426 to 450 of 1,465 Incident Response Jobs in England

reliability engineering practices across systems that support live, business‐critical environments. The successful candidate will play a key role in improving service reliability, observability, incident response, automation, and disaster recovery readiness across IMG platforms, while working closely with engineering, operations, and project stakeholders. Key Responsibilities And Accountabilities Design … improve release quality, resilience, and supportability. Act as an escalation point for production incidents, leading or supporting rapid diagnosis, mitigation, communication, and post‐incident follow‐up. Drive root cause analysis and corrective actions following incidents, with a focus on prevention and continuous improvement. Support the design, testing, and documentation ...

reliability engineering practices across systems that support live, business-critical environments. The successful candidate will play a key role in improving service reliability, observability, incident response, automation, and disaster recovery readiness across IMG platforms, while working closely with engineering, operations, and project stakeholders. Key Responsibilities and Accountabilities Design … improve release quality, resilience, and supportability. Act as an escalation point for production incidents, leading or supporting rapid diagnosis, mitigation, communication, and post-incident follow-up. Drive root cause analysis and corrective actions following incidents, with a focus on prevention and continuous improvement. Support the design, testing, and documentation ...

applicable, and dependency scanning. Drive observability and production excellence by implementing logging, metrics, and tracing, creating actionable alerts, defining SLOs and SLIs, and leading incident response and post‐incident improvement activities. Embed security by design through secure coding practices, threat modelling, role‐based access control and least ...

third-party SOC vendor. Triage, analyse and prioritise alerts, incidents, escalations, and investigations - validating severity, business impact, and regulatory implications of incidents Co-ordinate incident management and response activities aligned with defined policies, standards, and framework requirements by being the internal response facilitator and co-ordinator … operations. Skills, Qualifications, And Experience Previous hands-on experience in cybersecurity operations or security engineering roles. Experience of security monitoring, threat detection, incident response, and threat hunting methodologies. Strong working knowledge of endpoint security, identity and access management, authentication controls, privileged access management, and security hardening standards incl. ...

reports and updates for senior management * Monitor regulatory developments and create appropriate compliance roadmaps * Support cybersecurity awareness and training across the organisation * Participate in incident response and post-incident reviews * Help develop and implement corrective measures following security incidents * Provide credible cybersecurity guidance to stakeholders across ...

seeking an experienced Splunk Engineer to help design, build, and manage our Splunk SOAR service, with a strong focus on automation, security response, and service maturity. This role will be responsible for developing, reviewing, testing, and deploying Splunk SOAR playbooks into production environments, ensuring they are secure, reliable … Work closely with SOC analysts, security engineering teams, and stakeholders to optimise automation outcomes. Perform playbook tuning, troubleshooting, and enhancements to improve reliability and response times. Maintain clear technical documentation for playbooks, integrations, and processes. Support live security operations where SOAR automation is involved. Manage your own queue ...

practice) that scales reliability improvements across many application flows. Defines and implements standards for: Service cataloging, SLO/SLI frameworks and error budgets, incident response maturity, blameless post-incident reviews, resiliency patterns, capacity, performance, and scalability engineering. Drives service reviews with evidence-based reporting (availability, latency, incident … credibly at all levels—from engineers to senior technology and business stakeholders. Uses enterprise-authorized AI capabilities within the work environment to accelerate major-incident triage, troubleshooting, and post-incident analysis, validating outputs and handling operational data according to sensitivity and security requirements. Leads reuse-first adoption ...

analysis of incidents, threats, vulnerabilities, and trends. Ensure comprehensive coverage and accuracy across security tools, asset inventories, procedures, and SOC documentation. Lead or support incident coordination, post-incident reviews, and forensic activities with internal teams and third-party partners. Develop and deliver security metrics, reports, and recommendations … strengthen detection, response, and vulnerability management. Contribute to SOC operations, standardising processes, informing tooling decisions, and supporting broader cybersecurity planning and validation efforts. Additional Information What You'll Bring Here at Primark, we want everyone to feel valued - so please bring your authentic self to work, of course with ...

reduction, and proactive issue identification. Create automated remediation processes, runbooks, and self-healing mechanisms to improve operational resilience. Perform troubleshooting, root cause analysis, and incident resolution across platform and application environments. Analyse operational trends, system telemetry, and performance data to drive continuous improvement initiatives. Collaborate with Product, Engineering, CloudOps … premise infrastructure. Experience implementing observability platforms such as Splunk, Datadog, Grafana, Prometheus, Dynatrace, or similar technologies. Experience with AI-driven operational tooling and automated incident response solutions. Object-oriented programming experience. Experience working within Product Engineering, Software Engineering, or R&D environments. Experience supporting highly available, business-critical ...

solvers (e.g., Gurobi) and ensure model performance, correctness, explainability, and maintainability. Establish strong engineering practices: code review, automated testing, CI/CD, release management, incident response, and post‐incident learning. Build observability into optimisation services (KPIs, logs, traces) and manage performance tuning (latency, throughput, cost) across environments. …/ELT, caching strategies, data quality checks, reproducible inputs/outputs. DevOps: CI/CD, infrastructure as code, containerisation (e.g., Docker), monitoring/alerting, incident management. Quality: unit/integration tests, performance tests, model validation frameworks, feature flags. Location & Hours of Work We operate a hybrid working policy ...

weaknesses and recommend pragmatic remediations. Implement and improve AWS security monitoring, logging and alerting to detect misconfigurations, suspicious activity, and potential security incidents. Support incident response readiness by improving observability, evidence collection, recovery documentation, and operational playbooks for AWS platform services. Work closely with application teams, platform engineers ...

maintain SLOs and SLAs in collaboration with product and engineering teams, and build the tooling needed to measure and report against them. Lead incident response for complex infrastructure and platform issues, conducting post‐incident reviews and driving systemic improvements to prevent recurrence. Proactively identify reliability, scalability … they impact customers. Champion a culture of operational excellence across engineering, promoting practices such as chaos engineering, load testing, capacity planning, and runbook‐driven incident response. Use operational data and service performance metrics to identify trends and prioritise platform improvements. Security & Cost Governance Embed security practices into the engineering ...

human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection … response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with the visibility and scalability needed to stay ahead of evolving threats. Sophos goes to market with a global partner ecosystem, including Managed Service Providers (MSPs), Managed Security ...

alerting integrations, workbooks and technical monitoring coverage across cloud, identity, endpoint, email, applications and agentic services. Build, test and maintain security automation, orchestration and response workflows, including SOAR playbooks and approved automated containment actions. Implement and maintain technical security policies, baselines and guardrails defined by Information Security, Cyber … Architecture. Work with Cyber and the SOC to translate threat intelligence, incident learning and detection requirements into effective technical controls and monitoring capabilities. Support the engineering and continuous improvement of security controls for end users, Azure workloads, cloud services, identities, workloads and non-human or agent identities. Integrate security ...

cloud infrastructure, delivery platforms, and operational capabilities. You will remain hands‐on across the engineering lifecycle, from architecture and infrastructure design through deployment, observability, incident response, and continuous improvement. We expect you to operate with a high degree of autonomy, make strategic and architectural decisions within your area … incidents, identify root causes, and turn lessons into measurable engineering improvements. Use approved generative AI tools for infrastructure development, automation, testing, pipeline improvement, documentation, incident analysis, and troubleshooting. Provide technical guidance through design reviews, code reviews, pairing, coaching, and hands‐on problem‐solving. WHAT YOU'LL BRING: Significant hands ...

automation that underpin those capabilities. Sitting at the intersection of strategy and execution, it combines real-time defence such as monitoring, detection and incident response with long-term capability building including tooling, automation, detection engineering and platform integration. The postholder partners closely with Security Architecture, Threat Intelligence, Engagement … Engineering teams to ensure that controls are operationalised, detections are meaningful and response processes are efficient and repeatable. A key focus is reducing mean time to detect and respond, increasing visibility across the environment and moving the organisation from reactive defence to a mature, adaptive, AI-enabled security posture. ...

stability of software applications and systems. Provides operational support and leadership for production systems in a \"you-build-it-you-run-it\" culture, including incident response, post-incident learning, and continuous reliability improvements. Leads evaluation sessions with external vendors, startups, and internal teams to drive outcomes-oriented … engineering practices across teams to improve code quality, delivery speed, and operational outcomes (e.g., AI-assisted code review/refactoring, test acceleration, release readiness, incident/root-cause analysis), while establishing measurable validation standards (secure coding, peer review, automated testing) and promoting reuse of proven patterns and automation within ...

compliance evidence against the firm’s obligations (SOC 2, ISO 27001, GDPR, DORA). Contribute to observability and monitoring across the estate, and to incident response and on-call, including troubleshooting and root cause analysis that drives systemic improvement. Support disaster recovery testing to validate recovery plans … integrating AI or agentic tooling into engineering workflows (e.g. IaC generation, automated remediation, or documentation). Exposure to compliance‐evidence or governance tooling and incident‐management tooling. Additional Information This is a hybrid role, with attendance at our Leeds office once a month. Participation in the on‐call rota ...

onboarding, including SSPM tooling and SaaS security reviews Architect secure identity solutions, including centralised and federated authentication models across complex, cross‐domain environments Support incident response planning and business continuity activities, ensuring cloud‐hosted services meet resilience and recovery objectives Contribute to FinOps activities from a cybersecurity cost ...

services or insurance sectors.Broad knowledge of security domains: network security, endpoint protection, Secure development lifecycle, identity and access management, cloud security (AWS/Azure), incident response, and governance.Hands-on experience with SIEM, EDR, vulnerability management tools, and cloud-native security services.Demonstrable experience applying artificial intelligence (AI), machine learning ...

insurance sectors. Broad knowledge of security domains: network security, endpoint protection, Secure development lifecycle, identity and access management, cloud security (AWS/Azure), incident response, and governance. Hands-on experience with SIEM, EDR, vulnerability management tools, and cloud-native security services. Demonstrable experience applying artificial intelligence (AI), machine ...

configuration changes, integrations and automation to improve efficiency and consistency. Monitoring service health, capacity, performance and security, proactively addressing risks and vulnerabilities. Leading complex incident resolution, root-cause analysis and security investigations. Coordinating patching, upgrades, backups, recovery testing and business continuity arrangements. Maintaining technical documentation, operational procedures, asset records … tasks and improve efficiency. Cloud services, SaaS applications, collaboration tools and development-support services. IT security, vulnerability management, patching, monitoring, backups and disaster recovery. Incident management, root-cause analysis and security incident response, ideally involving SIEM tools. IT service management covering incidents, problems, changes and assets. Strong ...

make coding agents effective against our stack Improve observability and alerting so that system health is visible and actionable without manual investigation Participate in incident response and post-incident review, treating failures as systemic issues rather than individual ones What We Need Kubernetes & Cloud: Hands-on experience … other basis protected by law. Due to a high volume of candidates, Invisible may use automated decision-maker technologies to filter candidates based on response to our application questions and other provided information. Our use of automated decision-making enables us to be efficient by providing a manageable list ...

Bloomberg is seeking a Security Incident Management professional to coordinate responses to security incidents and high-profile events across its global network. The role emphasizes leadership, delegation, documentation, and defining required response actions rather than deep technical analysis. You will serve in incident management roles such … Incident Commander or Manager during active incidents, ensuring containment, remediation, and clear communication with stakeholders and senior #J-18808-Ljbffr ...

security experience who can design, configure and improve security solutions across a complex environment. While the candidate should be familiar with security monitoring and incident handling, this role is not suited to someone whose experience is limited to those areas. The successful candidate will be able to understand complex … leading a small team), work effectively with IT; development and business teams and communicate technical risks and recommendations clearly. The role includes participation in incident, change and problem management, with some out-of-hours work required for planned change, maintenance or urgent security response. Education, Skills & Experience Must Have ...