26 to 50 of 275 Incident Response Jobs in London

reliability problems across our stack, then design and implement software and systems to create step-function improvements. You will design robust observability solutions, lead incident response, automate operational tasks, and continuously improve our infrastructure's reliability, all while mentoring and educating the broader engineering team to make reliability … Build systems to monitor and report on these metrics, holding teams accountable and ensuring we maintain high reliability standards while balancing innovation speed. Lead Incident Management and Response: Act as a senior leader during high-impact incidents, guiding the team to rapid resolution. Conduct thorough, blameless post-mortems ...

Cyber Response Assistant Manager (Proactive Consulting) This role requires current SC or DV clearance, or eligibility and willingness to obtain clearance. About the role The Cyber Response Assistant Manager role will be working in the Cyber Response Services (CRS) Team within our Advisory practice. Your specific focus … will be in the domain of proactive advice and guidance as it relates to Security Operations/Defensive Cyber Operations (Incident Management, Vulnerability Management, Threat Intelligence). Organisations face increasing challenges operating effective security operations capabilities across threat intelligence, vulnerability management and incident management. This role helps clients ...

client is seeking a SOC Analyst to join a security operations team in London. The role is focused on real-time monitoring, investigation, and incident response across a modern enterprise security environment. - Key Responsibilities Monitor, triage, and respond to security alerts across multiple platforms, including Microsoft and endpoint … Optimise and tune detection rules, policies, and alerting mechanisms to improve SOC efficiency. Collaborate with internal teams to support security operations, threat analysis, and incident recovery. Produce clear incident documentation, reports, and recommendations for continuous improvement. Contribute to maintaining and enhancing SOC processes, runbooks, and operational workflows. Required ...

Integrate security scanning and compliance checks into deployment pipelines. Implement monitoring, logging and alerting to improve platform reliability. Support production environments and participate in incident response and post-incident reviews. Maintain cloud networking, storage, compute and database services. Collaborate with development teams to improve automation and platform … Infrastructure Automation, DevSecOps, Security Scanning, Checkov, Trivy, Snyk, Vulnerability Management, Least Privilege, Access Management, CloudFormation, AWS CDK, GitOps, ArgoCD, Flux, Monitoring, Observability, Logging, Alerting, Incident Response, Reliability Engineering, Grafana, Datadog, ELK Stack, OpenSearch, Cloud Operations, Linux, Networking, Cloud Native, Platform Automation, Troubleshooting, Infrastructure Reliability, DevOps Practices, Software Delivery ...

Cloud, and manages tooling through infrastructure-as-code. They run a quarterly penetration test programme and are continuously building out our detection and response capability. It's a small team with broad scope, which means your work is visible, your opinions are heard, and there are meaningful problems … solve will matter. Does this sound like you? You're a senior security engineer who operates credibly across cloud security, detection tooling, and incident response, without being narrowly specialised. You own meaningful parts of the security stack, contribute hands‐on to Azure cloud hardening, and show up reliably ...

responsible for leading both our Cloud Platform and Enterprise Service orgs: Leading and developing two engineering teams — Cloud Platform (cloud infrastructure, observability, SRE, incident response) and Enterprise Services (IT support, IAM, Okta, Slack and core SaaS) — setting technical direction, hiring and performance standards across both. Delivering the reliability … performance and cost-efficiency of the cloud platform underpinning production services, including SLOs, on‐call and incident response practices, and post‐incident learning, in line with the broader infrastructure strategy. Executing the roadmap for enterprise services and identity, treating internal IT as an engineering discipline — automation‐first ...

Developer Empowerment: Building and maintaining 'golden path' templates for secure service deployment, enabling feature teams to confidently and safely push code without compromising security. Incident Response: Contributing expertise to the security incident response team, helping to swiftly and effectively manage and resolve security events. What ...

trusted engineering partner to the desk, ensuring systems are stable, performant, and aligned with business needs. Support live trading environments, including incident response, root cause analysis, and post mortem leadership. Work as a core member of the software engineering team, participating in daily standups and design discussions. Contribute … across trading systems, including automated remediation, self‐healing workflows, and resilience engineering. Use enterprise‐authorized AI capabilities within the work environment to accelerate major‐incident triage, troubleshooting, and post‐incident analysis, validating outputs and handling operational data according to sensitivity and security requirements. Lead reuse‐first adoption ...

Role Title: Information Security Senior Consultant – Detection and Response (Europe & Americas) About Westpac: Westpac is one of the world’s oldest banks and a leading financial services organisation with a strong presence across Australia, New Zealand and key international markets. We support individuals, businesses and institutions through a broad … with our customers and communities. About the Team: This role is a core part of Westpac’s global 24/7 cybersecurity monitoring and incident response capability - the bank’s first line of cyber defence. How will I help? You will be responsible for analysing and responding ...

responsible for leading both our Cloud Platform and Enterprise Service orgs: Leading and developing two engineering teams — Cloud Platform (cloud infrastructure, observability, SRE, incident response) and Enterprise Services (IT support, IAM, Okta, Slack and core SaaS) — setting technical direction, hiring and performance standards across both. Delivering the reliability … performance and cost-efficiency of the cloud platform underpinning production services, including SLOs, on-call and incident response practices, and post-incident learning, in line with the broader infrastructure strategy. Executing the roadmap for enterprise services and identity, treating internal IT as an engineering discipline — automation-first ...

security policies, standards and procedures. Leading security awareness and training programmes that improve behaviours and strengthen Moneybox’s security culture. Owning Moneybox’s security incident response framework, ensuring the business is prepared to identify, contain, respond to and recover from security incidents effectively. Overseeing vulnerability management, including scanning … operational efficiency. Experience managing security risk in cloud‐based environments, ideally including Azure. Strong understanding of third‐party security risk management. Experience with incident response planning, testing and improvement. Experience reporting security risks, controls and metrics to senior management. Strong communication skills, with the ability to translate technical ...

Security Manager IT Security Manager opportunity for a security leader with a strong SecOps/Incident Response background and broad cyber security management experience to lead across SecOps, Engineering, Architecture and MSSP, driving security operations and strategic initiatives across on-premises and cloud environments. Day Rate: £800 - £850pd … function across both on-premises and cloud environments, ensuring the effective delivery of security operations and strategic security initiatives. Leverage your strong SOC and Incident Response background to oversee threat detection, incident management, vulnerability management, and the continuous enhancement of security capabilities. Manage and develop a team ...

security policies, standards and procedures. Leading security awareness and training programmes that improve behaviours and strengthen Moneybox’s security culture. Owning Moneybox’s security incident response framework, ensuring the business is prepared to identify, contain, respond to and recover from security incidents effectively. Overseeing vulnerability management, including scanning … operational efficiency. Experience managing security risk in cloud‐based environments, ideally including Azure. Strong understanding of third‐party security risk management. Experience with incident response planning, testing and improvement. Experience reporting security risks, controls and metrics to senior management. Strong communication skills, with the ability to translate technical ...

critical national infrastructure programme. You will engage with suppliers, systems integrators, emergency services and wider government stakeholders. Key responsibilities Support cyber security operations, including incident response, vulnerability management and threat monitoring. Work with suppliers and systems integration partners to ensure security deliverables meet contractual and programme requirements. Support … development of an end-to-end Security Operations Centre. Review and maintain operational procedures, incident playbooks and security reporting. Lead and contribute to security governance forums. Advise stakeholders on security risks, mitigations and incident handling. Support security investigations and coordinate activity across programme, government and emergency-service teams. ...

KPMG is seeking a Cyber Response & Recovery Manager (German speaker) to lead reactive DFIR engagements in the CRS Team within Cyber Advisory. This hands-on role requires managing medium to large incidents, coordinating with the leadership, and developing in-house response capabilities. You will travel on short notice … when not responding, help mature clients' incident response capabilities. Based in London or Manchester, the role offers exposure to national critical incidents, opportunities #J-18808-Ljbffr ...

high-performing Information Security team, fostering accountability, engagement, and continuous improvement. Drive the Bank's cyber defence capability, overseeing security operations, threat intelligence, incident response, vulnerability management, and technical assurance activities. Strengthen governance frameworks, ensuring ongoing compliance with FCA, PRA, operational resilience, and industry security standards. Build trusted … within a regulated financial services environment. Strong understanding of industry recognised frameworks such as ISO 27001, NIST, and CIS. Experience leading Security Operations, cyber incident response, governance, and risk management activities. Strong technical understanding of cloud security, identity and access management, enterprise infrastructure, and third-party security risk. ...

compliance with recognised security frameworks including ISO 27001, NIST Cyber Security Framework and IEC 62443.* Lead security architecture, Security Operations Centre (SOC), vulnerability management, incident response and cyber resilience activities.* Conduct technology and cyber risk assessments, developing mitigation plans and providing executive reporting.* Lead business continuity and disaster … strategies. (E)* Demonstrated experience managing enterprise infrastructure including cloud, networking, datacentres, storage, end-user computing and cyber security technologies. (E)* Experience leading Security Operations, incident response, vulnerability management, technology transformation and cloud migration programmes. (E)* Experience managing technology budgets, strategic suppliers, managed service providers and vendor contracts. ...

that everything else runs on. You'll work across the full platform lifecycle—from infrastructure design and provisioning through to CI/CD, observability, incident response and cost optimisation. The role suits someone who pairs strong infrastructure-as-code discipline with a genuine automation-first mindset … Pulumi, CloudFormation or equivalent) and the workflows around it Operate Kubernetes clusters and supporting platform services Implement observability—metrics, logs, traces, dashboards, alerting Lead incident response, root-cause analysis and reliability improvements Drive cloud cost optimisation and capacity planning Implement security hardening, secret management and compliance controls Partner ...

sufficient to engage credibly with the team Critically reviewing supplier technical proposals, architectures and security testing reports (e.g. SOC 2, penetration test reports) Supporting incident response and operational infosec activities as required Maintaining awareness of AI developments relevant to information security, supporting the AI governance framework, and identifying … case risk assessments Exposure to property technology Experience reviewing penetration test reports, SOC 2 reports or supplier security architectures Hands-on experience supporting incident response or security operations Desirable accreditations: ISO 27001 Lead Auditor/Implementer, ISO 27005, CISSP, CISM or equivalent, and CompTIA Security+ or an equivalent ...

instrumental in defining and upholding Service Level Objectives (SLOs) and Service Level Indicators (SLIs), implementing effective monitoring and alerting strategies, and leading operational incident response processes. What you'll do The core responsibility is to implement, maintain, and continuously improve the foundational platform infrastructure that powers all engineering … controlled, and auditable. Proactively manage the capacity of the infrastructure to consistently meet or exceed Service Level Objectives for latency, error rates, and availability. Incident Response and Post‐Mortems: Act as first‐line responders for critical system incidents. Triage, diagnose, and resolve complex production issues rapidly. Drive ...

core priority of this role. The successful candidate will take a leading part in strengthening and evolving the firm's security posture in response to an increasingly sophisticated threat landscape, including emerging risks associated with AI. This is a technically demanding role that combines proactive security ownership with infrastructure … office‐based and requires five days per week on‐site presence. Key Responsibilities Lead the firm's security operations function, owning threat detection, incident response, and vulnerability management end‐to‐end Monitor, triage, and respond to security events across the environment, including log analysis, anomaly detection, and threat ...

Flagstone is seeking a senior security engineer to own and operate detection and incident response across our Azure cloud security stack. You will work hands-on with Microsoft Sentinel, Defender for Cloud, and XDR tooling, while coordinating remediation with engineering squads. You'll drive security through code, pipelines ...

Docker, Kubernetes (GKE/AKS/EKS), and Cloud Run. Implement comprehensive monitoring and observability using Vertex AI Inspector, LangSmith, or Azure Monitor. Drive incident response and post-mortems for production AI system failures. Act as a technical lead on key AI engineering workstreams, shaping architecture and approach. … Google AI SDKs Vertex AI Azure AI services LangGraph CrewAI RAG pipelines Soft Skills leadership mentoring collaboration problem-solving communication design discussions code review incident response optimisation best practices #J-18808-Ljbffr ...

Docker, Kubernetes (GKE/AKS/EKS), and Cloud Run. • Implement comprehensive monitoring and observability using Vertex AI Inspector, LangSmith, or Azure Monitor. • Drive incident response and post-mortems for production AI system failures. • Act as a technical lead on key AI engineering workstreams, shaping architecture and approach. … Google AI SDKs Vertex AI Azure AI services LangGraph CrewAI RAG pipelines Soft Skills leadership mentoring collaboration problem-solving communication design discussions code review incident response optimisation best practices #J-18808-Ljbffr ...

Prima is seeking a Security Engineer focused on Incident Response to join our Security Team. You will work within a vibrant engineering culture with 350+ engineers across software, infrastructure, operations and security. The role emphasizes proactive monitoring, detections, and automation to safeguard data and drivers on our platform. ...