101 to 125 of 715 Incident Response Jobs in London

scheduled information security on‐call rotation; assess urgent alerts and incidents, initiate containment or escalation procedures, engage appropriate stakeholders, and maintain clear incident handoffs. Key Deliverables Security alerts, incidents, and ServiceNow requests resolved and documented within defined service‐level targets. Zscaler, email‐security, identity‐security, and Microsoft security‐platform … security risk, with identified control gaps, exceptions, and remediation actions documented and tracked. On‐call security events triaged, documented, and escalated within established response targets. Required Experience Five or more years of progressive experience in information security, security operations, incident response, or a related discipline. Hands ...

availability standards. Supply Chain Resilience: Assess the security posture of third-party APIs and integrations to prevent data leaks or service disruptions. Operational Excellence & Incident Response Incident Commander: Lead the response to information security incidents. Act as the primary escalation point, coordinating containment while providing clear ...

move quickly without compromising stability. This is a hands‐on individual contributor role with significant cross‐team influence: you’ll lead through technical decisions, incident leadership, and pragmatic improvements to systems and process. Team context Reporting line: Sits on the Platform team reporting to the Head of Platform Engineering. … communicate clearly in writing and help teams adopt consistent operational practices. What success looks like Within your first year, you will have: Reduced incident frequency and/or impact through concrete reliability improvements (e.g., better alerting, safer deploy patterns, guardrails, playbooks). Made incident response more effective ...

security cyber defence team supporting critical national infrastructure and sensitive government programmes. This role requires a proactive security professional with strong monitoring, analysis, and incident triage capabilities within a Security Operations Centre environment. SOC Analyst - Key Responsibilities Monitor and analyse security alerts from SIEM and security tooling platforms Perform … triage and investigation of security events and potential incidents Conduct threat hunting and identify indicators of compromise Escalate and coordinate incident response activities where required Analyse endpoint, network, and cloud security telemetry Develop and improve detection rules and use cases Produce detailed investigation and incident reports Collaborate ...

confidentiality, integrity, and availability of company data. Collaborate with the IT System Administrator to manage and enhance the overall network and system security. Incident Response, Threat Detection & SOC Operations Develop, maintain, and run incident response plans to address security incidents promptly and effectively. … operations, including monitoring, triage, investigation, and response to security alerts. Assess the company threat landscape using MITRE ATT&CK and MITRE D3FEND to identify detection and mitigation opportunities. Connect and maintain log sources into our SIEM to ensure relevant coverage across corporate IT and the Intigriti platform. Write, tune ...

operating companies. You'll combine technical expertise with operational leadership to improve monitoring, strengthen threat detection, optimise security tooling and lead the response to security incidents. This is a hands-on role where you'll have genuine influence over how Security Operations evolves. You'll shape the roadmap, improve … continual improvement of our Security Operations capability, working closely with Security Engineering, technology teams and third-party partners to strengthen monitoring, detection and incident response across the business. You'll own the end-to-end incident management lifecycle, coordinating responses to security incidents, driving investigations, facilitating lessons ...

trusted engineering partner to the desk, ensuring systems are stable, performant, and aligned with business needs. Support live trading environments, including incident response, root cause analysis, and post mortem leadership. Work as a core member of the software engineering team, participating in daily standups and design discussions. Contribute … across trading systems, including automated remediation, self‐healing workflows, and resilience engineering. Use enterprise‐authorized AI capabilities within the work environment to accelerate major‐incident triage, troubleshooting, and post‐incident analysis, validating outputs and handling operational data according to sensitivity and security requirements. Lead reuse‐first adoption ...

Cloud, and manages tooling through infrastructure-as-code. They run a quarterly penetration test programme and are continuously building out our detection and response capability. It's a small team with broad scope, which means your work is visible, your opinions are heard, and there are meaningful problems … solve will matter. Does this sound like you? You're a senior security engineer who operates credibly across cloud security, detection tooling, and incident response, without being narrowly specialised. You own meaningful parts of the security stack, contribute hands‐on to Azure cloud hardening, and show up reliably ...

trusted engineering partner to the desk, ensuring systems are stable, performant, and aligned with business needs. Support live trading environments, including incident response, root cause analysis, and post mortem leadership. Work as a core member of the software engineering team, participating in daily standups and design discussions. Contribute … across trading systems, including automated remediation, self healing workflows, and resilience engineering. Uses enterprise-authorized AI capabilities within the work environment to accelerate major-incident triage, troubleshooting, and post-incident analysis, validating outputs and handling operational data according to sensitivity and security requirements. Leads reuse-first adoption ...

trusted engineering partner to the desk, ensuring systems are stable, performant, and aligned with business needs. Support live trading environments, including incident response, root cause analysis, and post mortem leadership. Work as a core member of the software engineering team, participating in daily standups and design discussions. Contribute … across trading systems, including automated remediation, self healing workflows, and resilience engineering. Uses enterprise-authorized AI capabilities within the work environment to accelerate major-incident triage, troubleshooting, and post-incident analysis, validating outputs and handling operational data according to sensitivity and security requirements. Leads reuse-first adoption ...

actively participates in supporting/governing forums Contribute to the analysis and mitigation of data protection risks Monitors information security incidents, contributing to incident response and root cause analysis. Will own resulting actions as required where they relate to required changes in IT Security and Information Risk Management … policy and controls Security operations and incident response, liaison with internal teams and 3rd party suppliers Desirable Skills and Experience Experience with the design concepts associated with adoption of Cloud platforms (AWS and/or Microsoft Azure) An understanding of the native security capabilities and good practice within ...

with the organisation. As part of our Blue Team, you’ll use the latest intelligence and tooling to analyse information systems to ensure effective incident detection and response. Job Description If you are looking to make your mark on a rapidly growing SecOps team with some very exciting clients … keen interest when it comes to technical cybersecurity topics such as threat hunting, attacker tactics and techniques, monitoring and alerting, threat intelligence, and incident readiness and response. Key responsibilities of the role are summarised below: · Security monitoring and incident response · Detection engineering - Develop, maintain, and enhance security ...

function as part of an ongoing security improvement programme. This is a hands-on role within an established IT Security team, covering security operations, incident response, vulnerability management, and risk assessment across a large enterprise environment. The role You will work across the full breadth of the security … including: Using security tooling to identify, correlate and contain suspicious events, determine root cause, and recommend improvements to systems and procedures. Performing deep-dive incident analysis across multiple data sources, investigating security logs against short and medium-term threats and indicators of compromise (IoCs). Carrying out proactive ...

access. Enterprise directory services, role-based and privileged access controls, Auth0 machine-to-machine credentials, and least-privilege access across engineering and QA. Incident response and resilience. Escalation paths, root-cause analysis and postmortems, production readiness reviews, automated failover, and our disaster recovery and RTO/RPO commitments. … background (GitHub Actions and/or Azure DevOps Pipelines) and infrastructure as code with Terraform, including module development and state management. Production support and incident response experience for a multi-tenant SaaS platform. Containerisation and orchestration in production (Docker, Kubernetes). Solid grounding in identity and access management ...

security policies, standards and procedures. Leading security awareness and training programmes that improve behaviours and strengthen Moneybox’s security culture. Owning Moneybox’s security incident response framework, ensuring the business is prepared to identify, contain, respond to and recover from security incidents effectively. Overseeing vulnerability management, including scanning … operational efficiency. Experience managing security risk in cloud‐based environments, ideally including Azure. Strong understanding of third‐party security risk management. Experience with incident response planning, testing and improvement. Experience reporting security risks, controls and metrics to senior management. Strong communication skills, with the ability to translate technical ...

alerts. Testing & Automation: Build and maintain product-level test harnesses, fuzzing/property tests and CI checks to prevent regressions for business-critical flows. Incident Response Support: Provide product-level Incident Response expertise like test forensic runbooks, support reproduction of payment/settlement incidents, and advise ...

configuration, database schema creation, and operational workflows across cloud and on-prem platforms.* Support production systems with a focus on high availability, disaster recovery, incident response, vulnerability management, patching, and change management.* Containerize applications and support deployments using container orchestration platforms.* Partner with development teams to understand application … engineering tools to accelerate development, automation, troubleshooting, documentation, and operational workflows.* Identify, design, and help implement AI-enabled operational capabilities for infrastructure automation, observability, incident response, and platform engineering.* Contribute to the strategy for safe, practical, and secure adoption of AI across infrastructure and DevOps practices.* Lead ...

assess security risks in runtime and cloud environments, supporting remediationSupport the development and operation of runtime security tooling for production risk visibilityContribute to security incident response activities, including triage and investigationDevelop and maintain incident response processes, runbooks, and detection capabilitiesWork with risk, governance, and control teams … engineering practices across teams to improve code quality, delivery speed, and operational outcomes (e.g., AI-assisted code review/refactoring, test acceleration, release readiness, incident/root-cause analysis), while establishing measurable validation standards (secure coding, peer review, automated testing) and promoting reuse of proven patterns and automation within ...

service and empower engineering teams. Own and evolve monitoring and alerting across production systems - ensuring dashboards and alerts are high-signal and actionable. Lead incident response during production issues. Coordinate across teams, drive resolution, and ensure thorough post-incident reviews with meaningful follow-up actions. Investigate … infrastructure. Who you are Passionate about platform reliability, operational excellence, and building shared ownership of production systems across the wider engineering team. Comfortable leading incident response under pressure and making sound technical decisions with incomplete information. Excited about being part of a fast-growing company that's trying ...

service and empower engineering teams. Own and evolve monitoring and alerting across production systems - ensuring dashboards and alerts are high-signal and actionable. Lead incident response during production issues. Coordinate across teams, drive resolution, and ensure thorough post-incident reviews with meaningful follow-up actions. Investigate … infrastructure. Who you are Passionate about platform reliability, operational excellence, and building shared ownership of production systems across the wider engineering team. Comfortable leading incident response under pressure and making sound technical decisions with incomplete information. Excited about being part of a fast-growing company that's trying ...

security policies, standards and procedures. Leading security awareness and training programmes that improve behaviours and strengthen Moneybox's security culture. Owning Moneybox's security incident response framework, ensuring the business is prepared to identify, contain, respond to and recover from security incidents effectively. Overseeing vulnerability management, including scanning … operational efficiency. Experience managing security risk in cloud-based environments, ideally including Azure. Strong understanding of third-party security risk management. Experience with incident response planning, testing and improvement. Experience reporting security risks, controls and metrics to senior management. Strong communication skills, with the ability to translate technical ...

consistently triaged, remediated, and evidenced. A key part of your role will be advancing the maturity of our technology operations through observability, automation, disciplined incident response, and continuous improvement. You'll identify opportunities for automation and AI-enabled agent workflows to reduce routine operational effort and embed these … Tier 2 function. Drive operational and service excellenceHelp define and own key Tier 2 performance measures, including mean time to resolution, uptime, automated incident resolution rate, and unplanned work ratio. Own vulnerability and patch management measures, including patch compliance, adherence to remediation targets, mean time to remediate, and automated ...

practical use of AI‐assisted features within security tools to improve efficiency and consistency. Maintain andenhanceourtools and platforms to continuously improve ourintelligence,detection and response capability. Perform in-depth investigation and analysis of security alertsto identify and promptly respond to securityevents. Collaboratewith key stakeholders during investigations to gather further … information and coordinate response actions. Derive value fromrelevant threat intelligence to drive proactive action. Influencethe strategic direction of our team by presenting insight into the security events, alerts and incidents we handle. Maintain a broad understanding of IT/online environments and key company assets to enhance decision making ...

reliability, stability, and performance of our production platform. Enforce SLAs across availability, security posture, and resilience. Drive the measures, thresholds, and incident response standards the team operates to. Zero-Downtime Operations - Run and maintain a multi-region, zero-downtime platform. Own deployment strategies (blue/green, canary), traffic … execution to platform thinking. AI & Automation - Lead the team's adoption of AI-assisted operations - embedding AI into CI/CD pipelines, runbook automation, incident response, and developer tooling. Define where AI adds real leverage and own its safe integration into the platform. Your ExperienceDeep expertise with ...

support developers with secure coding practices across Node.js, React Native and C++ environments. Own vulnerability management, including triage, risk prioritisation, remediation tracking and incident response where required. Develop and improve the logging, monitoring and alerting capabilities needed to identify and respond to security threats. Assess emerging threats, including … Could Be Working On Azure and Kubernetes security architecture Application and API security Secure software development and shift‐left security Vulnerability management and incident response AI‐related security and emerging threat management SOC 2 Type II and ISO 27001 maturity Security automation and CI/CD integration Enterprise ...