451 to 475 of 1,465 Incident Response Jobs in England

continuous improvement of our cloud‐based SaaS platforms. Working as part of the UK Platform Operations team, you will be responsible for platform availability, incident management, application deployments, monitoring, automation and technical troubleshooting across our production environments. This role sits at the intersection of Platform Operations, DevOps and Application … changes and release activities. Create, maintain and improve operational runbooks, recovery procedures and standard operating processes. Configure and optimise monitoring and alerting to improve incident detection and response. Drive automation initiatives to reduce manual effort and improve operational efficiency. Collaborate with Engineering and DevOps teams to improve platform resilience ...

Maersk's Cyber team invites an experienced security professional to join a modern incident management and response function, combining digital forensics, threat hunting, detection engineering, and cyber security improvement. You will investigate complex incidents across endpoints, cloud, and OT, deliver root cause analyses, support uplift projects, and mentor ...

part of your work will involve operating and improving our observability stack built on Grafana and tools from the VictoriaMetrics and Prometheus ecosystems, improving incident detection and response, and developing AI-assisted monitoring capabilities. Working closely with platform, SRE, infrastructure, network, security, application, and ML engineering teams … telemetry: Help define shared standards for OpenTelemetry instrumentation, context propagation, and Collector pipelines. Support teams instrumenting Go, Node.js, and Python services and APIs. Alerting & incident response: Build useful dashboards and alerts, improve notification workflows through PagerDuty, and participate in on-call rotations. Work with other teams to reduce ...

reviews and monitoring KPIs Ensure compliance with IT security policy standards, including encryption, secure disposal, build hardening, monitoring, patching and access controls Lead security incident response and contribute to major incident management control Ensure effective communications outside of the IT team Production of an appropriate IT infrastructure ...

recommendations for engineering teams, and be hands-on in implementing those recommendations. Monitor & Respond: Monitor and analyse system access logs, flag anomalies, and support incident response, containment, and post-incident root cause analysis. Plan for Resilience: Plan and test security backups and disaster recovery processes to keep ...

Engineering) working within the Global Information and Cyber Security Defence (ICSD) function, is the technical leader for enterprise cyber deception and unified detection and response across the Microsoft security ecosystem. The role focuses on building, operating, and continuously evolving an enterprise-grade Insider Risk Management (IRM) and deception programme … detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering unified detection, automated investigation, and response across endpoint, identity, email, and cloud workloads. It combines deep deception engineering expertise with hands‐on Defender XDR mastery and the use of Agentic ...

activities for the Tewkesbury site. Operate and maintain the site's Information Security Management System (ISMS). Monitor security events, investigate incidents, and coordinate response activities. Conduct risk assessments, vulnerability reviews, and security audits. Act as the primary point of contact for EASA regulators and auditors. Coordinate cybersecurity risks … consistency and continuous improvement. What We're Looking For Experience in cybersecurity, information security, governance, compliance, or risk management. Strong understanding of security operations, incident response, vulnerability management, and security best practices. Experience working within aerospace, manufacturing, defence, or other highly regulated environments. Knowledge of cybersecurity frameworks such ...

systems that support live, business-critical environments. The successful candidate will work closely with engineering, operations, and project stakeholders to improve service reliability, observability, incident response, automation, and disaster recovery readiness. Key Responsibilities Design, build, and maintain reliable, scalable infrastructure and platform services across on-premises and cloud … improve release quality, resilience, and supportability. Act as an escalation point for production incidents, leading or supporting rapid diagnosis, mitigation, communication, and post-incident follow-up, and drive root cause analysis with corrective actions. Support design, testing, and documentation of high availability, backup, failover, and disaster recovery arrangements ...

Tooling & Continuous Improvement Shape delivery practices to support consistency and predictability across global teams. Use delivery metrics (lead time, cycle time, throughput, deployment frequency, incident trends) to drive improvement. Support squads in adopting effective tooling (Jira, Confluence, Miro, dashboards). Champion a culture of learning, experimentation, and operational excellence. … cloud-native environments (AWS, Azure, GCP). Familiarity with microservices, APIs, CI/CD pipelines, DevOps practices, and modern cloud architectures. Experience supporting incident response and post‐incident delivery. Demonstrated ability to identify and manage cross‐team dependencies in scaled engineering organizations. Strong experience with Jira & Confluence ...

security baselines, hardening standards, policy controls and configuration-management practices. Support vulnerability and configuration-risk remediation across Azure and Microsoft security platforms. Support cyber incident investigations and provide security expertise during critical incidents and major technology changes. Produce and maintain High-Level Designs, Low-Level Designs, engineering standards, operating … security-control validation and vulnerability-remediation support. Experience with REST APIs, PowerShell, Python, automation, enterprise troubleshooting and operational support. Experience working with Security Operations, Incident Response, Cloud, Infrastructure, Identity and Architecture teams. Technical Knowledge and Skills Azure security and governance: Azure Policy, Defender for Cloud, Azure Monitor ...

streaming, ETL/ELT, batch and real-time pipelines, data contracts, lineage, cataloguing, quality rules, and scalable cloud storage. Cybersecurity: SOC workflows, threat hunting, incident response, detection engineering, vulnerability and exposure management, IAM/PAM, Zero Trust, cloud security, and security control mapping. Security standards: Practical … service accounts, roles, entitlements, devices, applications, and cloud resources. Threat-intelligence fusion linking indicators, malware, campaigns, threat actors, observed telemetry, vulnerabilities, and affected assets. Incident investigation timelines, alert correlation, root-cause analysis, blast-radius assessment, and recommended containment evidence. Risk-based vulnerability prioritization using exploit context, asset criticality, exposure ...

practices, while applying software engineering discipline including version control, code reviews, and testing. Contribute to the SRE AI agent, IG’s agentic tooling for incident investigation and reliability review, built on AWS frontier models Mentor junior SREs and Reliability Champions on reliability patterns and production engineering discipline … SLOs on customer journeys rather than per‐service. Assist and guide teams in system design, capacity planning, architectural reviews and closing observability gaps. Own incident response and learning: Facilitate blameless post‐incident reviews (PIRs) within five working days using contributing‐factor methodology; Maintain the Lessons Register, track ...

platform services (e.g. PAM, PKI, cross‐domain solutions) in live environments Platform administration including patching, upgrades, configuration, and account management Monitoring, alerting, and incident response for platform services Incident and problem management, including troubleshooting and root cause analysis Networking concepts (TCP/IP, DNS, DHCP, firewalls) Automation … services, or cross-domain/secure transfer solutions Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms) ITIL-aligned service management practices (incident, problem, change) Automation of operational activities (scripts, scheduled jobs, runbooks) Experience working in high-availability or 24/7 service environments Integration with enterprise ...

platform services (e.g. PAM, PKI, cross-domain solutions) in live environments* Platform administration including patching, upgrades, configuration, and account management* Monitoring, alerting, and incident response for platform services* Incident and problem management, including troubleshooting and root cause analysis* Networking concepts (TCP/IP, DNS, DHCP, firewalls)* Automation … services, or cross-domain/secure transfer solutions* Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms)* ITIL-aligned service management practices (incident, problem, change)* Automation of operational activities (scripts, scheduled jobs, runbooks)* Experience working in high-availability or 24/7 service environments* Integration with enterprise ...

security, sales, and customer success, serving as the primary trust and security point of contact for our UK Sovereign customers. This role owns the response to customer security inquiries and questionnaires, supports contract reviews on security and privacy terms, and acts as a trusted advisor on the security posture … GDPR/UK GDPR, HIPAA, or FedRAMP. Technical Expertise: Strong technical understanding of security principles, architecture, and vulnerability management, including access control, encryption, incident response, network security, and secure SDLC. Cloud & SaaS: Familiarity with cloud infrastructure (AWS, Azure, or GCP) and SaaS security models. Communication: Exceptional written ...

This Role Platform Engineering, Operations & Reliability Backup, restore and resilience mechanisms are regularly tested, ensuring the platform can recover predictably. The platform is reliable, incident detection and resolution are smooth due to proactive monitoring, well‐maintained alerts/logs, and complete observability coverage. Platform resilience and DR planning/… testing strategy is defined and operational, working across the business with validated requirements and outcomes. Incident management processes are consistently followed, including timely post‐incident reviews (PIRs) and completion of follow‐up actions. Repeat incidents are rare due to effective root‐cause analysis and remediation. On‐call ...

aligned to MOD security requirements Coordinate DevSecOps engineers, developers, testers and infrastructure teams Create and maintain security processes, technical standards and operational runbooks Support incident response, patching, risk management and compliance activity Expereince required: You'll need strong hands-on experience across: AWS | Kubernetes/EKS | Terraform | GitHub ...

security or information security role Strong understanding of information security principles and risk management Hands-on experience with security monitoring and incident response Knowledge of Microsoft 365 and cloud security controls (e.g. Azure AD, Defender) Familiarity with regulatory and compliance requirements Ability to communicate technical risks clearly ...

with cloud environments, focusing on compliant, privacy‐aware design. Conduct comprehensive risk assessments and threat modelling for cloud and AI systems. Support incident response, including issues involving AI‐driven systems and automated agents. Provide actionable mitigation strategies for cloud and AI threats. Stakeholder Engagement & Technical Leadership Provide expert ...

Microsoft Purview or similar data protection platforms, including sensitivity labeling, DLP, information protection, classification, insider risk, or compliance management. Strong understanding of network security, incident response, threat hunting, vulnerability management, cloud security, and security reporting. Excellent communication, analytical, problem-solving, decision-making, interpersonal, and presentation skills with ...

SIEM/SOAR use-cases in Microsoft Sentinel (data connectors, analytics rules, workbooks, automation playbooks) to support SOC operations, threat detection, and incident response. Support DevSecOps practices and secure software development. Governance & Awareness Develop and maintain security policies, standards, and procedures. Provide guidance and training to project teams ...

associated with Thales’ IS/IT networks, systems and applications, as per Customer (primarily HMG UK MOD) and Thales Group policy and mandatory requirements.* **Incident Response:** Be responsible for the reporting, investigation and analysis of security incidents and potential breaches within classified environments, working with the Thales … Incident management team to ensure identified issues are resolved quickly.* **IS/IT Squad Engagement:** Develop security requirements, epics and stories, along with guidance & governance to squads to ensure data protection and data security are included in the scope of new and existing IS/IT Squad activities, initiatives ...

will take you seriously because you've been in the same code they have. The scope is broad: application security, infrastructure security, detection and response, and the assurance work that keeps our certifications standing. You won't be covering it alone. The security team is seven people and growing … infrastructure and engineering teams: identify the signals worth collecting, write rules that catch real attacks without drowning us in noise, and build the response playbooks behind them. Incident Response - Lead security investigations into the production environment end to end, from first signal to root cause, across incidents ...

security problems, mentoring others and driving meaningful improvements, we'd love to hear from you. What you’ll be doing Lead the investigation and response to complex cyber security incidents across cloud, endpoint, identity, network, email and application environments. Drive improvements to our Security Operations capability through enhanced detections … practical recommendations that support informed business decisions. What you’ll bring You’ll have experience in several of the following areas: Security Operations, Security Incident Response or Security Engineering. Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) technologies. Identity and Access Management, including ...

practices, while applying software engineering discipline including version control, code reviews, and testing.* Contribute to the SRE AI agent, IG’s agentic tooling for incident investigation and reliability review, built on AWS frontier models* Mentor junior SREs and Reliability Champions on reliability patterns and production engineering discipline … SLOs on customer journeys rather than per-service.* Assist and guide teams in system design, capacity planning, architectural reviews and closing observability gaps.**Own incident response and learning*** Facilitate blameless post-incident reviews (PIRs) within five working days using contributing-factor methodology* Maintain the Lessons Register, track ...