726 to 750 of 1,426 Incident Response Jobs in England

governance, security expertise and related teams. Ensure C&IR operates as an integrated department, connecting strategic cyber risk, operational insight, assurance findings, change demand, incident learning and external threat intelligence into a coherent plan of action. Skills/Experience Required We’re proud to be a Disability Confident Employer … risk or comparable enterprise risk functions in a complex organisation, with ability to lean in and drive team performance across all areas (including detection & response, Assurance, SSDLC, policy and AI Security). Demonstrated experience translating cyber and information resilience risk into senior-level decisions, priorities, control expectations and accountable ...

development and maintenance of cloud automation, testing, CI/CD and containerised infrastructure, working closely with code and build teams to streamline delivery. Lead incident management and root cause analysis, while identifying and implementing improvements to prevent recurring production issues. Strong professional experience in DevOps, Platform Engineering … Jenkins and GitHub Actions. Proven experience with Infrastructure as Code (Pulumi desirable), including designing and maintaining Infrastructure as Code. Strong experience with monitoring, logging, incident response and production troubleshooting. Experience containerising applications and operating containerised infrastructure such as Docker, ECS, Docker Swarm or Kubernetes. Strong understanding of cloud ...

provide visibility and control of information risks for Policing. It will support the 24x7x365 nature of the police operations, providing a threat detection and response capability for digital services before, during and after cyber attacks, enabling stakeholders to understand and proactively manage risk across the technology estate at both … Correlate intelligence from multiple sources (OSINT, SIGINT, internal telemetry, etc.) to build a comprehensive threat picture and drive proactive defence. Support and lead pre-incident planning, threat modelling, and attack surface reduction initiatives. Act as a senior point of contact during live incidents, supporting decision-making and coordinating intelligence ...

CrowdStrike and Splunk platforms. The successful candidate will ensure the effective integration, configuration, and operational use of security tools to enhance threat detection, incident response, and overall security maturity. Additionally, the role involves providing technical leadership, mentoring, and knowledge transfer to bolster internal cyber capabilities during a period … high‐severity security incidents, facilitating rapid investigation, containment, and remediation using EDR and SIEM tools. Develop and implement SOAR workflows to automate detection, response, and security operations processes. Conduct proactive threat hunting using SIEM/EDR data and MITRE ATT&CK‐aligned techniques. Support vulnerability assessment and security scanning ...

that standardize build, test, and deploy flows with auditable delivery. Automate onboarding and environment setup to minimize manual effort for application teams. Deliver runbooks, incident response guides, and self-healing automation for critical services. Contribute to platform architecture for shared hosting and delivery pipelines across multiple clouds. Design … logging, metrics, alerts, registries, DNS, and TLS. Enforce guardrails such as resource limits, quotas, network policies, and least-privilege access. Participate in post-incident reviews and drive improvements for reliability and cost efficiency. BASIC QUALIFICATIONS Strong experience in platform engineering, DevOps, and cloud-native infrastructure. Deep expertise in Kubernetes ...

END., Diptyque, ME+EM, Big Bus Tours, Selco and a Leading European Football Club. We manage the infrastructure, the Magento runtime, the deploy automation and incident response. Stack-wise, the application stack is: PHP+Apache+Varnish, MySQL/Aurora/MariaDB, Redis/Valkey, Elasticsearch/OpenSearch, Amazon MQ, EFS. The infra … bulk of it is tickets, requested changes, troubleshooting and deploy support. The next biggest chunk is improving the IaC and tooling we already have. Incident response is shared across the team. There’s also proactive platform work, and we’d like more of it as the team grows. ...

Enforce team‐wide quality objectives: lead design reviews, calibrate quality metrics, and improve logging, monitoring, alerting, and escalation policies. Serve as first responder or incident commander, model good incident practice, and turn what you learn into playbooks and backlog work. Introduce and guide AI best practices … into decisions at the right time, and explain trade‐offs clearly to technical and non‐technical audiences. Strong engineering craft: testing, code review, observability, incident response, security, and operational readiness, with experience designing for reliability. Comfort working on systems with high correctness and auditability requirements, including traceability ...

state of the art in AI-driven security. This includes building security products and tools, conducting original adversary research, developing detection and response capabilities, and translating security expertise into scalable, AI-native systems. Your domain knowledge — whether in detection engineering, threat intelligence, cloud security, adversary simulation, forensic investigation … years of hands-on security engineering experience5+ years of hands-on security engineering experience in one or more domains: detection engineering, threat intelligence, incident response, cloud security, adversary simulation, offensive security, or digital forensicsExtensive knowledge of attacker tactics, techniques, and proceduresProficiency in coding with experience in languages such ...

triage, prioritise, resolve and keep tickets updated. This is a core part of the role, not an occasional overflow duty. Work to agreed response and resolution SLAs and flag any ticket at risk of breach in advance. Handle access requests directly: password and MFA resets, account lockouts, licence … audits and surveillance visits, and drive remediation of findings to closure. Lead on client and prospect security questionnaires and due diligence requests. Participate in incident response, including out of hours where the severity requires it. Essential 5 or more years in systems administration, infrastructure or IT engineering, including ...

overall operational stability of software applications and systems Provide operational support for production systems in a “you-build-it-you-run-it” culture, including incident response and continuous reliability improvements. Leads evaluation sessions with external vendors, startups, and internal teams to drive outcomes-oriented probing of architectural designs … practices within the work environment to improve code quality, delivery speed, and operational outcomes (e.g., AI-assisted code review/refactoring, test strategy acceleration, incident/root-cause analysis support), while establishing consistent validation standards (secure coding, peer review, automated testing) and promoting reuse of effective patterns across ...

Develop and implement Group-wide IT & Cyber Security strategy Own security policies, governance frameworks and risk registers Lead cyber risk assessments, remediation and incident response Oversee external security partners and supplier security audits Lead annual penetration testing and security awareness programmes Support Cyber Essentials, Cyber Essentials Plus … knowledge Experience with Cyber Essentials, Cyber Essentials Plus, ISO 27001 or similar Practical knowledge of security technologies and SIEM platforms Cyber security risk and incident management experience Excellent stakeholder and communication skills A commercially minded, proactive and solutions-focused approach Willingness to travel within Europe when required This ...

Working with Cyber Security, Risk and Control and development teams to onboard applications and remediate vulnerabilities Supporting platform upgrades, patching, resilience, DR, monitoring and incident response What You'll Bring Strong hands-on experience of enterprise software build, packaging and deployment engineering Strong C# development skills … Server and on-premises hosting knowledge, working knowledge of Linux deployment patterns, and SQL Server database deployment (e.g. DACPAC) Experience working within formal change, incident and release management in a controlled, regulated environment Desirable: ASP.NET/ASP.NET Core, Entity Framework, NUnit/xUnit, ServiceNow integration, Terraform, Docker/Kubernetes ...

across cloud, network, SaaS, and on‐prem environments, identifying vulnerabilities, misconfigurations, and emerging threats. Support clients in enhancing cybersecurity controls such as data protection, incident response, endpoint security, and third‐party cyber oversight. Manage workstreams, coordinate junior team members, and ensure high‐quality delivery across assessments, reports … gaps. Knowledge of technology risk frameworks (e.g., ISO 27001, NIST, COBIT) and understanding of cyber domains such as IAM, cloud security, data protection, and incident response. Excellent client‐facing and communication skills to translate technical risks into clear business impacts and actionable recommendations. Project delivery and stakeholder management capabilities ...

This person will own the platform foundations Sanity engineers build on every day: cloud infrastructure, Kubernetes, networking, routing, observability, CI/CD, deployment paths, incident response, and the standards that make production ownership work across product teams. The scale is real. Content Lake alone handles around … line between Platform and SRE. Platform should own the shared foundations. SRE should help product teams run services well, with strong tooling, standards, and incident support. Raise the reliability bar across Sanity's production systems, including dashboards, alert severity, paging standards, service ownership, on‐call readiness, and incident ...

three main areas for Security Engineering and Operational activity:* Run Activity – Monitoring and acting as required on the health of various Security tools.* Incident Response – responding with appropriate actions as required regarding tooling within the remit of the SET.* Triaging requests incoming to the Engineering Team mailbox … health alerts from the Security Infrastructure we maintain.* You will learn how to tune and enable polices, features and enhancements as required in response to Security Incidents and general enhancements requested by the client.You can bring your whole self to work. At Capgemini building an inclusive future is part ...

resolution of complex and business-critical IT incidents. The role provides technical leadership, mentoring, and guidance to Service Desk colleagues while supporting major incident management, problem management, and continual service improvement. Working closely with infrastructure teams, End User Computing (EUC) engineers, and third-party suppliers, the post holder ensures … Microsoft 365, Windows operating systems, Active Directory, and enterprise technologies. Proven experience leading technical investigations and resolving complex IT incidents. Experience supporting major incident response, root cause analysis, and problem management activities. Strong leadership, mentoring, and coaching skills with the ability to support and develop technical colleagues. Experience ...

Manager and Akamai's rule tree model, Edge DNS and traffic management, edge security controls, and certificate lifecycle – from routine property changes through to incident diagnosis and long-term modernisation of the estate. If you care about content delivery and edge infrastructure, and want your work to have direct … HTTP/2 and HTTP/3, image and video delivery, API acceleration – and run purge and cache invalidation workflows that support release and incident response* Support multi-CDN and failover strategy through Global Traffic Management, and contribute to disaster recovery and resilience planning for edge delivery**Secure ...

Cloud‐Native Analytics & AI/ML Enablement Design, deliver and maintain cloud‐native ML/analytics pipelines in Azure for real‐time detection and response Design pipelines to automate deployment of production models and automations to counter emerging threats Prototype, validate and scale new analytic techniques - turning research into … production capability Cybersecurity Science & Rapid Response Conduct cybersecurity industry research and rapidly develop data‐driven prototypes for live operational problems Support mitigation of advanced criminal and nation‐state adversarial techniques Jump in on urgent vulnerabilities or emerging threats - making a difference when it matters most Work across cyber domains ...

leading provider of AI-powered extended managed detection and response (MXDR) services, Ontinue is on a mission to be the most trusted, 24/7, always-on security partner that empowers customers to embrace the future by using AI to operate more strategically, at scale, and with less risk. … valuable insights and recommendations to clients. Fluent in English. Nice to Have: Scripting/programming skills to automate security tasks and processes. Experience in incident response and threat hunting, enhancing your ability to detect and respond to security incidents effectively. Deep expertise in Microsoft Entra, contributing to comprehensive ...

VPNs, Wi-Fi and DNS Experience with Cisco, Fortinet or similar network/security hardware Strong security focus across patching, hardening, vulnerability management and incident response Understanding of GDPR, PCI or ISO27001 environments Clear communicator with strong ownership and good judgement This role suits someone who wants ...

risk reviews Perform threat-hunting and vulnerability management activities Collaborate with global teams to support follow-the-sun security operations. Experience in cybersecurity operations, incident response, or security monitoring Strong analytical, troubleshooting and communication skills Knowledge of security technologies, threats and risk management Experience working with cloud ...

refine CI/CD automated deployment pipelines (GitHub Actions, ArgoCD). Implement comprehensive observability, tracing, and monitoring stacks (Datadog, Prometheus, Grafana). Establish incident response protocols and perform blameless post-mortems for operational improvements. Key Requirements 7+ years in DevOps, Infrastructure, or Site Reliability Engineering within production SaaS ...

architectural experience across at least two of SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence • Strong understanding of security operations, threat detection and incident response • Experience designing both on-prem and cloud security architectures • Understanding of security principles including least privilege, encryption, resilience and scalability • Experience working with ...

scope projects and prioritise work Run sprint planning and delivery, track velocity and remove blockers Champion testing, CI/CD, monitoring and observability Guide incident response and root cause analysis Translate technical concepts into business impact, and the reverse Contribute to budgeting, resource planning and technology strategy What ...

availability Implement self-service tooling to empower development teams Drive DevOps best practices across the digital product lifecycle Develop and enhance monitoring, observability, and incident response processes Support global engineering teams delivering high-traffic platforms Key Requirements Proven experience supporting digital product delivery in a DevOps or platform ...