276 to 300 of 1,465 Incident Response Jobs in England

Must have 2+ years in Pre-Sales or similar role within an MSP/Reseller organisation Previous experience being part of or working with incident response teams would be beneficial Good understanding of incident response stages and handling preferred Knowledge and/or experience using endpoint ...

automated controls. Work closely with development squads to support onboarding, platform adoption and day-to-day usage of the central platform. Contribute to incident response, root-cause analysis and continuous improvement of platform reliability and support quality. Share knowledge, document standards and help establish the central SRE Platform … Strong understanding of observability, including metrics, logs, traces and operational insights. Experience integrating security, governance and compliance into technical solutions. Experience supporting production environments, incident response and continuous service improvement. Good understanding of modern software delivery practices and engineering automation. Excellent analytical, troubleshooting and communication skills. Advantageous ...

internal testing capabilities. Your efforts will drive proactive detection and resolution of vulnerabilities within our systems. Key responsibilities: Lead the monitoring, analysis, and response to security incidents within the Forces' network and systems Scoping, planning, and delivering penetration tests, IT Health checks and security assessments of the Forces' network … systems and devices Develop and maintain SOC procedures, protocols, and playbooks to streamline incident response and improve efficiency Collaborate with internal and external stakeholders to investigate security breaches, conduct analysis, and mitigate risks Act as an escalation point for the SOC Analyst Stay abreast of emerging cyber threats ...

drive automation efforts to reduce operational toil, and help build resilient systems that deliver exceptional customer experiences. You will leverage your expertise in observability, incident response, and distributed systems to proactively identify and resolve reliability challenges. Working closely with engineering teams, you will design and implement solutions that … deployment rollbacks. AWS Networking & Security: Proficiency in VPCs, networking, ALBs, Route53, ACM/TLS, IAM, OIDC, Secrets Manager, KMS, and cloud security best practices. Incident Response & Observability: Skilled in troubleshooting using logs, metrics, alarms, deployment history, root cause analysis, rollback decisions, and operational runbooks. Linux & Automation: Strong Linux ...

through to resolution Set clear ownership and performance standards so reliability and service quality stay central to technical and business decisions Lead observability and incident response Partner with the Infrastructure Team to design, implement, and continuously improve monitoring, observability, and fault-diagnostic practices Lead major incident management … Troubleshoot and resolve complex issues hands-on Be available for out-of-hours and weekend support to resolve critical incidents quickly Run consistent post-incident reviews, with root causes identified and corrective actions tracked through to completion Prepare for the big moments Lead operational readiness reviews ahead of major ...

Sophos is seeking an intermediate-level Incident Response Analyst to support its MDR customers within the Critical Incident Response Team. You will perform advanced investigative, forensic, and containment activities during active cyber incidents, mentoring junior analysts and producing customer-facing findings. You will operate with moderate … autonomy, serve as the technical backbone of engagements, and contribute to post-incident reviews while maintaining thorough documentation and timelines. #J-18808-Ljbffr ...

identify risks and vulnerabilities in people, processes, and technology. In this role, you will design and execute Red Team assessments to evaluate preventative controls, incident response processes, and detection capabilities, and advise cross-functional teams on security strategy and risk management. This position is anticipated to require … operating within financial services environments and knowledge of sector-related cybersecurity or resiliency organization practices, operations risk management processes, principles, regulations, threats, risks, and incident response methodologies Experience delivering regulatory-driven red team testing such as CBEST, TIBER, and iCAST Experience of targeting cloud-based environments such ...

WithSecure is seeking a Senior Incident Response Investigator to lead investigations for clients and produce high-quality reports. You will work on targeted attacks across large enterprise networks, with exposure to diverse OS environments and complex security architectures. The role involves incident readiness support, report writing ...

needed to respond confidently to evolving threats. Working closely with Engineering, Platform and IT, you will influence architecture and development decisions, strengthen detection and response, and translate security risks into clear business priorities. You will join our international R&D team, which brings together engineering, data and AI expertise … risk : prioritise the risks that matter most, agree a practical improvement roadmap and communicate progress and investment needs to senior leaders. Security operations and response : develop the team and SOC capability, strengthen detection and investigation, and coordinate incident response and lessons learned. Product and platform security : embed ...

Define what healthy means, then measure it. Improve observability, monitoring and alerting in Datadog, so problems surface before a trader notices. Take part in incident response, then close the loop on the root cause. Work with our runtime across Lambda, ECS and EKS, and help move more workloads … infrastructure as code in AWS CDK, and our CI/CD pipelines. Reduce toil. Automate the manual, delete the unnecessary, make the next incident less likely. ABOUT YOU: 4+ years as a software or reliability engineer, with production systems you’ve built and supported. High ownership tendencies. Genuine interest ...

business to operate effectively and securely. Working closely with internal teams, suppliers and stakeholders, you’ll investigate technical issues, improve security controls, support incident response activities and contribute to the delivery of secure technology solutions. This is an exciting opportunity for someone who enjoys solving complex technical problems … making a meaningful impact through technology. Design, implement, maintain and continuously improve security controls across the technology estate. Support security monitoring, vulnerability management, incident response and remediation activities. Investigate and resolve security‐related issues affecting systems, services and users. Collaborate with colleagues, suppliers and stakeholders to embed security ...

Methods is seeking a Senior Cyber Analyst to lead complex investigations and incident response, providing strategic direction to maintain a robust security posture for clients. You will own detection rules and playbooks for Microsoft Sentinel, Defender XDR, SIEM, SOAR, EDR and XDR, while mentoring the Cyber Services team. ...

business to operate effectively and securely. Working closely with internal teams, suppliers and stakeholders, you'll investigate technical issues, improve security controls, support incident response activities and contribute to the delivery of secure technology solutions. This is an exciting opportunity for someone who enjoys solving complex technical problems … meaningful impact through technology. Main Responsibilities Design, implement, maintain and continuously improve security controls across the technology estate. Support security monitoring, vulnerability management, incident response and remediation activities. Investigate and resolve security-related issues affecting systems, services and users. Collaborate with colleagues, suppliers and stakeholders to embed security ...

business to operate effectively and securely. Working closely with internal teams, suppliers and stakeholders, you'll investigate technical issues, improve security controls, support incident response activities and contribute to the delivery of secure technology solutions. This is an exciting opportunity for someone who enjoys solving complex technical problems … through technology. You will be responsible for Design, implement, maintain and continuously improve security controls across the technology estate. Support security monitoring, vulnerability management, incident response and remediation activities. Investigate and resolve security-related issues affecting systems, services and users. Collaborate with colleagues, suppliers and stakeholders to embed ...

cyber security strategy and roadmap. Own and continuously improve ISO 27001 and Cyber Essentials Plus. Lead security operations and manage an outsourced SOC. Oversee incident response, vulnerability management and remediation. Manage external security partners and specialist suppliers. Lead and mentor the Information Security team. Work closely with senior … Proven experience owning and improving ISO 27001 and security governance. Experience managing outsourced SOC and security partners. Strong knowledge of security operations, threat detection, incident response and vulnerability management. Good understanding of Microsoft/Azure, cloud security, SaaS assurance and security architecture. This is a senior leadership opportunity ...

ensure smooth deployment processes across environments Participate in on-call rotations and act as an escalation point for production incidents Lead or contribute to incident response and post-mortems, driving long-term improvements Core Tech Stack AWS (Primary) CloudWatch (or integration with tools like Datadog) Infrastructure & Automation Terraform … Directory/identity integration IIS and .NET application hosting PowerShell scripting and automation Observability & Operations Monitoring and alerting platforms (Datadog, CloudWatch, etc.) Logging and incident response tooling Qualifications What We’re Looking For Extensive experience in DevOps, Cloud Engineering, or Systems Engineering Strong hands-on experience with ...

FASTEK Limited in the United Kingdom seeks a Security Operations role to monitor and manage IT security infrastructure, conduct vulnerability assessments, lead incident response, and implement security policies and procedures across the organization. You will ensure GDPR and ISO27001 compliance, work with SIEM tools for threat detection, manage ...

sound engineering trade-offs around scalability, maintainability, performance, and product impact Own reliability and operational excellence, including telemetry, SLOs, error budgets, on-call rotations, incident response, and continuous service improvement Champion DevOps practices, including CI/CD, deployment automation, monitoring, and application-level operations Collaborate with Platform Engineers … Experience designing and building scalable APIs, services, and cloud-native applications Strong understanding of DevOps practices, including CI/CD, deployment, monitoring, automation, and incident response Experience delivering secure, observable, high-quality production software Strong focus on code quality, automated testing, documentation, performance, and maintainability Ability to lead ...

Bloomberg in London seeks a Senior Incident Response & Digital Forensics Analyst to lead end-to-end investigations, from acquiring forensic images to reconstructing attacker activity. You will analyse memory and network evidence, reverse engineer binaries, mentor teammates, and help develop detection coverage and playbooks for the SOC. This ...

Taking a lead role in the secure adoption of Microsoft 365 Copilot, AI agents and custom AI applications Improving security monitoring, detection engineering and incident response Supporting complex and high‐severity security incidents alongside internal teams and external SOC partners Strengthening vulnerability and exposure management using threat intelligence … them Strong knowledge across identity, cloud, endpoint, data, network and application security Experience with threat modelling and security architecture reviews Exposure to detection engineering, incident response, threat hunting and vulnerability management Security automation or scripting experience Knowledge of Zero Trust, ISO 27001, Cyber Essentials Plus and NIST ...

Privileged Access Management, and associated access control environments. The role will support the secure management of privileged accounts, access workflows, credential rotation, platform onboarding, incident response, control monitoring, and operational governance relating to privileged access. In addition, the role will contribute to broader identity security capabilities, including secrets … identity and PAM responsibilities, the role will support wider cyber security engineering activities, including security platform operations, automation, tooling enhancements, threat detection improvements, and response to security incidents as business and security priorities evolve. Responsibilities Role specific: Engineer security products to be production ready. Configure security toolset and controls ...

Consulting is seeking a Senior Consultant to lead incident response engagements, perform digital forensics, and advise clients on cyber risk. The role requires strong analytical skills and knowledge of frameworks, with hybrid travel to client sites in London and beyond. You will work with top-tier firms ...

security maturity improvements. Get exposure to AI security: Work around Copilot, AI agents, Purview, and data security compliance. Broad technical remit: Microsoft security, SIEM, incident response, cloud/SaaS security, identity, and network security. Room to grow: The team is investing in capability, and strong performers may have … work independently, prioritise a varied workload, and bring ideas from your own experience. Key areas include: Vulnerability management, remediation planning, reporting, and automation. Security incident triage, investigation, and response. Microsoft Defender, Entra ID/Active Directory, Conditional Access, and related controls. SIEM query building and KQL. Ransomware resilience, including ...

outcomes. Deep technical knowledge of modern cybersecurity technologies including endpoint security, XDR/EDR, cloud security, identity and access management, SIEM/log management, incident response, and threat intelligence Experience with security transformation programs, including Zero Trust architecture, cloud migration security, legacy estate modernisation, and security operating model … CyberUK speaking, or NCSC certification processes Professional certifications such as CISSP, CISM, or equivalent (desirable but not essential given practitioner experience requirement) Experience with incident response in government context, including major cyber incidents or nation-state attacks Existing relationships with key government stakeholders Published thought leadership ...

engineering, detection engineering, SIEM/SOAR, security automation and AI-driven security operations . You’ll design and improve security monitoring, detection, response and automation capabilities across a large enterprise environment, with a particular focus on AI and agentic technologies . Key Responsibilities Design and optimise security monitoring, SIEM … including ingestion, parsing, normalisation and enrichment . Develop and tune detection rules, correlation searches and threat detection use cases . Build SOAR playbooks, automated response workflows and security integrations . Integrate SIEM, SOAR, EDR/XDR, IAM, vulnerability management and cloud security tools . Support incident response ...