contributing to incident response processes. Experience conducting technical security assessments and risk reviews. Preferred Skills Experience within sport, entertainment, stadium, or public venue environments. Experience implementing ...

Incident Response Engineer - Build & Lead IR Program

Location
Greater London, England, United Kingdom
Fluidstack is seeking a senior security incident response leader to own end-to-end incident handling across corporate, cloud, and data center environments. You will develop detection logic and playbooks, conduct digital forensics, and drive permanent improvements through post-incident reviews. You will stand ...

Senior Information Security Engineer

Location
Greater London, England, United Kingdom
security controls, tooling and processes that protect our cloud, application, Microsoft 365 and infrastructure environments. You'll work across security engineering, threat detection, incident response, vulnerability management, cloud security and cyber resilience, partnering closely with engineering teams and our external Security Operations Centre to strengthen our security posture … navigating your own. What you’ll be doing Building and improving security controls across our cloud and Microsoft 365 environments Developing detections, automations and response capabilities using SIEM, SOAR and security tooling Investigating and responding to security incidents and helping drive lessons learned Conducting threat hunting and using threat ...

Principal Security Design Consultant

Location
Greater London, England, United Kingdom
source onboarding, data connector, normalisation, retention, ingestion, cost-management and data-residency requirements across cloud, on-premises and third-party services. Develop detection and response architectures covering analytics rules, MITRE ATT&CK-aligned use cases, threat hunting, workbooks, watchlists, automation and SOAR playbooks. Design secure integrations with ITSM, CMDB … threat intelligence, vulnerability management, identity, network and incident response processes. Produce and own architecture artefacts including requirements, High-Level Designs (HLDs), Low-Level Designs (LLDs), reference patterns, design decisions, migration roadmaps, test criteria and as-built assurance. Broader security architecture: Lead architecture reviews and design engagements across cloud ...

L3 Security Analyst

Location
Newbury, England, United Kingdom
role in protecting millions of customers from global cyber threats. As a Level 3 Security Analyst, you’ll be at the forefront of advanced incident response, tackling complex security challenges and driving continuous improvement in our cyber defence posture. You’ll investigate and validate threats using cutting‐edge … tools, collaborate with global teams on incident investigations, and mentor colleagues to uplift skills across the CSOC. From fine‐tuning SIEM systems and automating response actions to delivering insightful security reports and advisories, your expertise will help shape Vodafone’s resilience against evolving threats. This is a role ...

NMC Cyber Incident Responder (Digital Forensics)

Location
Wigan, England, United Kingdom
# NMC Cyber Incident Responder (Digital Forensics)*Police Digital Service***Wigan, England**Hybrid · Senior · Full-time### The RoleWorking within a National Management Centre Cyber Incident Response team, the role involves leading investigations into ransomware, malware, unauthorised access and insider threat incidents affecting UK policing. … analysis of endpoints, servers and cloud environments, producing defensible findings for operational and legal audiences, and briefing Chief Officers and senior IT leaders throughout incident lifecycles.### Skills & ExperienceCandidates should have hands-on experience in enterprise digital forensic investigations, endpoint and memory forensics, and log analysis using EDR telemetry ...

IT Security Engineer

Location
Chichester, England, United Kingdom
oversee cybersecurity across corporate IT, Operational Technology (OT), and manufacturing environments. Supported by the IT Infrastructure team, you will lead threat detection and response, vulnerability and patch management, security awareness, and compliance. You'll also own the organisation's patching strategy, champion security best practices, and help shape future … Operational Technology (OT) environments Lead the end-to-end management of security incidents, from investigation and containment through to remediation and post-incident review Monitor, triage and respond to security threats using EDR, SIEM, NDR and email security platforms, working closely with managed security providers Own the organisation ...

OT Cyber Analyst

Location
East Midlands, England, United Kingdom
risk analysis to identify vulnerabilities and recommend improvements. Monitoring & Reporting: Help track cyber control effectiveness, compile relevant data and produce concise reports for management. Incident Response: Support development and maintenance of OT incident response procedures. Awareness & Training: Help deliver OT cyber security training and awareness campaigns ...

Senior SOC Analyst

Hiring Organisation
Sopra Steria
Location
Farnborough, Hampshire, South East, United Kingdom
Employment Type
Permanent
Salary
£55,000
help protect systems that matter. Apply today and take your cyber security career to the next level. If you're passionate about threat detection, incident response, and staying one step ahead of attackers, we'd love to hear from you. Office based: Farnborough. Clearance: You do need … triage and investigate security incidents across critical client environments. Analyse network traffic, logs and security events to identify threats and vulnerabilities. Lead and support incident response activities, providing expert guidance on containment, eradication and recovery. Enhance detection rules and use cases using MITRE ATT&CK and threat-informed ...

Cyber Security Analyst - L1

Location
City Of London, England, United Kingdom
join a busy, global security operations team. This is an excellent opportunity for a security professional with experience in monitoring, threat detection, and incident response to work within a fast-paced enterprise environment. Hours of work: Sunday to Wednesday, 8:00am - 5:45pm Day rate … month in the London City office Required Skills & Experience Previous experience in cyber security, IT operations, or a related field. Experience with security monitoring, incident response, or security operations. Familiarity with SIEM platforms such as Splunk or QRadar. Understanding of cyber security frameworks and threat detection methodologies. Knowledge ...

Head of Information Security

Hiring Organisation
Endeavour Recruitment
Location
London, United Kingdom
Employment Type
Permanent
Salary
£115000 - £125000/annum + Additional Benefits
authentication and privileged access. Lead vulnerability management activities, prioritising remediation based on risk and potential business impact. Establish effective security monitoring, threat detection and incident response arrangements. Coordinate responses to significant security incidents, ensuring a calm, structured and effective approach. Assess third-party and supplier security risks … would be advantageous. Strong understanding of identity and access management, authentication, privileged access and access-control principles. Experience in vulnerability management, security monitoring and incident response, including coordinating significant security incidents. A track record of developing or improving security policies, technical standards and operational controls. Experience assessing technical ...

Senior SRE: Observability & Incident Response (Multi-Cloud)

Location
Guildford, England, United Kingdom
Electronic Arts (EA) Ventures Group seeks a temporary Software Engineer III (SRE) to strengthen observability, incident response, and cloud governance across AWS and GCP. You will design dashboards, runbooks, and post-incident reviews, while coordinating with platform teams to improve security posture and cost controls. The role ...

Cyber Security Specialist

Hiring Organisation
DB Cargo Uk
Location
Doncaster, South Yorkshire, Yorkshire, United Kingdom
Employment Type
Contract
Contract Rate
£75,000
ISMS), policies, standards and governance processes. Lead compliance with NIS Regulations, GDPR and DB Group security requirements. Manage cyber security operations including threat monitoring, incident response, threat intelligence and vulnerability management. Develop Microsoft Sentinel, Microsoft Defender XDR and associated security monitoring capabilities. Provide governance across Azure, AWS, Microsoft … senior leadership reporting. What We Are Looking For: Demonstrable experience in cyber security, information security or IT risk management. Experience of security operations, incident response and security monitoring. Knowledge of governance, risk management, compliance frameworks and assurance processes. Experience securing cloud, endpoint and identity platforms, ideally within Microsoft ...

SOC Subject Matter Expert (UK)

Location
Horsham, England, United Kingdom
Their primary responsibility lies in translating SOC analyst pain points, workflows, and use cases into actionable product features, with particular focus on alert/incident prioritisation and intelligent playbook execution that helps analysts make critical security decisions. Their responsibilities will include: Providing expert SOC operational guidance to product management … operational needs. Translating SOC analyst pain points, workflows, and use cases into actionable product features and user stories. Designing and validating alert prioritisation algorithms, incident triage workflows, and automated playbook logic based on operational experience. Collaborating with product managers to shape product strategy, roadmap priorities, and feature definitions. Conducting ...

Lead DevOps Engineer

Location
Greater London, England, United Kingdom
configuration, database schema creation, and operational workflows across cloud and on-prem platforms.* Support production systems with a focus on high availability, disaster recovery, incident response, vulnerability management, patching, and change management.* Containerize applications and support deployments using container orchestration platforms.* Partner with development teams to understand application … engineering tools to accelerate development, automation, troubleshooting, documentation, and operational workflows.* Identify, design, and help implement AI-enabled operational capabilities for infrastructure automation, observability, incident response, and platform engineering.* Contribute to the strategy for safe, practical, and secure adoption of AI across infrastructure and DevOps practices.* Lead ...

IT Specialist Senior IT Security Specialist - Ashford or Cairns

Location
Ashford, England, United Kingdom
security infrastructure, responding to threats, and ensuring compliance across systems. You’ll work with various cyber security solutions while driving security best practices and incident response. If you have experience in cybersecurity tools, governance, and access management—and want to use your skills to support a mission that changes … critical role in protecting our digital infrastructure. You’ll lead the implementation and management of SIEM systems, Fortinet security tools, and endpoint detection & response (EDR) while conducting vulnerability assessments and penetration testing to stay ahead of cyber threats. You’ll enhance identity and access management (IAM) by maintaining Active ...