101 to 125 of 757 Incident Response Jobs in London

architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective actions Lead incident response efforts, including investigation and remediation of security breaches Support our internal security awareness and training programs, advocating the DevSecOps mindset that we have … risk and impact to us A proactive approach to staying updated with the latest security threats, vulnerabilities and mitigation techniques Thorough understanding of the incident response process (preparation, identification, containment, eradication, recovery, lessons learned) What skills are desirable: In-depth knowledge of network security, including core routing ...

actively participates in supporting/governing forums Contribute to the analysis and mitigation of data protection risks Monitors information security incidents, contributing to incident response and root cause analysis. Will own resulting actions as required where they relate to required changes in IT Security and Information Risk Management … policy and controls Security operations and incident response, liaison with internal teams and 3rd party suppliers Desirable Skills and Experience Experience with the design concepts associated with adoption of Cloud platforms (AWS and/or Microsoft Azure) An understanding of the native security capabilities and good practice within ...

employee systems Security tooling and automation , including checks built into CI/CD, so the same work is never done manually twice Detection and incident response , from logging and alerting through investigation and recovery, turning each incident into a lasting improvement to systems and controls AI security … Python or a comparable language, and you integrate security checks into how engineers already work Detection and response. Understanding of security logging, monitoring and incident investigation, and comfort owning a problem through investigation, remediation and verification Risk judgement at startup pace. You start from the likely harm and attack ...

Fluidstack is seeking a senior security incident response leader to own end-to-end incident handling across corporate, cloud, and data center environments. You will develop detection logic and playbooks, conduct digital forensics, and drive permanent improvements through post-incident reviews. You will stand ...

security controls, tooling and processes that protect our cloud, application, Microsoft 365 and infrastructure environments. You'll work across security engineering, threat detection, incident response, vulnerability management, cloud security and cyber resilience, partnering closely with engineering teams and our external Security Operations Centre to strengthen our security posture … navigating your own. What you’ll be doing Building and improving security controls across our cloud and Microsoft 365 environments Developing detections, automations and response capabilities using SIEM, SOAR and security tooling Investigating and responding to security incidents and helping drive lessons learned Conducting threat hunting and using threat ...

source onboarding, data connector, normalisation, retention, ingestion, cost-management and data-residency requirements across cloud, on-premises and third-party services. Develop detection and response architectures covering analytics rules, MITRE ATT&CK-aligned use cases, threat hunting, workbooks, watchlists, automation and SOAR playbooks. Design secure integrations with ITSM, CMDB … threat intelligence, vulnerability management, identity, network and incident response processes. Produce and own architecture artefacts including requirements, High-Level Designs (HLDs), Low-Level Designs (LLDs), reference patterns, design decisions, migration roadmaps, test criteria and as-built assurance. Broader security architecture: Lead architecture reviews and design engagements across cloud ...

join a busy, global security operations team. This is an excellent opportunity for a security professional with experience in monitoring, threat detection, and incident response to work within a fast-paced enterprise environment. Hours of work: Sunday to Wednesday, 8:00am - 5:45pm Day rate … month in the London City office Required Skills & Experience Previous experience in cyber security, IT operations, or a related field. Experience with security monitoring, incident response, or security operations. Familiarity with SIEM platforms such as Splunk or QRadar. Understanding of cyber security frameworks and threat detection methodologies. Knowledge ...

authentication and privileged access. Lead vulnerability management activities, prioritising remediation based on risk and potential business impact. Establish effective security monitoring, threat detection and incident response arrangements. Coordinate responses to significant security incidents, ensuring a calm, structured and effective approach. Assess third-party and supplier security risks … would be advantageous. Strong understanding of identity and access management, authentication, privileged access and access-control principles. Experience in vulnerability management, security monitoring and incident response, including coordinating significant security incidents. A track record of developing or improving security policies, technical standards and operational controls. Experience assessing technical ...

configuration, database schema creation, and operational workflows across cloud and on-prem platforms.* Support production systems with a focus on high availability, disaster recovery, incident response, vulnerability management, patching, and change management.* Containerize applications and support deployments using container orchestration platforms.* Partner with development teams to understand application … engineering tools to accelerate development, automation, troubleshooting, documentation, and operational workflows.* Identify, design, and help implement AI-enabled operational capabilities for infrastructure automation, observability, incident response, and platform engineering.* Contribute to the strategy for safe, practical, and secure adoption of AI across infrastructure and DevOps practices.* Lead ...

practical use of AI‐assisted features within security tools to improve efficiency and consistency. Maintain andenhanceourtools and platforms to continuously improve ourintelligence,detection and response capability. Perform in-depth investigation and analysis of security alertsto identify and promptly respond to securityevents. Collaboratewith key stakeholders during investigations to gather further … information and coordinate response actions. Derive value fromrelevant threat intelligence to drive proactive action. Influencethe strategic direction of our team by presenting insight into the security events, alerts and incidents we handle. Maintain a broad understanding of IT/online environments and key company assets to enhance decision making ...

standards. Corporate Investigations: Ensure any Operating Companies investigations and data/evidence acquisitions is conducted following WPP polices and process. Coordinate and manage the response to security incidents within the region, working closely with the Enterprise Technology Cyber Incident Response team. Lead investigations for the business … regional security standards and regulations (e.g., GDPR, ISO 27001). Experience in a global, multi-national organisation. Proven track record in risk management, incident response, and security policy implementation. Demonstrated experience in working with global teams and functions. Excellent communication and interpersonal skills, with the ability to influence ...

UBDS Group in London or Manchester seeks an experienced Cyber Incident Response Consultant to join our Security and Infrastructure Operations Centre (SIOC). You will lead and support live incident responses across Microsoft and AWS environments, perform digital forensics, and advise customers on containment and remediation strategies. … role is hands-on, customer-facing and requires strong expertise in EDR, SIEM and forensic tooling, with a focus on delivering robust incident reports and #J-18808-Ljbffr ...

Bridewell is seeking an experienced incident responder to support the delivery and improvement of incident response services across endpoint, network, and cloud environments. You will follow triage processes, investigate incidents with senior responders, and perform forensic activities on devices and mobile platforms. Travel to client locations ...

Consultant to join us in London. As an Associate Consultant you will provide technical expertise and consultative solutions in the field of Digital Forensics, Incident Response, Cyber Security and eDiscovery for our clients. Our clients include Law Firms, Fortune 500 multi-nationals, and Government/Law Enforcement. … regional and international Discovery & Data Insights teams (DFIR/Legal Technologies/Data Analytics) as well as working closely with our Cyber Response and Crisis Management divisions as well as our Investigations teams. As an Associate Consultant you will play a crucial role in supporting our team of experienced ...

Azure Improving platform monitoring, observability, resilience and performance Supporting SQL Server and Azure SQL environments, including access, backups and troubleshooting Contributing to vulnerability management, incident response and operational security Strong experience across the Microsoft Azure platform , including compute, networking, storage, identity, monitoring, security and governance Strong Azure DevOps … routing, firewalls and private/hybrid connectivity Experience across Microsoft 365, Intune and endpoint management Understanding of vulnerability management, threat alerts and incident response This is an excellent opportunity for an experienced Azure DevOps Consultant to join a leading Microsoft Services environment and contribute to the delivery ...

assurance engagements under the guidance of more experienced colleagues. Assist with gathering, reviewing and organising client evidence, including policies, procedures, risk registers, supplier documentation, incident response materials and control artefacts. Help identify cyber security risks, control gaps and areas for improvement, and contribute to clear, evidence-based observations … recommendations. Contribute to the development and review of cyber security policies, procedures, standards, response plans and supporting governance documentation. Support third-party and supplier cyber security reviews by assessing due diligence information and helping document practical findings. Prepare first drafts of client reports, meeting notes, working papers, presentations ...

Morgan in London is looking for a Security Operations Senior Associate to strengthen threat analysis and incident response across our cybersecurity program. You will detect, assess, and respond to threats, coordinating with cross-functional teams to improve security controls and awareness. The role requires hands-on experience with ...

cloud environments using infrastructure as code and repeatable automation Improve production reliability through well-defined SLOs, graceful degradation, self-healing, automated recovery, and effective incident response Create self-service workflows and platform abstractions that reduce cognitive load and help R&D teams ship and operate software more effectively … networking Experience administering and scaling multi-tenant Kubernetes clusters and streaming platforms such as Kafka in production, including upgrades, workload isolation, reliability, security, and incident response Experience building and maintaining infrastructure as code, pipeline-as-code, containerization, and cloud-native systems using tools such as Terraform, Helm, Ansible ...

drive automation efforts to reduce operational toil, and help build resilient systems that deliver exceptional customer experiences. You will leverage your expertise in observability, incident response, and distributed systems to proactively identify and resolve reliability challenges. Working closely with engineering teams, you will design and implement solutions that … deployment rollbacks. AWS Networking & Security: Proficiency in VPCs, networking, ALBs, Route53, ACM/TLS, IAM, OIDC, Secrets Manager, KMS, and cloud security best practices. Incident Response & Observability: Skilled in troubleshooting using logs, metrics, alarms, deployment history, root cause analysis, rollback decisions, and operational runbooks. Linux & Automation: Strong Linux ...

through to resolution Set clear ownership and performance standards so reliability and service quality stay central to technical and business decisions Lead observability and incident response Partner with the Infrastructure Team to design, implement, and continuously improve monitoring, observability, and fault-diagnostic practices Lead major incident management … Troubleshoot and resolve complex issues hands-on Be available for out-of-hours and weekend support to resolve critical incidents quickly Run consistent post-incident reviews, with root causes identified and corrective actions tracked through to completion Prepare for the big moments Lead operational readiness reviews ahead of major ...

identify risks and vulnerabilities in people, processes, and technology. In this role, you will design and execute Red Team assessments to evaluate preventative controls, incident response processes, and detection capabilities, and advise cross-functional teams on security strategy and risk management. This position is anticipated to require … operating within financial services environments and knowledge of sector-related cybersecurity or resiliency organization practices, operations risk management processes, principles, regulations, threats, risks, and incident response methodologies Experience delivering regulatory-driven red team testing such as CBEST, TIBER, and iCAST Experience of targeting cloud-based environments such ...

WithSecure is seeking a Senior Incident Response Investigator to lead investigations for clients and produce high-quality reports. You will work on targeted attacks across large enterprise networks, with exposure to diverse OS environments and complex security architectures. The role involves incident readiness support, report writing ...

Methods is seeking a Senior Cyber Analyst to lead complex investigations and incident response, providing strategic direction to maintain a robust security posture for clients. You will own detection rules and playbooks for Microsoft Sentinel, Defender XDR, SIEM, SOAR, EDR and XDR, while mentoring the Cyber Services team. ...

cyber security strategy and roadmap. Own and continuously improve ISO 27001 and Cyber Essentials Plus. Lead security operations and manage an outsourced SOC. Oversee incident response, vulnerability management and remediation. Manage external security partners and specialist suppliers. Lead and mentor the Information Security team. Work closely with senior … Proven experience owning and improving ISO 27001 and security governance. Experience managing outsourced SOC and security partners. Strong knowledge of security operations, threat detection, incident response and vulnerability management. Good understanding of Microsoft/Azure, cloud security, SaaS assurance and security architecture. This is a senior leadership opportunity ...

ensure smooth deployment processes across environments Participate in on-call rotations and act as an escalation point for production incidents Lead or contribute to incident response and post-mortems, driving long-term improvements Core Tech Stack AWS (Primary) CloudWatch (or integration with tools like Datadog) Infrastructure & Automation Terraform … Directory/identity integration IIS and .NET application hosting PowerShell scripting and automation Observability & Operations Monitoring and alerting platforms (Datadog, CloudWatch, etc.) Logging and incident response tooling Qualifications What We’re Looking For Extensive experience in DevOps, Cloud Engineering, or Systems Engineering Strong hands-on experience with ...