551 to 575 of 1,463 Incident Response Jobs in England

Security Oversight: Ensure compliance with security standards and frameworks (e.g., Microsoft best practice, CIS, NIST). Oversee vulnerability management in terms of patching and incident response. Work closely with SOC teams to remediate and maintain a secure client environment. Automation & Tooling: Design and implement automation workflows using PowerShell, Python ...

path reviews. You will build and maintain the platforms necessary for developing and deploying proof-of-concept (PoC) exploits and validations, ensuring detection and response capabilities across cloud infrastructure. In this engineering-centric role, you will require deep technical expertise in cloud environments, Kubernetes security, and platform automation. … will work closely with Incident Response, Platform Engineering and Security Architects to ensure that security validation and defensive hardening are seamlessly integrated into infrastructure and operational workflows. Your role will require participation in a rotating on-call schedule outside of core business hours and over the weekend ...

recovery readiness across critical platforms Support high availability solutions and service resilience initiatives Implement proactive monitoring, alerting and observability for database services Participate in incident response, problem management and post-incident reviews Drive continual improvement through automation, root cause analysis and operational learning Reduce operational toil through … enterprise environments Automation experience using PowerShell, Python or similar scripting languages Strong understanding of database security, access control and governance Experience working within structured incident, problem and change management processes Strongly Preferred PostgreSQL administration and engineering experience Experience supporting enterprise data warehouse environments Databricks administration or integration experience Azure ...

maintain the organisation's cyber security capabilities. You will have a broad remit across Microsoft security technologies, identity and access management, vulnerability management, incident response, SIEM/SOAR, threat hunting and cloud security, while also providing security advice to technology projects and supporting security-by-design principles. … have: Strong knowledge of Microsoft Security technologies. Experience with Microsoft 365, Entra ID, Intune and Defender. Knowledge of SIEM/SOAR, vulnerability management and incident response. Understanding of cloud security and network security principles. Experience supporting security assessments, audits and penetration testing. Knowledge of security frameworks including NIST ...

planning, code reviews, architecture sessions, and retrospectives to drive delivery outcomes Establishes reliability goals and implements observability, resilience patterns, and operational readiness practices Leads incident response and post-incident reviews to improve production stability and performance; identifies recurring issues and drives automation/remediation Upholds secure ...

quality, resilience and operational excellence. Drive continuous improvement in engineering metrics including deployment frequency, lead time, reliability, change failure rate and operational excellence. Lead incident response and post-incident learning for systems owned by the team. Many of them are used live by agents and claims handlers ...

identity approach. Guarantee performance, reliability and security: Set the standards for Core Web Vitals, availability, observability, supply-chain and third-party script security, and incident response, and lead technical response and root-cause analysis for major web and advertising incidents. Hold the line on privacy and compliance ...

Kubernetes-based environments. You will be at the intersection of security and engineering, developing scalable tooling, automating security controls, and enabling robust detection and response capabilities across our cloud infrastructure. In this role, you will require deep technical expertise in cloud environments, Kubernetes security, and platform automation. You will … work closely with Incident Response Engineers and platform teams to ensure that security is seamlessly integrated into our infrastructure and operational workflows. Your role will require participation in a rotating on-call schedule outside of core business hours and over the weekend to ensure security incidents ...

This is a customer-facing consultancy role where you'll work with a wide range of organisations to design, develop and optimise detection and response capabilities across leading SIEM, XDR and SOAR technologies. You'll combine deep technical expertise with strong consulting skills, helping customers improve their security maturity … framework and current threat techniques. Assessing customer telemetry and identifying opportunities to improve visibility and detection coverage. Building SOAR automations, integrations and response workflows to reduce manual effort. Developing incident response playbooks that support effective Security Operations Centre (SOC) processes. Applying threat intelligence to continuously improve detections ...

cloud environments. Improve detection accuracy through continuous tuning and use case development. Troubleshoot and resolve log ingestion and data quality issues. Threat Detection & Incident Response Design and deploy advanced detection use cases covering modern attack techniques. Translate threat intelligence into actionable monitoring and detection capabilities. Perform proactive threat … hunting activities. Contribute to security playbooks, response procedures, and operational improvements. Security Advisory Provide expert guidance on application and infrastructure security. Support the evaluation and proof of concept of emerging security technologies. Act as a subject matter expert across cyber security initiatives. Required Experience 5+ years' experience in Security ...

Alldus is recruiting a Lead VRM Consultant to join a London-based team on a contract basis. You will implement ServiceNow Vulnerability Response and Security Incident Response, tying in scanning tools and patching platforms to strengthen vulnerability management and remediation timelines. You will collaborate with client security ...

. This is a key role within our Managed Security Services Provider (MSSP) environment, where you will lead on the analysis and response to security incidents across multiple client environments. Working closely with the SOC Team Lead, you will support day‐to‐day monitoring and investigation activities, engage directly … helping to shape the future direction of our security services. Key Responsibilities Monitor, triage and investigate security alerts across multiple platforms Conduct in-depth incident analysis and support ongoing client investigations Act as deputy to the SOC Team Lead when required Review and assess escalated Tier 2 alerts ...

security governance, management and operations. This is a lead individual contributor role able to both implement and verify automated controls in detection and response, identity and access, data protection, product security, or control assurance. The responsibilities below are a broad sample of security engineering across the information security function. … endpoint alerts, to ensure security logging and monitoring coverage meets the needs of CFC's business objectives and its technology and threat environments. Leads incident response operations and continuous improvement from investigation through containment and recovery, publishes incident reports with revised playbooks. Designs and operates threat assessment ...

customer-facing platforms and developer experience. The role combines strong software engineering with operational excellence, taking ownership of platform reliability, observability, automation and incident reduction. It works closely with software engineers, architects, security teams and product teams so services meet availability, performance and resilience targets while enabling rapid … eliminate operational toil through automation, self-service capabilities and better engineering workflows. Participate in on-call rotations supporting production services and lead technical incident response during major incidents. Drive root cause analysis and ensure meaningful preventative actions are delivered after incidents. Improve operational readiness through runbooks, playbooks, automation ...

monitor systems, identify and remediate vulnerabilities, and respond effectively to security incidents. The role requires practical knowledge of SIEM, vulnerability management, threat detection and response, together with strong investigation and troubleshooting skills.The role will analyse cyber threats, support forensic investigation where required, and contribute to security operations, incident response, monitoring and operational reporting across the cyber security function.What you will be doingAs a trusted part of the IT team you will be responsible for:Security OperationsMonitor and review security alerts and incidents, ensuring they are investigated, recorded, prioritised and escalated appropriately.Investigate cyber security incidents and support ...

/CD pipelines and policy-as-code guardrails. Leverage AI agents extensively to automate and optimise platform work - provisioning, cost and performance optimisation, incident response, remediation and documentation. Prepare the infrastructure for AI agents as first-class \"engineers\": safe machine identities, scoped permissions, sandboxes, approval workflows and audit … agent identities; secure by default, least privilege, secrets management and continuous compliance. Apply SRE practices - SLOs/SLIs, observability, capacity planning, resilience and blameless incident management - to keep the platform reliable and cost-efficient. Partner with data engineering to design and optimise data pipelines, data stores and large-scale ...

focus on automation, observability, and operational excellence. You design solutions that account for failure modes and long-term maintainability. Your technical leadership extends to incident management, root cause analysis, and cross-functional collaboration with Engineering, Security, and Cloud teams. At Synopsys, you will own the infrastructure services that underpin … Doing Own the reliability, availability, and operational health of LDAP, SMTP, DNS, DHCP, and other Unix-based infrastructure services. Manage day-to-day operations, incident response, troubleshooting, performance tuning, and capacity planning. Lead infrastructure projects, including solution design, deployment, upgrades, and service modernization. Drive automation through scripting ...

What You'll Be Doing Protect and secure Windows and Linux environments across corporate and production infrastructure Enhance endpoint security controls, monitoring, detection, and response capabilities Help design, implement, and maintain cloud security controls across Azure and other cloud environments Partner with software engineers to embed security throughout … remediation Build and improve DevSecOps capabilities within CI/CD pipelines Lead vulnerability management activities, including scanning, prioritisation, risk assessment, and remediation tracking Support incident response investigations and security monitoring activities Develop security automation to improve operational efficiency and reduce risk Contribute to security architecture reviews and technology ...

What You'll Be Doing Protect and secure Windows and Linux environments across corporate and production infrastructure Enhance endpoint security controls, monitoring, detection, and response capabilities Help design, implement, and maintain cloud security controls across Azure and other cloud environments Partner with software engineers to embed security throughout … remediation Build and improve DevSecOps capabilities within CI/CD pipelines Lead vulnerability management activities, including scanning, prioritisation, risk assessment, and remediation tracking Support incident response investigations and security monitoring activities Develop security automation to improve operational efficiency and reduce risk Contribute to security architecture reviews and technology ...

Monitor and triage security alerts within Splunk SIEM. Investigate security incidents including phishing attacks, credential abuse, malicious process activity, and suspicious network traffic. Support incident response activities through containment and escalation procedures. Maintain detailed security case documentation and investigation notes. Contribute towards operational metrics including MTTD and MTTR … detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with Windows, Linux, authentication systems, and endpoint security logs. Strong communication and stakeholder engagement skills. Desirable Skills ...

report directly to the CTO and have broad scope across the platform (from CI/CD pipelines to multi‐tenant APIs to incident response on authentication flows). Responsibilities Own the secure SDLC: drive SAST, dependency scanning, secrets detection, and PR‐blocking standards across every repository. Harden … Threat‐model product features before they ship, new Auth provider, expanded multi‐tenant APIs, connector executions, agent tool‐calling paths etc. Build detection and response capability around credential and authentication flows, with observability that closes incidents fast. Partner with engineering to raise the bar day‐to‐day: architecture reviews ...

cases, dashboards, playbooks and automation to improve coverage and reduce unnecessary alert volume. Support digital forensic analysis, malware and phishing analysis, and post-incident reviews as required. Analyse relevant threat intelligence, vulnerabilities and supplier advisories, assess PA exposure and recommend proportionate actions. Support vulnerability and exposure management through reporting … paid out-of-hours on-call rota and respond to high-severity incidents when required. Essential skills and experience Practical experience in a SOC, incident response, security monitoring, detection engineering or a closely related technical security role. Strong investigation, log analysis and correlation skills across endpoint, identity, email ...

cases, dashboards, playbooks and automation to improve coverage and reduce unnecessary alert volume. Support digital forensic analysis, malware and phishing analysis, and post-incident reviews as required. Analyse relevant threat intelligence, vulnerabilities and supplier advisories, assess PA exposure and recommend proportionate actions. Support vulnerability and exposure management through reporting … hours on-call rota and respond to high-severity incidents when required. Qualifications Essential skills and experience Practical experience in a SOC, incident response, security monitoring, detection engineering or a closely related technical security role. Strong investigation, log analysis and correlation skills across endpoint, identity, email, cloud ...

Server, and NAT Gateway. Support hybrid connectivity, including site-to-site and point-to-site VPN and ExpressRoute, monitoring gateway health and assisting with incident response alongside the Network Operations team and carriers. Maintain name resolution across Azure and on-premises using Azure DNS, Private DNS zones … troubleshooting, scripting, and documentation, validating all outputs for accuracy and security. Document runbooks, troubleshooting guides, and known-issue write-ups, and communicate ticket and incident status clearly to technical and non-technical stakeholders. Required Qualifications: Hands-on experience in network, cloud, or platform engineering, including at least 4 years ...

code. Build CI/CD pipelines that support frequent, reliable deployments. Establish monitoring, logging, tracing and alerting, with clear service reliability targets. Lead incident response, on-call practices and reviews that turn production issues into lasting improvements. Develop resilience and disaster recovery plans. Implement secrets management, network protection … Experience with Terraform or comparable infrastructure-as-code tools. Knowledge of Docker, Kubernetes and CI/CD tooling. A solid understanding of observability and incident management. Strong cloud security knowledge and an understanding of operating within a regulated environment. An automation-first approach and confidence taking ownership ...