26 to 50 of 61 Incident Response Jobs in Hertfordshire

security incidents on critical client infrastructure. In-depth analysis of network traffic, logs, and system events to identify potential security threats and vulnerabilities. Provide Incident Response support. Maintain, improve and develop team knowledge of SOC tools, security operations and triage. Prepare reports for managed clients to both technical … technical audiences and continuously improve their content and presentation. Maintain and update security incident documentation, including incident reports, analysis findings, and recommended mitigation strategies. What you will bring : Experience in Security Operations Centre. Demonstrable experience of Managing Microsoft Sentinel or Splunk implementations. Knowledge and experience with Mitre ...

multiple customers.You will oversee and mentor a skilled team of analysts, fostering a culture of continuous learning, champion best practices in threat detection and incident management, and play a key role in safeguarding our organisation’s digital environment. Communications with key business partners is key regarding risks, threats … with NIST Cybersecurity, MITRE ATT&CK, Splunk, Sentinel and ISO27001 is vital What you will be doing: Lead, mentor, and develop SOC analysts and incident responders. Provide technical direction, conduct performance reviews, and foster continuous improvement. Oversee full lifecycle of security incidents from detection to resolution. Ensure compliance with ...

working with the best standard technologies.The SOC Analyst reports to the SOC Manager. The SOC Analyst conducts a range of analysis and assists the incident response team with investigations that need to be escalated to an embedded member of staff. The SOC Analyst key responsibilities are: Effective Tier … threat hunting in collaboration with the CTI function Assist IR in HR and InfoSec related investigations Ensure the timely triage and remediation of any incident or request tickets raised to the SOC Participate in the activity of adding/removing URLs from the AcceptList and BlockList Attend routine security ...

with the best standard technologies. The SOC Analyst reports to the SOC Manager. The SOC Analyst conducts a range of analysis and assists the incident response team with investigations that need to be escalated to an embedded member of staff. The SOC Analyst key responsibilities are: Effective Tier … threat hunting in collaboration with the CTI function Assist IR in HR and InfoSec related investigations Ensure the timely triage and remediation of any incident or request tickets raised to the SOC Participate in the activity of adding/removing URLs from the AcceptList and BlockList Attend routine security ...

incidents. Help implement security best practices and policies to protect digital assets. Gain exposure to SIEM tools and security monitoring platforms. Assist with creating incident response documentation and security reports. Support compliance efforts and basic risk assessments aligned with industry standards. Learn about network security concepts, including firewalls … methodologies. What You'll Gain Hands-on exposure to real-world cybersecurity operations and defensive strategies. Practical experience with vulnerability assessment, security monitoring, and incident response. 1:1 mentorship from experienced cybersecurity professionals. Internship Certificate and Letter of Recommendation upon successful completion. Opportunity for a Pre-Placement Offer ...

Benchmarks, EU AI Act, GDPR) and adapt processes accordingly. Operational Security Oversee day-to-day security operations, including vulnerability management, access reviews, and incident response readiness. Provide insights and triage signals from security tooling (SAST, DAST, dependency scanning, SIEM). Work hands-on to perform internal security assessments ...

Benchmarks, EU AI Act, GDPR) and adapt processes accordingly. Operational Security Oversee day-to-day security operations, including vulnerability management, access reviews, and incident response readiness. Provide insights and triage signals from security tooling (SAST, DAST, dependency scanning, SIEM). Work hands-on to perform internal security assessments ...

environment. This SOC places a strong emphasis on development, with clear progression pathways into Threat Intelligence, SOC Engineering, Professional Services, Senior SOC roles, and Incident Response. Key Responsibilities Detect & Investigate Monitor and triage alerts across SIEM, EDR/XDR, email, and web security platforms. Investigate suspicious activity and assess ...

timely remediation. Manage and maintain LogicMonitor for cloud platform monitoring: Create and update logicmodules Configure alert rules and escalation chains Manage ServiceNow integration for incident handling Build and maintain dashboards Optimize alerting to prevent alert storms and missed alerts Provide support for ITHC coordination, access provisioning, and post-engagement … manage Workbooks Configure Azure Policies for security posture Implement regulatory compliance templates Hands-on experience with LogicMonitor and ServiceNow integrations Proven ability to lead incident response and vulnerability remediation efforts Nice-to-Have Skills: Familiarity with multi-cloud environments (AWS, GCP) Experience in coordinating ITHC assessments and managing ...

Stevenage The CERT Incident Responder is responsible for leading digital forensics and incident response (DFIR) readiness. While also advancing the organisation's Adversarial Exposure Validation (AEV)- including Red and Purple Team activities The role ensures detection, response, and control validation against real-world threat actor tactics ...

standards. Working with our Crypto custodians to ensure accurate transfer of information and maintaining records. Coordinate crypto change windows (key loads/rollovers), support incident response related to crypto assets, and drive continuous improvement of crypto processes. Ensure that Key Material is ordered from NCSC/ ...

contact (SPOC) for all security and cybersecurity matters related to the platform. Partner with the CISO to align on security strategy, compliance, and incident response. Coordinate third-party penetration tests, audits, and manage remediation plans. Ensure compliance with relevant frameworks and regulations (ISO 27001, SOC2, GDPR). Communicate security ...

contact (SPOC) for all security and cybersecurity matters related to the platform. Partner with the CISO to align on security strategy, compliance, and incident response. Coordinate third-party penetration tests, audits, and manage remediation plans. Ensure compliance with relevant frameworks and regulations (ISO 27001, SOC2, GDPR). Communicate security ...

notes. Ensure compliance with ITIL processes and organizational standards. Conduct release readiness reviews and post-implementation audits. Develop and maintain standard operating procedures (SOPs), incident response plans, and knowledge base articles, to enable efficient incident resolution and problem diagnosis. Qualifications & Skills Required : 8+ years of experience ...

notes. Ensure compliance with ITIL processes and organizational standards. Conduct release readiness reviews and post-implementation audits. Develop and maintain standard operating procedures (SOPs), incident response plans, and knowledge base articles, to enable efficient incident resolution and problem diagnosis. Qualifications & Skills Required : 8+ years of experience ...

Network Security Engineer, where you will play a key role in safeguarding our organisations' network infrastructure as part of the 24x7 Internal Security Response (ISR) team. When not involved in incident response and triage activity with the SOC team, you will be responsible for designing, implementing ...

Network Security Engineer, where you will play a key role in safeguarding our organisations' network infrastructure as part of the 24x7 Internal Security Response (ISR) team. When not involved in incident response and triage activity with the SOC team, you will be responsible for designing, implementing ...

Azure, AWS, and hybrid cloud environments. Strong proficiency in Terraform and Infrastructure-as-Code (IaC) practices. Solid experience with CI/CD, observability tooling, incident response, and automated deployments. Comfort navigating and improving legacy infrastructure and multi-language environments (.NET and Ruby). A security-first mindset with ...

Azure, AWS, and hybrid cloud environments. Strong proficiency in Terraform and Infrastructure-as-Code (IaC) practices. Solid experience with CI/CD, observability tooling, incident response, and automated deployments. Comfort navigating and improving legacy infrastructure and multi-language environments (.NET and Ruby). A security-first mindset with ...

focus on safety, compliance, and innovation. Description Lead implementation of OT security tools and controls. Assess and improve OT network architecture and protocols. Drive incident response and post-incident analysis. Support vulnerability and asset management frameworks. Contribute to risk assessments aligned with IEC62443 and NCSC CAF. Deliver ...

internal governance efforts for responsible AI and security policy alignment Ensure AI implementations comply with organizational and regulatory standards Guide anomaly detection, logging, and incident response for AI behaviors Monitor evolving AI threats and continuously improve internal architecture patterns Share knowledge and mentor teams to elevate internal ...

components using Power Automate and Azure Service Bus Support the setup and maintenance of development and production environments Participate in technical assessments, troubleshooting, and incident response activities Provide L2/L3 application support as part of the SAS team Contribute to technical documentation, knowledge sharing, and continuous process … development languages Experience working with Azure cloud services and automation tools Support and Operations Background providing L2/L3 application support Experience with incident management, root cause analysis, and troubleshooting Ability to work within defined SLAs and structured support processes Collaboration and Communication Strong team player with experience working ...

components using Power Automate and Azure Service Bus Support the setup and maintenance of development and production environments Participate in technical assessments, troubleshooting, and incident response activities Provide L2/L3 application support as part of the SAS team Contribute to technical documentation, knowledge sharing, and continuous process … development languages Experience working with Azure cloud services and automation tools Support and Operations Background providing L2/L3 application support Experience with incident management, root cause analysis, and troubleshooting Ability to work within defined SLAs and structured support processes Collaboration and Communication Strong team player with experience working ...

high-performance security operations environment, protecting critical infrastructure and ensuring the resilience of complex enterprise networks. You'll work within a 24/7 Incident Response function, combining hands-on engineering with real-time threat detection, investigation, and remediation. Key Responsibilities: Monitor, investigate and triage security events within ...

high-performance security operations environment, protecting critical infrastructure and ensuring the resilience of complex enterprise networks. You’ll work within a 24/7 Incident Response function, combining hands-on engineering with real-time threat detection, investigation, and remediation. Key Responsibilities: Monitor, investigate and triage security events within ...