276 to 300 of 759 Incident Response Jobs in London

Kubernetes-based environments. You will be at the intersection of security and engineering, developing scalable tooling, automating security controls, and enabling robust detection and response capabilities across our cloud infrastructure. In this role, you will require deep technical expertise in cloud environments, Kubernetes security, and platform automation. You will … work closely with Incident Response Engineers and platform teams to ensure that security is seamlessly integrated into our infrastructure and operational workflows. Your role will require participation in a rotating on-call schedule outside of core business hours and over the weekend to ensure security incidents ...

Kubernetes-based environments. You will be at the intersection of security and engineering, developing scalable tooling, automating security controls, and enabling robust detection and response capabilities across our cloud infrastructure. In this role, you will require deep technical expertise in cloud environments, Kubernetes security, and platform automation. You will … work closely with Incident Response Engineers and platform teams to ensure that security is seamlessly integrated into our infrastructure and operational workflows. Your role will require participation in a rotating on-call schedule outside of core business hours and over the weekend to ensure security incidents ...

This is a customer-facing consultancy role where you'll work with a wide range of organisations to design, develop and optimise detection and response capabilities across leading SIEM, XDR and SOAR technologies. You'll combine deep technical expertise with strong consulting skills, helping customers improve their security maturity … framework and current threat techniques. Assessing customer telemetry and identifying opportunities to improve visibility and detection coverage. Building SOAR automations, integrations and response workflows to reduce manual effort. Developing incident response playbooks that support effective Security Operations Centre (SOC) processes. Applying threat intelligence to continuously improve detections ...

cloud environments. Improve detection accuracy through continuous tuning and use case development. Troubleshoot and resolve log ingestion and data quality issues. Threat Detection & Incident Response Design and deploy advanced detection use cases covering modern attack techniques. Translate threat intelligence into actionable monitoring and detection capabilities. Perform proactive threat … hunting activities. Contribute to security playbooks, response procedures, and operational improvements. Security Advisory Provide expert guidance on application and infrastructure security. Support the evaluation and proof of concept of emerging security technologies. Act as a subject matter expert across cyber security initiatives. Required Experience 5+ years' experience in Security ...

Alldus is recruiting a Lead VRM Consultant to join a London-based team on a contract basis. You will implement ServiceNow Vulnerability Response and Security Incident Response, tying in scanning tools and patching platforms to strengthen vulnerability management and remediation timelines. You will collaborate with client security ...

security governance, management and operations. This is a lead individual contributor role able to both implement and verify automated controls in detection and response, identity and access, data protection, product security, or control assurance. The responsibilities below are a broad sample of security engineering across the information security function. … endpoint alerts, to ensure security logging and monitoring coverage meets the needs of CFC's business objectives and its technology and threat environments. Leads incident response operations and continuous improvement from investigation through containment and recovery, publishes incident reports with revised playbooks. Designs and operates threat assessment ...

customer-facing platforms and developer experience. The role combines strong software engineering with operational excellence, taking ownership of platform reliability, observability, automation and incident reduction. It works closely with software engineers, architects, security teams and product teams so services meet availability, performance and resilience targets while enabling rapid … eliminate operational toil through automation, self-service capabilities and better engineering workflows. Participate in on-call rotations supporting production services and lead technical incident response during major incidents. Drive root cause analysis and ensure meaningful preventative actions are delivered after incidents. Improve operational readiness through runbooks, playbooks, automation ...

/CD pipelines and policy-as-code guardrails. Leverage AI agents extensively to automate and optimise platform work - provisioning, cost and performance optimisation, incident response, remediation and documentation. Prepare the infrastructure for AI agents as first-class \"engineers\": safe machine identities, scoped permissions, sandboxes, approval workflows and audit … agent identities; secure by default, least privilege, secrets management and continuous compliance. Apply SRE practices - SLOs/SLIs, observability, capacity planning, resilience and blameless incident management - to keep the platform reliable and cost-efficient. Partner with data engineering to design and optimise data pipelines, data stores and large-scale ...

focus on automation, observability, and operational excellence. You design solutions that account for failure modes and long-term maintainability. Your technical leadership extends to incident management, root cause analysis, and cross-functional collaboration with Engineering, Security, and Cloud teams. At Synopsys, you will own the infrastructure services that underpin … Doing Own the reliability, availability, and operational health of LDAP, SMTP, DNS, DHCP, and other Unix-based infrastructure services. Manage day-to-day operations, incident response, troubleshooting, performance tuning, and capacity planning. Lead infrastructure projects, including solution design, deployment, upgrades, and service modernization. Drive automation through scripting ...

What You'll Be Doing Protect and secure Windows and Linux environments across corporate and production infrastructure Enhance endpoint security controls, monitoring, detection, and response capabilities Help design, implement, and maintain cloud security controls across Azure and other cloud environments Partner with software engineers to embed security throughout … remediation Build and improve DevSecOps capabilities within CI/CD pipelines Lead vulnerability management activities, including scanning, prioritisation, risk assessment, and remediation tracking Support incident response investigations and security monitoring activities Develop security automation to improve operational efficiency and reduce risk Contribute to security architecture reviews and technology ...

What You'll Be Doing Protect and secure Windows and Linux environments across corporate and production infrastructure Enhance endpoint security controls, monitoring, detection, and response capabilities Help design, implement, and maintain cloud security controls across Azure and other cloud environments Partner with software engineers to embed security throughout … remediation Build and improve DevSecOps capabilities within CI/CD pipelines Lead vulnerability management activities, including scanning, prioritisation, risk assessment, and remediation tracking Support incident response investigations and security monitoring activities Develop security automation to improve operational efficiency and reduce risk Contribute to security architecture reviews and technology ...

Monitor and triage security alerts within Splunk SIEM. Investigate security incidents including phishing attacks, credential abuse, malicious process activity, and suspicious network traffic. Support incident response activities through containment and escalation procedures. Maintain detailed security case documentation and investigation notes. Contribute towards operational metrics including MTTD and MTTR … detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with Windows, Linux, authentication systems, and endpoint security logs. Strong communication and stakeholder engagement skills. Desirable Skills ...

report directly to the CTO and have broad scope across the platform (from CI/CD pipelines to multi‐tenant APIs to incident response on authentication flows). Responsibilities Own the secure SDLC: drive SAST, dependency scanning, secrets detection, and PR‐blocking standards across every repository. Harden … Threat‐model product features before they ship, new Auth provider, expanded multi‐tenant APIs, connector executions, agent tool‐calling paths etc. Build detection and response capability around credential and authentication flows, with observability that closes incidents fast. Partner with engineering to raise the bar day‐to‐day: architecture reviews ...

Server, and NAT Gateway. Support hybrid connectivity, including site-to-site and point-to-site VPN and ExpressRoute, monitoring gateway health and assisting with incident response alongside the Network Operations team and carriers. Maintain name resolution across Azure and on-premises using Azure DNS, Private DNS zones … troubleshooting, scripting, and documentation, validating all outputs for accuracy and security. Document runbooks, troubleshooting guides, and known-issue write-ups, and communicate ticket and incident status clearly to technical and non-technical stakeholders. Required Qualifications: Hands-on experience in network, cloud, or platform engineering, including at least 4 years ...

clients on applying AI to modernise IAM — including intelligent access governance, anomalous behaviour detection, AI-driven privileged access controls, and identity threat detection and response (ITDR) — and on securing the identities within AI systems themselves, including machine identities, non-human principals, and access to models, training data, and inference … driven security and the security of AI systems Architect AI-powered security solutions spanning threat detection, SIEM/SOAR modernisation, anomaly detection, automated incident response, and predictive risk modelling Define security architectures for AI pipelines, data platforms, model registries, and inference environments, embedding security from design through ...

Microsoft Defender and Microsoft Sentinel, integrating infrastructure and security tooling for monitoring and detection. When incidents happen, you’ll coordinate and technically lead the response alongside our external Security Operations Centre (SOC). You’ll drive our compliance and accreditation work for ISO 27001, Cyber Essentials, NIST and CMMC … infrastructure, including Microsoft Defender and Sentinel. You’ll have solid networking fundamentals, including VLANs, switches, firewalls, routing and VPNs, and experience supporting security incident response and vulnerability management. You’ll also have working knowledge of security frameworks such as ISO 27001, NIST and Cyber Essentials, with experience supporting ...

testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct incident response planning and tabletop exercises Advise C-level executives on security strategy and risk management Requirements 8+ years in information security with consulting ...

enforce security and technical standards * Lead Infrastructure as Code (IaC) practices across teams and environments * Drive observability, monitoring, logging and audit controls * Support incident response, patching, compliance reporting and technical debt remediation * Partner with developers and delivery teams to improve engineering quality and security * Document security processes, controls ...

observability capabilities. * Ensure platform resilience, availability and operational readiness. * Manage configuration, secrets and environment controls. * Embed security best practice throughout the delivery lifecycle. * Support incident response, troubleshooting and continuous improvement activities. * Work across engineering and assurance teams to ensure environments meet security and operational requirements. * Drive automation ...

with developers, business analysts and client stakeholders to deliver timely solutions. Contributing to ongoing improvements in system reliability, monitoring and support processes. Participating in incident response and out-of-hours support activities when required. What You'll Bring You'll ideally hold a relevant technical qualification and have ...

atdifferent stagesof their careers, from developing practitioners through to experienced specialists. Candidates with strengths in Threat Hunting , Detection Engineering , SOC Operations , or Security Monitoring & Incident Response are encouraged to apply. You do not need to meet every requirement listed below. If you have strong experience ...

maintain disaster recovery, backup and failover strategies Strengthen infrastructure security across areas including network policies, secrets management and platform hardening Establish and improve incident response processes, on‐call practices, runbooks and blameless post‐mortems Work with our Data team to support reliable and scalable PostgreSQL and MongoDB environments ...

particular focus on access controls across the environments and data within the cloud infrastructure. Monitor solutions for critical security events and build investigation and incident response plans, including aiding the configuration and use of logging and SIEM tools. Offer consultancy as an SME to all business units ...

when they occur, quickly recover service.* Partner with development teams to improve system reliability, observability, and release velocity.* Participate in on-call rotations, incident response, postmortems, and root cause analysis and resolution.* Be a vocal advocate of strong/sound engineering practices that allow us to build, deploy ...

controls for internal versus external (client-facing) views of agent behaviour, including how outputs are reviewed, sanitised or gated before release. Define rollback and incident-response procedures for agentic systems, so a compromised or misbehaving agent can be safely withdrawn or reverted. Track emerging regulatory expectations relevant ...